Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:55 +0000
════════════════════════
⌗ Tags: #Data Leak #account security #cybersecurity news 2026 #data breach #data privacy #email service provider #flickr #GDPR #phishing alert #PII exposure #SmugMug #third_party risk
Penetration Testing Tools
Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
The ubiquitous photo-hosting platform Flickr has disseminated notifications to its clientele regarding a potential data breach precipitated by
14 views
Daily Writeups
⤷ Title: Beyond Checkboxes: How Quince Reinvented Vendor Security Assessments
════════════════════════
𐀪 Author: Avinash Jain (@logicbomb)
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 10:56:44 GMT
════════════════════════
⌗ Tags: #vendor_security #infosec #information_security #quince #third_party_risk
Medium
Beyond Checkboxes: How Quince Reinvented Vendor Security Assessments
When the Weakest Link Isn’t Human, It’s Your Vendor
43 views
Daily Writeups
⤷ Title: Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:43:03 +0000
════════════════════════
⌗ Tags: #Malware #ANSSI #Cybersecurity 2026 #data breach #Eiffel Tower #France #Irec SAS #Louvre #Museum Security #RansomHouse #ransomware #third_party risk #Vivaticket
Penetration Testing Tools
Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
The March incursion targeting the Vivaticket ticketing platform did not merely strike a solitary enterprise, but rather convulsed
8 views
Daily Writeups
⤷ Title: The Illusion of the Perimeter: Why Your Biggest Risk Lives in Your Supply Chain
════════════════════════
𐀪 Author: Stephen Adanson Roque
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 11:21:01 GMT
════════════════════════
⌗ Tags: #grc #risk_management #cybersecurity #infosec #third_party_risk
Medium
The Illusion of the Perimeter: Why Your Biggest Risk Lives in Your Supply Chain
Organizations can outsource services, but never accountability. This is why third-party risk is now a matter of operational survival.
13 views
Daily Writeups
⤷ Title: Vimeo Data Exposed in Anodot Supply Chain Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:29:54 +0000
════════════════════════
⌗ Tags: #Data Leak #Anodot #cybersecurity #Data Breach #Google Threat Intelligence #infosec #Metadata Leak #supply chain attack #third_party risk #Vendor Management #Vimeo
Daily CyberSecurity
Vimeo Data Exposed in Anodot Supply Chain Attack
Vimeo metadata and customer emails were exposed via a breach at third-party vendor Anodot. Internal systems remain secure. Learn how to manage vendor risk.
11 views
Daily Writeups
⤷ Title: Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:21:31 +0000
════════════════════════
⌗ Tags: #Data Leak #Analytics Security #Anodot #Cyber Security 2026 #data breach #data privacy #Infosec #Metadata Exposure #supply chain attack #third_party risk #Vimeo
Penetration Testing Tools
Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
The video hosting vanguard Vimeo has disclosed a security transgression impacting its user repository, precipitated by a compromise
9 views
Daily Writeups
⤷ Title: New “TencShell” Malware Weaponizes Open-Source Rshell via Third-Party Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 12:28:23 +0000
════════════════════════
⌗ Tags: #Malware #C2 Framework #Cato CTRL #Cyber Security #Donut Shellcode #infosec #Malware Analysis #Rshell #supply chain attack #TencShell #third_party risk #threat intelligence
Daily CyberSecurity
New "TencShell" Malware Weaponizes Open-Source Rshell via Third-Party Access
Cato CTRL intercepts "TencShell," a new stealth malware derived from open-source Rshell. Attackers use third-party access to breach networks!
14 views
Daily Writeups
⤷ Title: China-Linked Hackers Deploy “TencShell” Backdoor via Faux Web Font Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:45:33 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL Threat Research #Donut Shellcode In_Memory Execution #Fileless Position_Independent Code #Rshell Framework Customization #State_Sponsored Cyber Espionage #Tencent API Impersonation #TencShell Backdoor Malware #Third_Party Identity Compromise #Web Font Masquerading #Windows Registry Persistence
Information Security News
China-Linked Hackers Deploy "TencShell" Backdoor via Faux Web Font Files - Information Security News
In April 2026, threat intelligence specialists at Cato CTRL neutralized a sophisticated network intrusion attempt targeting a major multinational manufacturing enterprise. The adversaries sought to establish a persistent foothold within the corporate perimeter…
19 views
Daily Writeups
⤷ Title: Beyond AirPlay: Apple May Finally Allow Google Cast as System-Default in iOS 27
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 08:54:23 +0000
════════════════════════
⌗ Tags: #Apple #Apple AirPlay #Digital Markets Act #DMA interoperability #EU technology regulation #Google Cast #iOS 27 #iPhone streaming #smart home integration #third_party protocol support
30 views
Daily Writeups
⤷ Title: Supply Chain Is the New Front Door: What May 2026 Taught Us About Third-Party Risk
════════════════════════
𐀪 Author: Stanley A.
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 14:06:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #open_source_security #third_party_risk #supply_chain_security #cybersecurity
Medium
Supply Chain Is the New Front Door: What May 2026 Taught Us About Third-Party Risk
“We audited our own code. Our dependencies are someone else’s problem.” — A common assumption. Until it isn’t.
20 views
Daily Writeups
⤷ Title: Sovereign Intervention: EU Mandates Unhindered Third-Party AI Access to WhatsApp API
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 06:50:51 +0000
════════════════════════
⌗ Tags: #Technology #market monopoly rules #Meta European Commission order #Tech News #third party AI integration #WhatsApp antitrust API probe #WhatsApp Business gateway tool
Daily CyberSecurity
Sovereign Intervention: EU Mandates Unhindered Third-Party AI Access to WhatsApp API
Discover the latest WhatsApp antitrust API probe. Learn how the European Union forces Meta to reopen its business network to external AI chatbots for free.
20 views
Daily Writeups
⤷ Title: When Trusted Advertising Infrastructure Becomes a Malware Delivery Channel
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 18:22:25 GMT
════════════════════════
⌗ Tags: #supply_chain_security #application_security #web_security #cybersecurity #third_party_risk
Medium
When Trusted Advertising Infrastructure Becomes a Malware Delivery Channel
A trusted digital advertising platform can reach thousands or even millions of users through websites that depend on its services. That…
17 views