Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:17:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.NET RAT #APJ Cyber Espionage #CDN Masquerading #Chinese APT #Cyber Security #Darktrace #DLL Sideloading #infosec #living_off_the_land #malware #Memory injection #Twill Typhoon
Daily CyberSecurity
Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
Darktrace exposes Chinese APT Twill Typhoon’s latest campaign using DLL sideloading and Yahoo/Apple CDN lookalikes to deploy a modular .NET RAT.
15 views
Daily Writeups
⤷ Title: Security Alert: ISC Releases Patches for Critical BIND 9 Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 09:18:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BIND 9 #DNS Security #ISC #memory exhaustion #use after free #vulnerability patch
Daily CyberSecurity
Security Alert: ISC Releases Patches for Critical BIND 9 Flaws
Internet Systems Consortium released patches fixing six critical BIND 9 flaws that cause memory exhaustion and unexpected daemon crashes.
21 views
Daily Writeups
⤷ Title: Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:34:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_45250 kernel panic #FatGid local privilege escalation #FreeBSD setcred root exploit #FreeBSD_SA_26:18.setcred advisory #kern_setcred_copyin_supp_groups flaw #kernel stack buffer overflow #memory corruption gid_t mismatch #Supervisor Mode Access Prevention SMAP #Supervisor Mode Execution Prevention SMEP #zfs.ko gadget exploitation
Information Security News
Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
The FreeBSD security apparatus has successfully resolved a high-severity vulnerability, cataloged as CVE-2026-45250, within the setcred(2) system call architecture. This fundamental defect resided…
11 views
Daily Writeups
⤷ Title: Google Releases Massive Desktop Patch to Fix Critical Imperfections
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 01:00:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ANGLE Engine #Browser Patch #CVE_2026_9872 #Desktop Update #google chrome #memory corruption #use after free
Daily CyberSecurity
Google Releases Massive Desktop Patch to Fix Critical Imperfections
Install the new Google Chrome security update today. This release delivers 151 critical security fixes to patch severe memory bugs.
14 views
Daily Writeups
⤷ Title: Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:33:06 +0000
════════════════════════
⌗ Tags: #Malware #DPAPILoader #Fileless Malware #Fox_IT #Lazarus Group #Memory_Only Malware #RemotePE #RemotePELoader #threat intelligence
Daily CyberSecurity
Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
Fox-IT uncovers a sophisticated Lazarus memory-only toolset used to compromise financial firms via an evasive three-stage malware pipeline.
17 views
Daily Writeups
⤷ Title: The Hidden Danger Behind Systems: Memory and Type Safety
════════════════════════
𐀪 Author: Aybüke
════════════════════════
ⴵ Time: Sat, 30 May 2026 23:54:28 GMT
════════════════════════
⌗ Tags: #software_engineering #secure_by_design #infosec #cybersecurity #memory_safety
Medium
The Hidden Danger Behind Systems: Memory and Type Safety
In the software world, some bugs cause your application to crash suddenly, and since the problem is obvious, you can fix it. However, some…
16 views
Daily Writeups
⤷ Title: Havoc Stager Campaign Exploits Fake Invoices to Compromise Networks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 07:22:25 +0000
════════════════════════
⌗ Tags: #Malware #DLL Sideloading #Havoc Stager #Invoice Scam #LevelBlue SpiderLabs #Malware Campaign #Memory injection #threat intelligence
Daily CyberSecurity
Havoc Stager Campaign Exploits Fake Invoices to Compromise Networks
Discover how the Havoc stager campaign exploits fake invoices. Read the LevelBlue SpiderLabs report detailing this stealthy threat.
11 views
Daily Writeups
⤷ Title: HTB Sherlock Write-Up: CrashDump
════════════════════════
𐀪 Author: whitewolf
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 13:47:44 GMT
════════════════════════
⌗ Tags: #crash_dump #hackthebox_walkthrough #memory_analysis #hackthebox_writeup #soc
16 views
Daily Writeups
⤷ Title: I Got Root on a Server in My OS Class, Then Spent the Rest of the Lab Locking Myself Out
════════════════════════
𐀪 Author: Nanditha Harish Bhat
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 14:22:20 GMT
════════════════════════
⌗ Tags: #buffer_overflow #memory_safety #cybersecurity #ethical_hacking #programming
Medium
I Got Root on a Server in My OS Class, Then Spent the Rest of the Lab Locking Myself Out
Part 1 of “Down the Stack”: a descent from web bugs to silicon.
27 views
Daily Writeups
⤷ Title: AMD Silently Removes TSME Support from Ryzen CPUs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:21:17 +0000
════════════════════════
⌗ Tags: #Technology #AMD #BIOS Update #Cyber Security #Memory Encryption #Ryzen CPUs #TSME
Daily CyberSecurity
AMD Silently Removes TSME Support from Ryzen CPUs
Discover why AMD silently removed Transparent Secure Memory Encryption (TSME) from consumer Ryzen processors and how users uncovered this hidden BIOS update.
20 views
Daily Writeups
⤷ Title: Squidbleed (CVE-2026-47729): Squid Proxy Memory Leak Details and PoC Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 00:01:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Calif.io #CVE_2026_47729 #Heap Overread #Memory Leak #Squid Proxy #Squidbleed
Daily CyberSecurity
Squidbleed (CVE-2026-47729): Squid Proxy Memory Leak Details and PoC Disclosed
The Squidbleed vulnerability is a Squid proxy memory leak exposing user credentials. CVE-2026-47729 details and PoC exploit code are now public.
17 views
Daily Writeups
⤷ Title: Apple Price Increase Hits Macs, iPads, and Vision Pro
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 03:22:45 +0000
════════════════════════
⌗ Tags: #Technology #Apple #DRAM #iPad #Mac #Memory Shortage #Price Increase
Daily CyberSecurity
Apple Price Increase Hits Macs, iPads, and Vision Pro
The Apple price increase raises Mac, iPad, HomePod, Apple TV, and Vision Pro prices on the memory shortage. iPhone, Watch, and AirPods are spared.
13 views
Daily Writeups
⤷ Title: Lazarus Memory-Only Malware: Advanced Financial Sabotage
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 06:28:12 +0000
════════════════════════
⌗ Tags: #Malware #Cognyte #cybersecurity #Financial Sector #Lazarus #Memory_Only Malware
Information Security News
Lazarus Memory-Only Malware: Advanced Financial Sabotage
The more stealthy a malicious software remains, the longer its capacity to endure within a compromised system. This guiding philosophy drives the North Korean-linked Lazarus group in its latest of…
18 views
Daily Writeups
⤷ Title: Six NetScaler Vulnerabilities Allow Denial of Service and File Read
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 16:58:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Citrix #Cloud Software Group #CVE_2026_8451 #Denial of Service #Memory Overread #NetScaler #NetScaler ADC #NetScaler Gateway
Daily CyberSecurity
Six NetScaler Vulnerabilities Allow Denial of Service and File Read
TL;DR Cloud Software Group patched six NetScaler vulnerabilities in NetScaler ADC and NetScaler Gateway. Three rate CVSS 8.8, and one allows an unauthenticated file read. Each flaw needs a specifi…
14 views
Daily Writeups
⤷ Title: PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 02:41:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12184 #CVE_2026_14355 #Denial of Service #memory corruption #php #PHP_FPM #Remote DoS
Daily CyberSecurity
PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug
TL;DR The PHP team fixed two flaws, including a PHP remote DoS that can crash a whole PHP-FPM pool. CVE-2026-12184 (CVSS 8.2) triggers on a failed TLS handshake with a remote server. A second bug,…
30 views
Daily Writeups
⤷ Title: SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 07:34:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44747 #memory corruption #NetWeaver #SAP #SAP Security Patch Day
Daily CyberSecurity
SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP
TL;DR SAP Security Patch Day July 2026 shipped 16 new security notes and one GitHub advisory. The top fix, CVE-2026-44747 (CVSS 9.9), patches a memory corruption flaw in SAP NetWeaver Application …
10 views
Daily Writeups
⤷ Title: OpenSSL HollowByte Memory Leak Vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 12:59:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cyber Security #HollowByte #Memory Leak #openssl
Information Security News
OpenSSL HollowByte Memory Leak Vulnerability
Eleven bytes are enough to force a weak OpenSSL server to use up to 131 KB of RAM. After that, it waits for a message that never comes. Following a sudden drop, the code frees the buffer. Yet, Lin…
13 views