Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ABW #Critical Infrastructure #Cyber Espionage #Cyber War 2026 #ICS #Industrial Control Systems #Infrastructure Defense #Jabłonna Lacka #National Security #Poland #Szczytno #Water Treatment Security
Penetration Testing Tools
Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
Polish intelligence services have issued a somber warning regarding a succession of incursions targeting water treatment facilities, where,
12 views
Daily Writeups
⤷ Title: The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:03:26 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #cyber threat intelligence #Defense Evasion #EDR Bypass #ICS Security #InfoSec 2026 #MITRE ATT&CK v19 #Mobile Threats #SOC Strategy #Social Engineering #T1682 #T1685
Penetration Testing Tools
The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
MITRE has unveiled ATT&CK v19, a monumental evolution of the framework utilized by security cohorts to delineate adversary
17 views
Daily Writeups
⤷ Title: AI’s Zero-Day Move: How Claude and GPT-4.1 Orchestrated the First Major Assault on Industrial Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:48:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Cyberattack #BACKUPOSINT #Claude Code #Critical Infrastructure #Cybersecurity 2026 #Dragos #GPT_4.1 #ICS Security #Industrial Control Systems #Monterrey Water Attack #threat intelligence
Penetration Testing Tools
AI’s Zero-Day Move: How Claude and GPT-4.1 Orchestrated the First Major Assault on Industrial Water Systems
In a seminal transgression, adversaries have endeavored to compromise municipal water infrastructure by wielding the sophisticated cognitive capabilities
17 views
Daily Writeups
⤷ Title: Attacking ICS Plant #1
════════════════════════
𐀪 Author: Pavneet_Singh_
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:40:34 GMT
════════════════════════
⌗ Tags: #medium #ics_security #tryhackme #ot_security #tryhackme_walkthrough
Medium
Attacking ICS Plant #1
Task 1:Introduction to OT/ICS
28 views
Daily Writeups
⤷ Title: Critical Eppendorf Bioreactor Security Flaw Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:28:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bioreactor Vulnerability #CVE_2026_7251 #Eppendorf BioFlo 320 #Hardcoded Password #ICS security #Laboratory Security
Daily CyberSecurity
Critical Eppendorf Bioreactor Security Flaw Disclosed
A critical Eppendorf bioreactor security flaw exposes systems via a hard-coded VNC password. Learn how to secure your BioFlo 320 device.
26 views
Daily Writeups
⤷ Title: Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 08:03:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_10828 #CVE_2026_10829 #ICS security #Moxa #Moxa NPort vulnerability #NPort #serial device server
Daily CyberSecurity
Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)
A Moxa NPort vulnerability (CVE-2026-10829) lets authenticated attackers gain root via RCE on serial device servers. Patch v1.5.1 now.
14 views
Daily Writeups
⤷ Title: Rockwell Automation patches multiple ICS flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 00:33:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #1794_AENTR #Authentication Bypass #AVEVA PI Data Archive #CVE_2026_0647 #Denial of Service #EtherNet/IP #FactoryTalk Historian #FLEX I/O #ICS security #Rockwell Automation
Daily CyberSecurity
Rockwell Automation patches multiple ICS flaws
Rockwell Automation vulnerabilities affect FactoryTalk Historian and FLEX I/O adapters, including a critical unauthenticated password-change flaw.
11 views
Daily Writeups
⤷ Title: Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:13:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET BinaryFormatter #CVE_2026_8024 #CWE_502 #Deserialization #iba #ibaDatCoordinator #ibaPDA #ICS security #OT Security #Remote Code Execution
Daily CyberSecurity
Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)
A critical iba deserialization vulnerability (CVE-2026-8024) lets unauthenticated attackers gain remote code execution on ibaPDA and ibaDatCoordinator.
13 views
Daily Writeups
⤷ Title: AVer PTC Cameras Hit by Critical RCE Flaw CVE-2026-40624 (CVSS 9.8)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 02:05:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AVer #CISA #CVE_2026_40624 #ICS Advisory #PTC cameras #Remote Code Execution
Daily CyberSecurity
AVer PTC Cameras Hit by Critical RCE Flaw CVE-2026-40624 (CVSS 9.8)
CISA flags an AVer PTC camera flaw, CVE-2026-40624, enabling remote code execution. The CVSS 9.8 RCE bug affects four PTC models.
13 views
Daily Writeups
⤷ Title: Water System Cyberattacks: How Nation-State Hackers Turned Utilities Into Targets
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 03:59:31 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #CyberAv3ngers #ICS Security #Nation_State Hackers #Volt Typhoon #Water Systems
Information Security News
Water System Cyberattacks: How Nation-State Hackers Turned Utilities Into Targets
With the arrival of digitalization, waterworks and treatment plants have become prime targets for APT hackers. Yet they are not random victims. Rather, attackers deliberately choose them as pressu…
23 views
Daily Writeups
⤷ Title: FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 23:14:24 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Cyber Army of Russia Reborn #Cyber Attack #Cybersecurity #DDOS #FBI #ICS #Operation Red Circus #Operation Riptide #Russia #Z_Pentest
Hackread
FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member
Spanish police and the FBI arrested an alleged Cyber Army of Russia Reborn member as international efforts against pro Russia cyberattacks continue worldwide.
16 views
Daily Writeups
⤷ Title: WAGO System I/O Flaw CVE-2026-4769 Leads to Full System Compromise
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 07:54:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4769 #firmware #ICS security #OT Security #WAGO #WAGO System I/O
Daily CyberSecurity
WAGO System I/O Flaw CVE-2026-4769 Leads to Full System Compromise
TL;DR A critical flaw in WAGO System I/O field devices now has a fix. Tracked as CVE-2026-4769, the bug scores 9.8 on CVSS. An unauthenticated attacker can reach full system compromise during earl…
26 views
Daily Writeups
⤷ Title: CVE-2026-10577: CVSS 10 Access Control Vulnerability Hits Rockwell Automation 1715 Redundant I/O Modules
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 07:32:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #ICS #OT Security #Rockwell Automation
Daily CyberSecurity
CVE-2026-10577: CVSS 10 Access Control Vulnerability Hits Rockwell Automation 1715 Redundant I/O Modules
TL;DR A maximum-severity Rockwell Automation vulnerability, CVE-2026-10577, affects the 1715 Redundant I/O EtherNet/IP adapter (1715-AENTR). The access control flaw scores 10.0 on both CVSS 3.1 an…
7 views
Daily Writeups
⤷ Title: CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 12:53:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #ICS #JWT #Opcenter X #Siemens
Daily CyberSecurity
CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access
TL;DR Siemens has patched a maximum-severity Opcenter X authentication bypass, tracked as CVE-2026-56451. The flaw scores 10.0 on both CVSS 3.1 and CVSS 4.0 scales. An unauthenticated remote attac…
15 views
Daily Writeups
⤷ Title: Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 13:03:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA #Cleartext Credentials #CVE_2026_55985 #CVE_2026_61884 #ICS #OT Security #TPDIN_Monitor_WEB2 #Tycon Systems #unpatched
Daily CyberSecurity
Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8
TL;DR CISA published advisory ICSA-26-202-01 on July 21, 2026. It covers a critical Tycon authentication bypass in the TPDIN-Monitor-WEB2 power monitor. Tycon Systems never replied to CISA, so no …
19 views