Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cryptocurrency Security #CVE_2025_32965 #Key Exfiltration #NPM Backdoor #supply chain attack #Wallet Compromise #XRP Ledger #xrpl.js
Daily CyberSecurity
CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
CVE-2025-32965: A backdoor in xrpl.js SDK allows theft of crypto wallet keys. Users must upgrade and rotate compromised credentials immediately.
11 views
Daily Writeups
⤷ Title: Managing Encryption Keys in GCP using Cloud HSM
════════════════════════
𐀪 Author: @jacob_sec
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 12:06:22 GMT
════════════════════════
⌗ Tags: #cloud_security #cloudhsm #key_management #infosec #gcp
Medium
Managing Encryption Keys in GCP using Cloud HSM
Overview of Cloud HSM
22 views
Daily Writeups
⤷ Title: Beyond Encryption: Mastering Key Management and PKI for Medical Device Cybersecurity
════════════════════════
𐀪 Author: Medcrypt
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 23:31:55 GMT
════════════════════════
⌗ Tags: #pki #medical_devices #cryptography #key_management #cybersecurity
Medium
Beyond Encryption: Mastering Key Management and PKI for Medical Device Cybersecurity
When it comes to cryptography, the FDA’s expectations are nuanced and center on demonstrating a “reasonable assurance of safety and…
33 views
Daily Writeups
⤷ Title: Researching bcrypt for secure password storage attacks (an analysis)
════════════════════════
𐀪 Author: Marla Tumenjargal
════════════════════════
ⴵ Time: Sun, 27 Jul 2025 06:04:14 GMT
════════════════════════
⌗ Tags: #hashing_algorithm #salt_protection #adaptive_cost_factor #key_stretching #cybersecurity
Medium
Researching bcrypt for secure password storage attacks (an analysis)
Password security is the first line of defense for protecting personal information against unauthorized access. Password-based…
14 views
Daily Writeups
⤷ Title: HMQV and SIGMA: Modern Key Exchange Protocols Explained
════════════════════════
𐀪 Author: Denys Popov
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 05:47:08 GMT
════════════════════════
⌗ Tags: #infosec #cryptography #key_exchange #sigma #crypto_on_fingers
Medium
🔐 HMQV and SIGMA: Modern Key Exchange Protocols Explained
In today’s world of encrypted messaging, secure browsing, and digital identities, the key exchange mechanism forms the cryptographic…
17 views
Daily Writeups
⤷ Title: Diffie Hellman: Membuat Rahasia Tanpa Pernah Mengatakannya
════════════════════════
𐀪 Author: Islam Yakin
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 17:48:57 GMT
════════════════════════
⌗ Tags: #diffie_hellman #security #key_exchange #information_security #cybersecurity
Medium
Diffie Hellman: Membuat Rahasia Tanpa Pernah Mengatakannya
Sebuah utas series kriptografi. Penjelasan ini adalah catatan belajar yang disederhanakan, bukan sebuah tulisan akademis formal.
13 views
Daily Writeups
⤷ Title: Demystifying Diffie-Hellman: The Mathematical Foundations of Secure Key Exchange
════════════════════════
𐀪 Author: Sumit Sah
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 15:13:36 GMT
════════════════════════
⌗ Tags: #cryptography #diffie_hellman #encryption #cybersecurity #key_exchange
Medium
Demystifying Diffie-Hellman: The Mathematical Foundations of Secure Key Exchange
In the world of cybersecurity, we often talk about the importance of symmetric encryption for its speed and efficiency when securing bulk…
12 views
Daily Writeups
⤷ Title: Emergency .NET Update: Critical Data Protection Flaw Allows Authentication Forgery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:21:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET 10 #ASP.NET Core #Authentication Bypass #CVE_2026_40372 #Data Protection #infosec #Key Rotation #Linux Security #macOS #Microsoft #privilege escalation
Daily CyberSecurity
Emergency .NET Update: Critical Data Protection Flaw Allows Authentication Forgery
Microsoft's OOB update for .NET 10 (CVE-2026-40372) hits Linux/macOS users. Authentication is at risk. Stop the bypass and rotate your keys today.
12 views
Daily Writeups
⤷ Title: Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Cloud Security #Cloud Egress #Control Plane Attack #Cyber Security #Identity Hijacking #infosec #Key Vault Exploit #Microsoft Threat Intelligence #RBAC Manipulation #SSPR Abuse #Storm_2949
Daily CyberSecurity
Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
Microsoft exposes Storm-2949, a cloud-native threat group abusing Azure management features and SSPR to hijack Key Vaults, App Services, and SQL databases.
14 views
Daily Writeups
⤷ Title: Token Marketplaces Made AI Cheap. Nobody Thought About Key Management.
════════════════════════
𐀪 Author: Aikeyfounder
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:08:31 GMT
════════════════════════
⌗ Tags: #ai_infrastructure #developer_tools #llm #key_management #api_security
Medium
Token Marketplaces Made AI Cheap. Nobody Thought About Key Management.
From LiteLLM’s backdoor to a $500 million Claude bill — the wake-up call no engineering team can afford to ignore.
18 views
Daily Writeups
⤷ Title: Windows Event Logs, Security logs, Sysmon, and PowerShell logging to detect attacks — essential…
════════════════════════
𐀪 Author: Diaaeldeenamin
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 18:19:16 GMT
════════════════════════
⌗ Tags: #soc_analyst #windows_event_logs #key_event_ids #tryhackme #incident_response
Medium
Windows Event Logs, Security logs, Sysmon, and PowerShell logging to detect attacks — essential Blue Team skills.
Master Windows Event Logs, key Event IDs, Sysmon, and PowerShell logging to detect real attacker techniques like brute-force, RDP access…
12 views
Daily Writeups
⤷ Title: Your API Keys Are in a .env File.
Your AI Infra Deserves Better.
════════════════════════
𐀪 Author: Aikeyfounder
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 09:12:40 GMT
════════════════════════
⌗ Tags: #ai_infrastructure #llmops #key_management #api_security #developer_tools
Medium
Your API Keys Are in a .env File. Your AI Infra Deserves Better.
Encrypted vaults, virtual credentials, provider-agnostic routing: the calling architecture your team should have built yesterday.
42 views
Daily Writeups
⤷ Title: Mozilla Rotates Firefox and Thunderbird Linux GPG Signing Key After Private Repo Exposure
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 03:00:39 +0000
════════════════════════
⌗ Tags: #Technology #firefox #GitHub Security #GPG Key #Key Rotation #Linux Security #mozilla #Thunderbird
Daily CyberSecurity
Mozilla Rotates Firefox and Thunderbird Linux GPG Signing Key After Private Repo Exposure
A curious incident has come to light. According to an official Mozilla Security Blog post, the GPG signing key used to authenticate Firefox for Linux and Thunderbird for Linux packages has been ro…
17 views
Daily Writeups
⤷ Title: The Key That Cannot Be Stolen
════════════════════════
𐀪 Author: Andras Szabolcsi
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 08:01:02 GMT
════════════════════════
⌗ Tags: #key_management #cybersecurity #cryptography #fintech #infosec
Medium
The Key That Cannot Be Stolen
What if the key everyone is guarding simply didn’t exist?
18 views
Daily Writeups
⤷ Title: A kulcs, amit nem lehet ellopni
════════════════════════
𐀪 Author: Andras Szabolcsi
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 08:01:02 GMT
════════════════════════
⌗ Tags: #cryptography #fintech #key_management #infosec #cybersecurity
Medium
A kulcs, amit nem lehet ellopni
Mi lenne, ha az a kulcs, amit mindenki véd, egyszerűen nem létezne?
29 views