Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Escalating Rift Over Zero-Day Disclosures: Microsoft Condemns Uncoordinated Vulnerability Release
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:47:14 +0000
════════════════════════
⌗ Tags: #Microsoft #Vulnerability #GitHub profile ban retaliation #GreenPlasma privilege escalation tool #Microsoft Threat Intelligence defense response #Nightmare Eclipse security researcher #physical full disk encryption attack #pre_boot authentication TPM PIN mitigation #uncoordinated vulnerability disclosure dispute #Windows Recovery Environment bypass #WinRE FsTx folder vulnerability #YellowKey BitLocker zero_day exploit
Information Security News
YellowKey BitLocker Zero-Day Exploit Bypasses Windows Security
A critical YellowKey BitLocker zero-day exploit allows physical attackers to bypass Windows encryption via WinRE. Learn about the ongoing disclosure battle.
17 views
Daily Writeups
⤷ Title: North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:36:07 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail #Cryptocurrency Theft #Cython Malware #developer security #Famous Chollima #InvisibleFerret #Void Dokkaebi
Daily CyberSecurity
North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation
TrendAI Research exposes the new Void Dokkaebi Cython malware campaign. Learn how InvisibleFerret uses binary compilation to evade security teams.
20 views
Daily Writeups
⤷ Title: CIFSwitch Local Root Exploit: Public Details and PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:01:55 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #Asim Manizada #cifs_utils #CIFSwitch #Linux Kernel #Local Privilege Escalation #Public PoC #vulnerability disclosure
Daily CyberSecurity
CIFSwitch Local Root Exploit: Public Details and PoC Disclosed
Security researcher Asim Manizada has released public details and a PoC for the CIFSwitch local root exploit impacting many Linux systems.
18 views
Daily Writeups
⤷ Title: New Showboat Linux Malware Targets Global Telecommunications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 07:10:39 +0000
════════════════════════
⌗ Tags: #Malware #Black Lotus Labs #Linux post_exploitation #PRC Threat Actors #Showboat malware #Telecommunications cyberattack #threat intelligence
Daily CyberSecurity
New Showboat Linux Malware Targets Global Telecommunications
Discover the new Showboat Linux malware framework uncovered by Black Lotus Labs. Learn how PRC threat actors target telecommunications networks.
25 views
Daily Writeups
⤷ Title: Introducing Insights: self-serve reporting for security teams
════════════════════════
𐀪 Author: Andrea Meza
════════════════════════
ⴵ Time: Thu, 28 May 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Product Updates
Intigriti
Insights self-serve reporting for security teams
Insights is our revamped analytics dashboard experience inside Intigriti. It brings key performance metrics and trends together in one place, with flexible filtering and exportable charts, so you can explain outcomes, track trends, and stay on top of operational…
31 views
Daily Writeups
⤷ Title: 2FA Bypass via redirect uri manipulation
════════════════════════
𐀪 Author: Ahmadfaizabdillah
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:26:19 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_writeup #authentication_bypass #burpsuite #bug_bounty
Medium
2FA Bypass via redirect uri manipulation
Summary
21 views
Daily Writeups
⤷ Title: Inside Real Scam Investigations — How Modern Digital Fraud Operations Really Work (Series…
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:59:03 GMT
════════════════════════
⌗ Tags: #osint #hacking #security #cybersecurity #cybercrime
Medium
🚨 Inside Real Scam Investigations — How Modern Digital Fraud Operations Really Work (Series Introduction)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
23 views
Daily Writeups
⤷ Title: CISSP Chapter 3 — Part 3: Continuity Planning Protects More Than Systems.
════════════════════════
𐀪 Author: Atakan ATAK
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:01:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #isc2 #infosec #cybersecurity_awareness #cissp
Medium
CISSP Chapter 3 — Part 3: Continuity Planning Protects More Than Systems.
Strategy development, protection of people, facilities, and infrastructure, alternate sites, hardening, and the continuity of operations…
25 views
Daily Writeups
⤷ Title: Broken Authentication Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:11:58 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_writeup #tryhackme_walkthrough #penetration_testing
Medium
Broken Authentication Walkthrough Notes | TryHackMe
Breaking weak authentication using simple techniques and logic flaws
14 views
Daily Writeups
⤷ Title: Week 9: The OSI Model & TCP/IP — The Foundation Every Ethical Hacker Must Know
════════════════════════
𐀪 Author: Nishant kumar
════════════════════════
ⴵ Time: Thu, 28 May 2026 07:52:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #networking #cybersecurity #soc_analyst #ethical_hacking
Medium
Week 9: The OSI Model & TCP/IP — The Foundation Every Ethical Hacker Must Know
Before you ethically hack a network, you need to understand how it breathes.
18 views
Daily Writeups
⤷ Title: Why More Non-IT Students Are Choosing Cybersecurity in 2026
════════════════════════
𐀪 Author: Cozonix
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:37:03 GMT
════════════════════════
⌗ Tags: #cybersecurity_careers #cybersecurity #ethical_hacking #career_development #tech_education
Medium
Why More Non-IT Students Are Choosing Cybersecurity in 2026
A few years ago, if someone mentioned cybersecurity, most students immediately thought it was only for programmers or computer science…
22 views
Daily Writeups
⤷ Title: How a Leaked AI Key Burned $32,000 in 24 Hours — and Why Most Startups Need an AI Gateway Sooner…
════════════════════════
𐀪 Author: Aikeyfounder
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:19:18 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #startup #software_engineering #api_security #devops
Medium
How a Leaked AI Key Burned $32,000 in 24 Hours — and Why Most Startups Need an AI Gateway Sooner Than They Think
Model quality gets all the attention. In production, uncontrolled usage is often the bigger risk.
32 views
Daily Writeups
⤷ Title: Chaining CSRF and XSS to Remote Code Execution in a WordPress Plugin
════════════════════════
𐀪 Author: arian_lord3
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:00:35 GMT
════════════════════════
⌗ Tags: #xss_attack #wordpress_vulnerabilities #bug_bounty_writeup #csrf_attack #cybersecurity
Medium
Chaining CSRF and XSS to Remote Code Execution in a WordPress Plugin
A step-by-step walkthrough of how two limited vulnerabilities in Quiz and Survey Master 4.7.7 can be chained into full server compromise.
46 views
Daily Writeups
⤷ Title: State-Sponsored Actors Operationalize ROADtools Framework in Cloud Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 09:41:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Security #Cloud Security #Entra ID #Incident Response #ROADtools #threat intelligence #Token Manipulation
Daily CyberSecurity
State-Sponsored Actors Operationalize ROADtools Framework in Cloud Campaigns
Discover how nation-state hackers leverage the ROADtools cloud attack toolkit to compromise Entra ID environments and bypass MFA controls.
34 views
Daily Writeups
⤷ Title: Cybe Uncle — a cybersecurity community for EVERYONE.
════════════════════════
𐀪 Author: Uncle
════════════════════════
ⴵ Time: Thu, 28 May 2026 10:41:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #ai #cybersecurity #security
Medium
🧠 Cybe Uncle — a cybersecurity community for EVERYONE.
From first-time learners to seasoned masters. From bug bounties to red/blue/purple/black teams. From manual pentesting to AI security.
27 views
Daily Writeups
⤷ Title: How I Found a Gambling Website Hosted on an Official Company Subdomain — Bug Bounty Write-up
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Thu, 28 May 2026 09:08:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #cybersecurity #hacking
Medium
How I Found a Gambling Website Hosted on an Official Company Subdomain — Bug Bounty Write-up
An official subdomain of a major hosting company was serving a fully operational third-party online casino website. The DNS record was…
23 views
Daily Writeups
⤷ Title: Writeup for CyLab/picoCTF challenge “Irish-Name-Repo-1”
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Thu, 28 May 2026 11:01:00 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #ctf_writeup #hacking #cylab
Medium
Writeup for CyLab/picoCTF challenge “Irish-Name-Repo-1”
Learn how CyLab’s “Irish-Name-Repo-1” challenge shows how SQL injection can bypass a login form when user input is passed directly into…
14 views
Daily Writeups
⤷ Title: How I Found a Source Map Exposure Leading to an Account Takeover Chain — Bug Bounty Writeup
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Thu, 28 May 2026 10:55:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #pentesting #bug_bounty
Medium
How I Found a Source Map Exposure Leading to an Account Takeover Chain — Bug Bounty Writeup
Introduction
16 views
Daily Writeups
⤷ Title: How I Found a Publicly Exposed Internal Media Platform Running Critical CVEs
════════════════════════
𐀪 Author: knox99
════════════════════════
ⴵ Time: Thu, 28 May 2026 10:37:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #bugbounty_writeup #responsibeldisclosure #web_security #infosec
Medium
How I Found a Publicly Exposed Internal Media Platform Running Critical CVEs
A passive recon story — no exploitation, just observation, and three CVSS 9.8 vulnerabilities staring back at me.
12 views
Daily Writeups
⤷ Title: What’s Really Breaking Cybersecurity in 2026 And What You Can Do About It
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Thu, 28 May 2026 09:35:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #generative_ai_tools #technology #ai #infosec
Medium
What’s Really Breaking Cybersecurity in 2026 And What You Can Do About It
If you’ve been in security long enough, you know the feeling. That creeping sense that things are moving faster than anyone can reasonably…
11 views
Daily Writeups
⤷ Title: Weak Account Registration Control — IP Rotation Bypass
════════════════════════
𐀪 Author: James Wizz
════════════════════════
ⴵ Time: Thu, 28 May 2026 09:45:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing
Medium
Weak Account Registration Control — IP Rotation Bypass
Observation
15 views