Daily Writeups
@Daily_Writeups
3.89K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.89K subscribers
Daily Writeups
⤷ Title: Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 18:41:09 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 17:50:23 +0530
════════════════════════
⌗ Tags: No_Tags
24 views
Daily Writeups
⤷ Title: What Is Cryptocurrency and How Does It Actually Work?
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:17:21 +0000
════════════════════════
⌗ Tags: #Crypto #Blockchain #Cryptocurrency #Cryptography #Fintech #Technology
Hackread
What Is Cryptocurrency and How Does It Actually Work?
Learn how cryptocurrency works, from blockchains and wallets to private keys, custody, and secure transactions, with practical security tips. for confident use.
13 views
Daily Writeups
⤷ Title: Blockchain Life Returns to Dubai — Featuring the Debut of AI Future
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:13:39 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Blockchain Life Returns to Dubai — Featuring the Debut of AI Future
Dubai, UAE, 23rd July 2026, CyberNewswire
11 views
Daily Writeups
⤷ Title: JADEPUFFER AI Ransomware Devastates Corporate Infrastructure
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:00:03 +0000
════════════════════════
⌗ Tags: #Malware #AI Ransomware #cybersecurity #ENCFORGE #JadePuffer #Langflow
Information Security News
JADEPUFFER AI Ransomware Devastates Corporate Infrastructure
Targeting the Crown Jewels of the Digital Age Malicious extortionists increasingly target not merely conventional documents and databases, but rather the most invaluable digital assets within corp…
17 views
Daily Writeups
⤷ Title: AgentBaiting Malware Campaign Targets AI MCP Servers
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:24:56 +0000
════════════════════════
⌗ Tags: #Malware #AgentBaiting #AI Malware #GitHub Security #MCP Server #StealC
Information Security News
AgentBaiting Malware Campaign Targets AI MCP Servers
Emergence of AgentBaiting Threat Vector The surging popularity of artificial intelligence tools has transformed skill directories into lucrative initial access points. Attackers target Model Conte…
13 views
Daily Writeups
⤷ Title: Malicious npm Worm Targets AI Software Supply Chains
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:00:59 +0000
════════════════════════
⌗ Tags: #Malware #AI security #CrowdStrike #cybersecurity #npm Worm #supply chain attack
Information Security News
Malicious npm Worm Targets AI Software Supply Chains
Stealthy Infiltration Tactics A sophisticated new malware conceals itself within standard software development processes. Furthermore, it perfectly mimics legitimate automation tools. Security sys…
12 views
Daily Writeups
⤷ Title: Google Selfie Video Sign-In Recovers Locked Accounts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:22:11 +0000
════════════════════════
⌗ Tags: #Technology #Account Recovery #Account Security #Biometrics #deepfake #google #Passkeys #Selfie Video
Daily CyberSecurity
Google Selfie Video Sign-In Recovers Locked Accounts
We live in an age thoroughly dependent on digital accounts. How, then, does one prove one is oneself after losing a phone, forgetting a password, or finding every backup device unavailable? Seekin…
12 views
Daily Writeups
⤷ Title: HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Traffic Server #CVE_2026_44909 #CVE_2026_59173 #CVE_2026_59762 #Denial of Service #HTTP/2 DoS vulnerability #memory exhaustion #stalled flow control
Daily CyberSecurity
HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
A newly disclosed HTTP/2 DoS vulnerability affects several server implementations at once. A remote, unauthenticated attacker can crash or freeze a server by abusing normal flow-control settings. …
12 views
Daily Writeups
⤷ Title: TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:44:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #half_click exploits #Proofpoint #SpyPress #TA458 #TA488 #webmail zero_days #Zimbra #ZimReaper
Daily CyberSecurity
TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits
At a Glance Actor or group TA488 (Void Blizzard, Laundry Bear) and TA458 (Operation RoundPress), both Russia-aligned Activity type Espionage via cross-site scripting flaws in webmail; credential a…
11 views
Daily Writeups
⤷ Title: JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:22:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_64812 #CVE_2026_64813 #CVE_2026_65907 #IntelliJ IDEA #JetBrains #JetBrains vulnerabilities #TeamCity
Daily CyberSecurity
JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
TL;DR JetBrains fixed 18 vulnerabilities across GoLand, IntelliJ IDEA, PhpStorm, PyCharm, TeamCity, and WebStorm. Two IntelliJ IDEA flaws in Remote Development sessions carry a maximum CVSS score …
16 views
Daily Writeups
⤷ Title: Apache Syncope Patches SQL Injection and Privilege Escalation Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:10:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache security #Apache Syncope vulnerabilities #CVE_2026_57308 #CVE_2026_62183 #Identity Management #patch management #privilege escalation flaw #sql injection
Daily CyberSecurity
Apache Syncope Patches SQL Injection and Privilege Escalation Flaws
The Apache Syncope project has patched two security flaws in its identity management platform. Both Apache Syncope vulnerabilities carry an “important” severity rating. One allows SQL …
15 views
Daily Writeups
⤷ Title: The Confused Deputy in the AWS Cloud: Bypassing Kubernetes NodeRestriction via IAM Spoofing
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:48:27 GMT
════════════════════════
⌗ Tags: #kubernetes #cybersecurity #bug_bounty #aws #cloud_security
Medium
The Confused Deputy in the AWS Cloud: Bypassing Kubernetes NodeRestriction via IAM Spoofing
Introduction
12 views
Daily Writeups
⤷ Title: AI vs. Human Audit: Why Automation Cannot Replace Cybersecurity Expertise
════════════════════════
𐀪 Author: SdxShadowlabs
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:19:39 GMT
════════════════════════
⌗ Tags: #ai #audit #bug_bounty #sdxshadowlabs #cybersecurity
Medium
AI vs. Human Audit: Why Automation Cannot Replace Cybersecurity Expertise
The cybersecurity industry is currently saturated with claims that artificial intelligence will soon replace human security analysts and…
11 views
Daily Writeups
⤷ Title: How a Simple Google Dork Led Me to Find Reflected XSS & HTML Injection on NASA and Earn a Letter of…
════════════════════════
𐀪 Author: ItsS4LEH
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:07:34 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty_tips #bug_bounty_writeup #bug_bounty #bugbounty_writeup
Medium
How a Simple Google Dork Led Me to Find Reflected XSS & HTML Injection on NASA and Earn a Letter of Recognition [April 2026]
Disclaimer
18 views
Daily Writeups
⤷ Title: Bypassing reCAPTCHA Due to Missing Server-Side Validation
════════════════════════
𐀪 Author: 0X0DOoOM
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:07:35 GMT
════════════════════════
⌗ Tags: #hackerone #recaptcha #web_application_security #bug_bounty #misconfiguration
Medium
Bypassing reCAPTCHA Due to Missing Server-Side Validation
اللَهُمَّ صلِّ وسَلِم وبَارِك على سيدنا محمد (ﷺ)
12 views
Daily Writeups
⤷ Title: What is Vulnerability Assessment vs Penetration Testing?
════════════════════════
𐀪 Author: Himanshu Parmar
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:46:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #application_security #information_security #ethical_hacking
Medium
What is Vulnerability Assessment vs Penetration Testing?
Introduction
18 views
Daily Writeups
⤷ Title: Stop Using requirements.txt: The pylock.toml Migration Guide
════════════════════════
𐀪 Author: Daily Python Programming
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:15:44 GMT
════════════════════════
⌗ Tags: #python #programming #hacking #software_engineering #devops
Medium
Stop Using requirements.txt: The pylock.toml Migration Guide
PEP 751 changes Python packaging forever. Here’s what I learned switching our production environments to tool-agnostic lock files.
9 views
Daily Writeups
⤷ Title: Internal (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:05:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #tryhackme #privilege_escalation #linux
Medium
Internal (THM) Tryhackme Hard Challenge
Description : Penetration Testing Challenge
18 views
Daily Writeups
⤷ Title: Coercion to krbtgt: NTLM Relay and ADCS ESC8 in 2026
════════════════════════
𐀪 Author: Gilo
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:33:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #dfir #esc8 #adcs_attacks
Medium
Coercion to krbtgt: NTLM Relay and ADCS ESC8 in 2026
A lab-verified walkthrough of the coercion to relay to certificate chain, and the forensic method for reconstructing it after the fact.
20 views
Daily Writeups
⤷ Title: Is Penetration Testing Still Relevant
════════════════════════
𐀪 Author: Sachin
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:13:46 GMT
════════════════════════
⌗ Tags: #security_testing #penetration_testing #cybersecurity #cyber_physical_systems
Medium
Is Penetration Testing Still Relevant
What happens when your security testing is a snapshot but your systems never stop moving
25 views