Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: The Vulnerability Rift: Microsoft Realigns Posture Toward Security Researchers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:18:37 +0000
════════════════════════
⌗ Tags: #Microsoft #coordinated vulnerability disclosure #Katie Moussouris infosec #Microsoft zero day dispute #MSRC researcher backlash #Nightmare Eclipse vulnerability #Secure Boot BitLocker bypass
Information Security News
Microsoft Zero Day Dispute: Legal Action Updates
Analyze the ongoing Microsoft zero day dispute. Learn how Microsoft responded to community backlash over research disclosures.
19 views
Daily Writeups
⤷ Title: The Netlogon Imperative: Critical Windows Server Exploitation Intensifies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:12:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Directory threat intelligence #buffer overflow patch #CCB Belgium security warning #CVE_2026_41089 Netlogon exploit #domain controller RCE #Windows Server vulnerability
Information Security News
CVE-2026-41089 Netlogon Exploit: Windows Server Flaw
Analyze the active CVE-2026-41089 Netlogon exploit threat. Learn how a critical buffer overflow puts Windows domain controllers at risk.
17 views
Daily Writeups
⤷ Title: The Cybercrime Continuum: Infrastructure Destruction Squad and the Blacknet Ecosystem
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:01:57 +0000
════════════════════════
⌗ Tags: #Malware #automated ransomware builder #BLACKNET_00 ransomware analysis #hacktivist cybercrime syndicate #industrial control system security #Infrastructure Destruction Squad #KELA threat intelligence
Information Security News
BLACKNET-00 Ransomware Analysis: Hacktivist Threat
Explore our detailed BLACKNET-00 ransomware analysis. Learn how the Infrastructure Destruction Squad blends hacktivism with automated extortion.
19 views
Daily Writeups
⤷ Title: NVIDIA NVTabular Vulnerability Patched to Block Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:49:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_24221 #CVE_2026_24237 #Deserialization Bug #Machine Learning Security #NVIDIA NVTabular #Software Patch
Daily CyberSecurity
NVIDIA NVTabular Vulnerability Patched to Block Remote Code Execution
An urgent NVIDIA NVTabular vulnerability patch fixes high-severity bugs. Secure your systems against this untrusted deserialization flaw.
20 views
Daily Writeups
⤷ Title: The Sunset of Windsurf: Corporate Convergence and the Rise of Devin
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:12:44 +0000
════════════════════════
⌗ Tags: #Technology #automated developer workspace tools #Codeium historical acquisitions #Devin AI coding agent rebrand #Jeff Wang Cognition AI #software development IDE migration #Windsurf Devin Desktop integration
Daily CyberSecurity
The Sunset of Windsurf: Corporate Convergence and the Rise of Devin
Discover the details behind the Windsurf Devin Desktop integration. Learn how Cognition AI rebranded the platform and what happens to user subscriptions.
16 views
Daily Writeups
⤷ Title: HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:05:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_49975 #Denial of Service #HPACK Vulnerability #HTTP/2 Bomb #Public Exploit Code #Web Server Security
Daily CyberSecurity
HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
The dangerous HTTP/2 Bomb exploit has been publicly disclosed with a PoC. Learn how this memory exhaustion flaw threatens major enterprise web servers.
12 views
Daily Writeups
⤷ Title: macOS Cryptocurrency Malware Powers Stealthy JINX-0164 Operations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:04:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AUDIOFIX #JINX_0164 #macOS Malware #Minirat #supply chain attack
Daily CyberSecurity
macOS Cryptocurrency Malware Powers Stealthy JINX-0164 Operations
A dangerous macOS cryptocurrency malware wave drives the latest JINX-0164 developer campaign. Learn how to secure your repositories now.
11 views
Daily Writeups
⤷ Title: The Silicon Harvest: Google Seeks Premium Codebases for AI Refinement
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:50:57 +0000
════════════════════════
⌗ Tags: #Technology #AI Training Data #app development #Gemini AI #google #Google Play Store #Software Engineering #Source Code Licensing
Daily CyberSecurity
The Silicon Harvest: Google Seeks Premium Codebases for AI Refinement
Google licenses app code from Play Store developers to train Gemini AI models and compete with GitHub Copilot and Claude Code. Learn more.
16 views
Daily Writeups
⤷ Title: Critical Apache Solr Security Flaw Exposes Clusters to Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:40:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Solr #Authentication Bypass #CVE_2026_44825 #default credentials #Enterprise Search Security
Daily CyberSecurity
Critical Apache Solr Security Flaw Exposes Clusters to Remote Takeover
A high-severity Apache Solr default credentials vulnerability is exposed. Learn the critical CVE-2026-44825 workaround to secure your clusters.
18 views
Daily Writeups
⤷ Title: Critical GitHub Token Stealing Bug Exploits Web-Based Code Editors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:18:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Ammar Askar #Browser Sandbox #github.dev #token exfiltration #VSCode vulnerability
Daily CyberSecurity
Critical GitHub Token Stealing Bug Exploits Web-Based Code Editors
A critical GitHub token stealing bug targets github.dev web spaces. Learn how it exploits the VSCode webview security model to hijack private repositories.
13 views
Daily Writeups
⤷ Title: InHand Router Flaws: Command Injection Patches Released
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:15:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_38702 #firmware update #Industrial Router #InHand Networks #Router Patch #VPN security
Daily CyberSecurity
InHand Router Flaws: Command Injection Patches Released
Severe InHand router flaws expose industrial networks to command injection vulnerabilities. Update your industrial firmware immediately to patch these bugs.
19 views
Daily Writeups
⤷ Title: Actively Exploited Vulnerabilities Added to CISA KEV Catalog
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:07:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android Framework #CISA KEV #CVE_2022_0492 #CVE_2025_48595 #Linux Kernel
Daily CyberSecurity
Actively Exploited Vulnerabilities Added to CISA KEV Catalog
CISA added new actively exploited vulnerabilities to its catalog. Learn how the Android privilege escalation flaw impacts corporate environments.
17 views
Daily Writeups
⤷ Title: Critical Security Flaw Exposes Industrial IoT Converters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 01:45:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_7786 #Firmware Flaw #IoT security #PUSR #USR_W610
Daily CyberSecurity
Critical Security Flaw Exposes Industrial IoT Converters
A critical USR-W610 vulnerability exposes hardcoded administrative credentials. Learn how to secure your PUSR IoT converters from exploitation.
13 views
Daily Writeups
⤷ Title: Critical Langflow RCE Vulnerability Exposes AI Workflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 01:01:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48519 #Langflow #Patch Update #Public Flows #Remote Code Execution
Daily CyberSecurity
Critical Langflow RCE Vulnerability Exposes AI Workflows
A critical Langflow RCE vulnerability impacts the Shareable Playground feature. Learn about the new security patches available.
18 views
Daily Writeups
⤷ Title: Laravel CRLF Injection Vulnerability Threatens Web Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 00:30:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CRLF Injection #Laravel Framework #Outbound Email Security #Software Remediation #Symfony Mailer
Daily CyberSecurity
Laravel CRLF Injection Vulnerability Threatens Web Applications
A severe Laravel CRLF injection vulnerability exposes web apps to mail relay abuse. Apply the latest CVE-2026-48019 patch to protect your infrastructure.
17 views
Daily Writeups
⤷ Title: Smart Contract Lifecycle Deploy se Exploit Tak
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:31:02 GMT
════════════════════════
⌗ Tags: #smart_contracts #bug_bounty #web3 #penetration_testing #infosec
Medium
Smart Contract Lifecycle Deploy se Exploit Tak
Series: Web3 Security Zero se Advance 🛡️ | Article #8 By HackerMD | 28 min read
16 views
Daily Writeups
⤷ Title: Salah Pilih Jurusan IT: Masalah yang Lebih Umum dari yang Dibayangkan
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:11:19 GMT
════════════════════════
⌗ Tags: #technology #education #information_security #hacking #cybersecurity
Medium
Salah Pilih Jurusan IT: Masalah yang Lebih Umum dari yang Dibayangkan
Banyak siswa tertarik masuk ke SMA IT atau SMK IT karena melihat perkembangan teknologi yang begitu pesat.
15 views
Daily Writeups
⤷ Title: Finding and exploiting an unused API endpoint
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:27:35 GMT
════════════════════════
⌗ Tags: #api #cybernerddd #cybersecurity #portswigger #hacking
Medium
Finding and exploiting an unused API endpoint
Overview
15 views
Daily Writeups
⤷ Title: Telegram: The Internet’s Most Overlooked OSINT Goldmine
════════════════════════
𐀪 Author: Neion Chowdhury
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:21:00 GMT
════════════════════════
⌗ Tags: #telegram #hacking #hacking_tools #osint_investigation #osint
Medium
Telegram: The Internet’s Most Overlooked OSINT Goldmine
Why every threat hunter, cyber researcher, and OSINT analyst should be paying closer attention.
19 views
Daily Writeups
⤷ Title: 150,000 Infections and No Malicious Domains: Inside the ClearFake Upgrade
════════════════════════
𐀪 Author: Ravi Sankar
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:59:35 GMT
════════════════════════
⌗ Tags: #hacking #infosec #javascript #malware #cybersecurity
Medium
150,000 Infections and No Malicious Domains: Inside the ClearFake Upgrade
The alert never fired. No malicious domain. No suspicious binary. No PowerShell in your logs — just a trusted Windows script, a legitimate…
16 views
Daily Writeups
⤷ Title: Inside a Nemesys Ransomware Deployment
════════════════════════
𐀪 Author: Shahzeb M
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:50:39 GMT
════════════════════════
⌗ Tags: #incident_response #threat_intelligence #cybersecurity #infosec #blue_team
Medium
Inside a Nemesys Ransomware Deployment
Ransomware-as-a-Service, so hot right now. This incident bears the hallmarks of Dharma and Phobos affiliated campaigns, groups that have…
13 views