Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:28:59 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Code Signing #Cyber Security #Gatekeeper Bypass #Infostealer #Jamf Threat Labs #macOS Malware #MacSync Stealer #swift #ZK_Call Messenger
Daily CyberSecurity
The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices
The cat-and-mouse game between Apple’s security protocols and malware authors has taken a stealthy turn. A new report from Jamf Threat Labs reveals that the increasingly active MacSync Steal…
9 views
Daily Writeups
⤷ Title: Shadows Vanish: The “Global Man” Exit Scam Leaves Malware Operators in the Dark
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:34:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #code_signing certificates #cybercrime forums #digital certificates #EV Certificates #Exit Scam #Global Man #kernel_mode drivers #malware obfuscation #security breach 2026 #Shadow Economy #threat intelligence
Penetration Testing Tools
Shadows Vanish: The "Global Man" Exit Scam Leaves Malware Operators in the Dark
In the clandestine digital underworld, a prominent purveyor of code-signing certificates has executed a high-profile disappearance. The Global
18 views
Daily Writeups
⤷ Title: Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:45:23 +0000
════════════════════════
⌗ Tags: #Technology #Code Signing #Developer Support #Driver Signing #Microsoft #open_source #Scott Hanselman #security vulnerability #VeraCrypt #Windows 11 #WireGuard
Daily CyberSecurity
Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard
Microsoft’s sudden suspension of VeraCrypt and WireGuard accounts reveals the dangers of automated bureaucracy in the critical path of security software.
27 views
Daily Writeups
⤷ Title: Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:00:45 +0000
════════════════════════
⌗ Tags: #Technology #Bootloader #Code Signing #Driver Signature Enforcement #encryption #Microsoft #Mounir Idrassi #open_source #Tech News 2026 #UEFI #VeraCrypt #Windows 11
Daily CyberSecurity
Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
Microsoft has suspended VeraCrypt’s developer account, blocking critical driver signatures. Without a fix, future Windows updates and system boots are at risk.
23 views
Daily Writeups
⤷ Title: The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Certificate Revocation #Code Signing #Cyber Security 2026 #DigiCert #endpoint security #malware #security breach #Social Engineering #Support Portal Exploit #Zhong Stealer
Penetration Testing Tools
The Support Chat Trap: How a "Customer Screenshot" Led to a Critical Code-Signing Breach at DigiCert
A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary
13 views
Daily Writeups
⤷ Title: “Lorem Ipsum” Loader Weaponizing Microsoft Teams via SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:12:47 +0000
════════════════════════
⌗ Tags: #Malware #BlueVoyant #Code Signing #Cyber Security #DLL Sideloading #infosec #initial access broker #JFIF C2 #Lorem Ipsum Malware #Microsoft Teams #SEO Poisoning #Threat Intel
Daily CyberSecurity
"Lorem Ipsum" Loader Weaponizing Microsoft Teams via SEO Poisoning
BlueVoyant unmasks "Lorem Ipsum": a well-funded campaign using SEO poisoning and signed MS Teams installers to deploy stealthy backdoors via image files.
13 views
Daily Writeups
⤷ Title: OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 04:00:50 +0000
════════════════════════
⌗ Tags: #Data Leak #Atlas Browser #ChatGPT #Code_Signing Certificate #Codex #Cybersecurity 2026 #InfoSec News #macOS security #npm Supply Chain Attack #OpenAI #software update #TanStack
Daily CyberSecurity
OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
OpenAI rotates code signing certificates following the TanStack npm breach. macOS users must update ChatGPT and Codex manually before June 12, 2026.
18 views
Daily Writeups
⤷ Title: Microsoft Dismantles “Fox Tempest” Code-Signing Network Fueling Global Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 07:11:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code_Signing Certificate #Cyber Security #Fox Tempest #infosec #Malware_Signing_as_a_Service #Microsoft DCU #MSaaS #Resecurity #Rhysida ransomware #Vanilla Tempest
Daily CyberSecurity
Microsoft Dismantles "Fox Tempest" Code-Signing Network Fueling Global Ransomware
Microsoft's DCU and Resecurity have disrupted Fox Tempest, a major MSaaS ring that forged code-signing certificates for ransomware delivery.
25 views
Daily Writeups
⤷ Title: New Tampered Chef Malware Campaigns Discovered in Productivity Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing #EvilAI #Info_Stealers #Malvertising #Productivity Software #Tampered Chef #threat intelligence
Daily CyberSecurity
New Tampered Chef Malware Campaigns Discovered in Productivity Software
Researchers uncover the Tampered Chef malware cluster disguised as PDF editors and tools. Learn how these stealthy threats bypass corporate defenses.
15 views
Daily Writeups
⤷ Title: Fake RVTools Installer Deploys Modular Python RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:01:03 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing Abuse #Modular Python RAT #RVTools Scam #Sectigo Certificate #VBScript Obfuscation
Daily CyberSecurity
Fake RVTools Installer Deploys Modular Python RAT
A fake RVTools installer campaign distributes a modular Python RAT. Learn how this malware uses signed certificates to evade security controls.
20 views
Daily Writeups
⤷ Title: [DEEP RESEARCH] When Software Trust Becomes a Rented Service
════════════════════════
𐀪 Author: Wes Young
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 14:46:00 GMT
════════════════════════
⌗ Tags: #infosec #malware #microsoft #code_signing #threat_intelligence
Medium
[DEEP RESEARCH] When Software Trust Becomes a Rented Service
The certificate looked legitimate because that was the product.
8 views
Daily Writeups
⤷ Title: Golden Gh0st RAT: Inside the DigiCert Certificate Theft
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:33:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code Signing #CylindricalCanine #DigiCert #Golden Gh0st RAT #GoldenEyeDog #SmartScreen
Information Security News
Golden Gh0st RAT: Inside the DigiCert Certificate Theft
Cybercriminals have found a way to weaponise Windows’ faith in digital signatures. They compromised the workstation of a DigiCert employee and intercepted certificates bound for the company&…
11 views