Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: The Stealth Emergence of FROST: Tracking Users via SSD Latency Side-Channels
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:26 +0000
════════════════════════
⌗ Tags: #Data Leak #Apple M2 Mac web tracking #browser sandbox data exfiltration #browser side_channel storage vulnerability #browser storage quota mitigations #cross_browser web tracking mechanics #FROST SSD fingerprinting attack #Hannes Weissteiner DIMVA conference research #hardware cache timing exploitation #OPFS read write latency telemetry #Origin Private File System tracking
Information Security News
FROST SSD Fingerprinting Attack Tracks Users via Storage
Researchers unveil the FROST SSD fingerprinting attack. Learn how malicious JavaScript reads OPFS storage latency to track open tabs and background apps.
13 views
Daily Writeups
⤷ Title: Proactive Vulnerability Mitigation: Anthropic Integrates Security Guardrails into Claude Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:19:11 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic security_guidance extension #automated SAST developer tool #background threat pattern analysis #Claude Agent SDK integration #Claude Code security plugin #custom security policy YAML #git diff vulnerability scanning #real_time AI code auditing #secure coding practices #terminal vulnerability annotations
Information Security News
Claude Code Security Plugin: Real-Time AI Code Auditing
Anthropic launches a native Claude Code security plugin. Learn how this real-time AI security-guidance tool checks your code for bugs before you commit.
14 views
Daily Writeups
⤷ Title: Oracle Releases Massive May 2026 Critical Security Patch Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:40:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #database security #Enterprise Software #Oracle #Patch Tuesday #REST Data Services #security advisory #vulnerability management
Daily CyberSecurity
Oracle Releases Massive May 2026 Critical Security Patch Update
Stay secure with the latest Oracle security patch updates. Learn how these fixes address critical software vulnerabilities across multiple enterprise platforms.
8 views
Daily Writeups
⤷ Title: Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:07:16 +0000
════════════════════════
⌗ Tags: #Malware #Cloud Security #Credential Theft #Microsoft Defender #npm registry #supply chain attack #Typosquatting #vpmdhaj cluster
Daily CyberSecurity
Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
A critical npm supply chain attack exploits lookalike packages to distribute credential harvesting malware. Learn how to protect your cloud assets.
8 views
Daily Writeups
⤷ Title: KubeVirt Privilege Escalation Flaw Exposes Kubernetes Clusters to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:15:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Container Runtime Hijacking #CVE_2026_7374 #Kubernetes Security #KubeVirt #OpenShift Flaw #privilege escalation #Symlink Validation
Daily CyberSecurity
KubeVirt Privilege Escalation Flaw Exposes Kubernetes Clusters to Takeover
Discover how the critical KubeVirt privilege escalation flaw (CVE-2026-7374) allows container runtime hijacking and creates a cluster takeover risk.
18 views
Daily Writeups
⤷ Title: Solidity Basics Part 2: OOP & Inheritance
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:31:01 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #infosec #solidity #web3
Medium
Solidity Basics Part 2: OOP & Inheritance
Series: Web3 Security Zero se Advance 🛡️ | Article #6 By HackerMD | 25 min read
16 views
Daily Writeups
⤷ Title: They Closed It as N/A. Then They Silently Patched It. Here’s The Full Story.
════════════════════════
𐀪 Author: $cr1p7 k!ddi3
════════════════════════
ⴵ Time: Fri, 29 May 2026 02:55:46 GMT
════════════════════════
⌗ Tags: #open_redirect #optional_chaining #critical #bug_bounty #oauth_security
Medium
🔴 They Closed It as N/A. Then They Silently Patched It. Here’s The Full Story.
A Critical P1 Bug Chain on a Fintech Platform — Open Redirect → OAuth Token Theft → Full Account Takeover | Intigriti Disclosure
16 views
Daily Writeups
⤷ Title: Building an XDR-Style Security Bot in OpenClaw to Watch Your Logs 24/7
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:55:55 GMT
════════════════════════
⌗ Tags: #programming #ui #openclaw #hacking #xdr
Medium
Building an XDR-Style Security Bot in OpenClaw to Watch Your Logs 24/7
Security vendors will sell you an XDR platform that costs more than your car and still misses the weird stuff because it was trained on…
15 views
Daily Writeups
⤷ Title: Digital Forensics Fundamental
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:35:28 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #ethical_hacking #cyber_security_awareness #infosec
Medium
Digital Forensics Fundamental
Introduction
16 views
Daily Writeups
⤷ Title: iOS App Pentesting for Beginners: Your First Apple Hack in 2025
════════════════════════
𐀪 Author: Akifkhan
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:24:16 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #ios
Medium
iOS App Pentesting for Beginners: Your First Apple Hack in 2025
Tags: ios-security mobile-pentesting ethical-hacking cybersecurity frida objection bug-bounty reverse-engineering infosec beginner
18 views
Daily Writeups
⤷ Title: Peak Hill — TryHackMe CTF Writeup | Pickle Deserialization & Python Exploitation
════════════════════════
𐀪 Author: Arun1x
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:48:31 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #penetration_testing #tryhackme_writeup #cybersecurity #exploit_development
Medium
Peak Hill — TryHackMe CTF Writeup | Pickle Deserialization & Python Exploitation
Cracking Pickle-Encoded Credentials, Decompiling Python Bytecode, and Exploiting Deserialization for Root
21 views
Daily Writeups
⤷ Title: JavaScript: Simple Demo — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:07:07 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #tryhackme_walkthrough #javascript #tryhackme_pre_security
Medium
JavaScript: Simple Demo — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: JavaScript: Simple Demo
Room URL: https://tryhackme.com/room/javascriptsimpledemo
Difficulty: Medium
Please…
19 views
Daily Writeups
⤷ Title: TryHackMe Payload — AI Supply Chain Security Walkthrough
════════════════════════
𐀪 Author: Jose A Ruiz Marquez
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:52:03 GMT
════════════════════════
⌗ Tags: #ai #supply_chain #cybersecurity #tryhackme_walkthrough #tryhackme
Medium
TryHackMe Payload — AI Supply Chain Security Walkthrough
A Practical DFIR Investigation into Malicious ML Artefacts, Unsafe Deserialization, and Inference-Time Manipulation
15 views
Daily Writeups
⤷ Title: Penetration Testing Frameworks (TryHackMe Room)
════════════════════════
𐀪 Author: Amr Sebie
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:43:05 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_walkthrough #tryhackme_writeup #ctf
Medium
Penetration Testing Frameworks (TryHackMe Room)
Lab link:https://tryhackme.com/room/penetrationtestingframeworks
17 views
Daily Writeups
⤷ Title: Prompt Injection Walkthrough | TryHackMe
════════════════════════
𐀪 Author: Akash Kumar
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:42:57 GMT
════════════════════════
⌗ Tags: #tryhackme #prompt_injection_attack #writing_prompts #ai_injection_prompt #llm_prompt_injection
Medium
Prompt Injection Walkthrough | TryHackMe
Room: https://tryhackme.com/room/promptinjectionls
Youtube Link : https://youtu.be/apQ-HQPbOTA https://youtu.be/6gQrEz0xBMY
16 views
Daily Writeups
⤷ Title: Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
════════════════════════
𐀪 Author: Dhruv Thakur
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:03:13 GMT
════════════════════════
⌗ Tags: #openid_connect #sso #aml #api_security #oauth
Medium
Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
When you click “Sign in with Google” on some app you just downloaded, something interesting happens. The app gets access to your data. Your…
26 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Using @nestjs/throttler
════════════════════════
𐀪 Author: Ravi Mewada
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #backend #rate_limiting #nodejs #api_security #nestjs
Medium
NestJS Rate Limiting Using @nestjs/throttler
When we build APIs, one thing that is really important, for security is rate limiting.
32 views
Daily Writeups
⤷ Title: Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 29 May 2026 11:27:41 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Algorithmic Infiltration: Microsoft Unmasks Generative AI Poisoning in Cryptojacking Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:43:30 +0000
════════════════════════
⌗ Tags: #Malware #autorun.dll sideloading exploit #cryptocurrency harvesting evasion techniques #Dynu dynamic DNS infrastructure #Fake hardware monitoring cryptojacker #HWMonitor FurMark cloned malware #Microsoft Defender registry exclusions #poisoned AI chatbot search results #ScreenConnect remote access trojan #SimpleRunPE.exe process injection #smart GPU throttling miner
Information Security News
Fake Hardware Monitoring Cryptojacker Hijacks High-End GPUs
Microsoft exposes a stealthy fake hardware monitoring cryptojacker mimicking FurMark and HWMonitor. It masks its GPU usage to avoid detection.
29 views
Daily Writeups
⤷ Title: Race Conditions Are Simpler Than You Think (Here’s How I Test for Them)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:48:49 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_hunting #bug_bounty #bug_bounty_tips #bug_bounty_writeup
Medium
Race Conditions Are Simpler Than You Think (Here’s How I Test for Them)
I used to hear “race condition” and zone out. Sounded like something you needed a PhD for. Multi-threading. Timing windows. Complex stuff. Then I actually found one by accident and realized how …
22 views
Daily Writeups
⤷ Title: Web Server Attacks — I
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:49:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_server_attacks #tryhackme
Medium
Web Server Attacks — I
Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.
25 views