Daily Writeups
@Daily_Writeups
3.87K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.87K subscribers
Daily Writeups
⤷ Title: INTERPOL Warns of Industrialized Cybercrime Across Asia and the Pacific
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:29:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #Interpol
Information Security News
INTERPOL Warns of Surging Asia Cyber Threats
INTERPOL's Asia cyber threat report finds scam centers, deepfakes, and ransomware driving a $40B regional cybercrime surge.
14 views
Daily Writeups
⤷ Title: Apple Opens iOS to Third-Party App Stores in Brazil Under CADE Settlement
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:17:21 +0000
════════════════════════
⌗ Tags: #Technology
Daily CyberSecurity
Apple Opens iOS to Third-Party App Stores in Brazil Under CADE Settlement
Apple now allows iOS third-party app stores in Brazil under a CADE settlement, alongside new fees and a Notarization review process.
15 views
Daily Writeups
⤷ Title: F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:23:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_42055 #CVE_2026_42530 #F5 #HTTP/3 #nginx #NGINX vulnerabilities #use after free
Daily CyberSecurity
F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
Two critical NGINX vulnerabilities, CVE-2026-42530 and CVE-2026-42055, let remote attackers crash workers and possibly run code. Patch NGINX now.
11 views
Daily Writeups
⤷ Title: Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:13:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET BinaryFormatter #CVE_2026_8024 #CWE_502 #Deserialization #iba #ibaDatCoordinator #ibaPDA #ICS security #OT Security #Remote Code Execution
Daily CyberSecurity
Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)
A critical iba deserialization vulnerability (CVE-2026-8024) lets unauthenticated attackers gain remote code execution on ibaPDA and ibaDatCoordinator.
13 views
Daily Writeups
⤷ Title: 27-Year-Old OpenBSD Authentication Bypass: Details and PoC Exploit Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:02:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_55706 #Heap Over_read #kernel vulnerability #OpenBSD #PAP #PPP stack #PPPoE #proof_of_concept #sppp
Daily CyberSecurity
27-Year-Old OpenBSD Authentication Bypass: Details and PoC Exploit Publicly Disclosed
A 27-year-old OpenBSD authentication bypass (CVE-2026-55706) is now public, with full details and a working PoC exploit for the PPP PAP flaw.
16 views
Daily Writeups
⤷ Title: The One Thing Nobody Checks in Password Reset (And Why It Pays)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:46:54 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_hunting #bug_bounty #bug_bounty_tips #bug_bounty_writeup
Medium
The One Thing Nobody Checks in Password Reset (And Why It Pays)
Everyone tests the token. Nobody tests the after.
31 views
Daily Writeups
⤷ Title: Mr Robot CTF Writeup
════════════════════════
𐀪 Author: Spoofey
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:37:14 GMT
════════════════════════
⌗ Tags: #mr_robot #thm_writeup #tryhackme #tryhackme_walkthrough #tryhackme_writeup
28 views
Daily Writeups
⤷ Title: Detection Engineering With Snort | TryHackMe | detection challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:18:52 GMT
════════════════════════
⌗ Tags: #snort #security_operation_center #tryhackme #cybersecurity #detection_engineering
Medium
Detection Engineering With Snort | TryHackMe | detection challenge
Build production-ready Snort detections: behaviour rules, tuning, suppression, and IOC lifecycle.
31 views
Daily Writeups
⤷ Title: Reconnaissance: The First Phase of Penetration Testing — Knowing Your Target Before the Attack
════════════════════════
𐀪 Author: Ariel404
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 05:49:35 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #penetration_testing #reconnaissance #hacking #cybersecurity
Medium
Reconnaissance: The First Phase of Penetration Testing — Knowing Your Target Before the Attack
“The more you know about your target, the easier it becomes to identify its weaknesses.”
30 views
Daily Writeups
⤷ Title: Hackers Don’t Break In Anymore. They Move In.
════════════════════════
𐀪 Author: Abdu Samad NT
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:58:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberattack #ai #boats #hacking
Medium
Hackers Don’t Break In Anymore. They Move In.
Two real intrusions — one against a small business network, one against everyday Android users — show exactly how modern attacks are built…
40 views
Daily Writeups
⤷ Title: 7 Powerful AI Agent Workflows Every Modern SDET Should Learn
════════════════════════
𐀪 Author: Shahnawaz Khan
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 04:07:56 GMT
════════════════════════
⌗ Tags: #test_automation #penetration_testing #ai_agent #software_development #software_testing
Medium
7 Powerful AI Agent Workflows Every Modern SDET Should Learn
Discover 7 powerful AI agent workflows modern SDETs are using in 2026 for debugging, automation, observability, self-healing testing, and…
33 views
Daily Writeups
⤷ Title: Linux Fundamentals 1 — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 04:33:42 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #linux_fundamentals #tryhackme_walkthrough #linux
Medium
Linux Fundamentals 1 — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Linux Fundamentals 1
Room URL: https://tryhackme.com/room/linuxfundamentalspart1
Please attempt the room yourself…
41 views
Daily Writeups
⤷ Title: Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 12:06:09 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: 1M WordPress Sites at Risk: Critical Unauthenticated Arbitrary File Deletion in Avada Builder (CVSS 9.1)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 07:31:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Deletion #Avada Builder #Avada Builder vulnerability #CVE_2026_8713 #Fusion Builder #Wordfence #wordpress
Daily CyberSecurity
1M WordPress Sites at Risk: Critical Unauthenticated Arbitrary File Deletion in Avada Builder (CVSS 9.1)
CVE-2026-8713 is a critical Avada Builder vulnerability enabling unauthenticated arbitrary file deletion on 1M WordPress sites. Update to 3.15.4 now.
26 views
Daily Writeups
⤷ Title: APT37 NarwhalRAT Malware: A Python Backdoor Threat
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 07:22:56 +0000
════════════════════════
⌗ Tags: #Malware #APT37 #cybersecurity #NarwhalRAT #Python backdoor
Daily CyberSecurity
APT37 NarwhalRAT Malware: A Python Backdoor Threat
Discover how APT37 NarwhalRAT malware uses MS-themed phishing and a dead-drop C2 to target users with a sophisticated Python backdoor.
11 views
Daily Writeups
⤷ Title: Google Calendar Adds 200 Custom Colors and a Full RGB Picker
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 07:04:01 +0000
════════════════════════
⌗ Tags: #Technology #Calendar #google #RGB picker
Daily CyberSecurity
Google Calendar Adds 200 Custom Colors and a Full RGB Picker
Google Calendar now offers 200 custom colors and a full RGB picker, replacing its old 11-color limit for events.
11 views
Daily Writeups
⤷ Title: Claude Code Quota Reset Follows Morning Outage
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 07:02:03 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic #Claude Code #Claude Pro #Quota Reset
Daily CyberSecurity
Claude Code Quota Reset Follows Morning Outage
Anthropic initiates a Claude Code quota reset for premium subscribers affected by a morning server glitch that erroneously blocked message transmissions.
18 views
Daily Writeups
⤷ Title: Chrome Extension Vulnerabilities: Millions at Risk
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 06:30:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chrome extensions #cybersecurity #MaXSS #Spyder
Daily CyberSecurity
Chrome Extension Vulnerabilities: Millions at Risk
Discover how the MaXSS and Spyder Chrome extension vulnerabilities in MaxAI and SiderAI put millions at risk. Protect your browser sessions today.
16 views
Daily Writeups
⤷ Title: Cracking NASA’s Mail Edge: NTLM Relay, Leaks & a Misconfigured Exchange
════════════════════════
𐀪 Author: Gokul
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 06:08:44 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability #nasa #cybersecurity
Medium
Cracking NASA’s Mail Edge: NTLM Relay, Leaks & a Misconfigured Exchange
Sometimes you don’t break in… you just knock weird enough and the server spills everything.
21 views
Daily Writeups
⤷ Title: Day 1 — Reconnaissance: How I Scanned My Own Network (And Got Caught)
════════════════════════
𐀪 Author: Adamantojose
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 06:19:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #technology #networking #hacking
Medium
Day 1 — Reconnaissance: How I Scanned My Own Network (And Got Caught)
Welcome to Day 1 of my home lab attack/defense series. I have two virtual machines — a Kali Linux attacker and a Windows 10 defender. The…
14 views
Daily Writeups
⤷ Title: I Asked My AI to Read an Email, and It Stole My Data: The Rise of Prompt Injection Attacks
════════════════════════
𐀪 Author: Nithiya Rajendran
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 06:48:50 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #tech_trends #artificial_intelligence #machine_learning
Medium
I Asked My AI to Read an Email, and It Stole My Data: The Rise of Prompt Injection Attacks
Enterprise AI copilots aren’t just chatting with us anymore — they are taking actions on our behalf. And hackers have figured out exactly…
14 views