Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Zero-Day Chaos: The “BlueHammer” Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:54:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #BlueHammer #Chaotic Eclipse #GitHub Leak #InfoSec 2026 #LPE #Microsoft Security #Nightmare_Eclipse #privilege escalation #SAM Database #TOCTOU #Windows Zero_Day
Penetration Testing Tools
Zero-Day Chaos: The "BlueHammer" Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
The unauthorized disclosure of functional code for a nascent Windows vulnerability has presented Microsoft with a formidable new
8 views
Daily Writeups
⤷ Title: RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 02:06:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chaotic Eclipse #CVE_2026_33825 #cybersecurity #Elevation of Privilege #EoP #infosec #Microsoft Security #Nightmare_Eclipse #Patch Alert #RedSun #Windows Defender #zero_day
Daily CyberSecurity
RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes
Windows Defender "RedSun" zero-day revealed! This unpatched EoP flaw turns antivirus into a delivery tool for malicious payloads. PoC is public—patch now!
16 views
Daily Writeups
⤷ Title: Windows Snipping Tool Can Leak Your Identity, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:47:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blackarrow #Deep Link #Exploit Code #Microsoft Security #ms_screensketch #NTLM Disclosure #proof_of_concept #Tarlogic #Windows Snipping Tool #Windows vulnerability
Daily CyberSecurity
Windows Snipping Tool Can Leak Your Identity, PoC Available
Detailed PoC and exploit code for CVE-2026-33829 are now public. See how the Windows Snipping Tool can leak NTLM hashes and how to patch the flaw.
15 views
Daily Writeups
⤷ Title: Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:53:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #CISA KEV #CVE_2026_33825 #Huntress Labs #infosec #Local Privilege Escalation #LPE #Microsoft Defender #Microsoft Security #RedSun #SAM Database #TOCTOU #UnDefend
Daily CyberSecurity
Microsoft Defender Zero-Day "BlueHammer" Hits KEV Catalog Following Researcher's Protest
CISA adds BlueHammer (CVE-2026-33825) to the KEV catalog. This Microsoft Defender LPE exploit uses TOCTOU to hijack SAM databases. Patch by May 6, 2026.
16 views
Daily Writeups
⤷ Title: New “ClickFix” Campaign Bypasses Gatekeeper to Hijack macOS Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 09 May 2026 01:00:27 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #Apple Security #ClickFix #Crypto theft #Gatekeeper Bypass #Infostealer #macOS #MacSync #Microsoft Security Report #SHub Stealer #Terminal Malware
Daily CyberSecurity
New "ClickFix" Campaign Bypasses Gatekeeper to Hijack macOS Devices
Microsoft reveals a macOS ClickFix campaign using fake "fixes" to trick users into running Terminal commands that bypass Gatekeeper and steal crypto wallets.
11 views
Daily Writeups
⤷ Title: MiniPlasma Zero-Day: PoC Exploit Code and Vulnerability Details Publicly Disclosed for Windows 11
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 00:30:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chaotic Eclipse #CVE_2020_17103 #Local Privilege Escalation #Microsoft Security #MiniPlasma #proof_of_concept #vulnerability disclosure #Windows 11 Security #Windows Server 2025 #Zero_Day Vulnerability
Daily CyberSecurity
MiniPlasma Zero-Day: PoC Exploit Code and Vulnerability Details Publicly Disclosed for Windows 11
Details and PoC code for the "MiniPlasma" zero-day exploit are now public. See how a 6-year-old flaw grants SYSTEM access on fully patched Windows 11.
16 views
Daily Writeups
⤷ Title: Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:05:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anti_malware Client Version 4.18.26040.7 #CVE_2026_41091 Update #CVE_2026_45498 Denial of Service #Defender Security Advisory #Microsoft Defender Privilege Escalation #Microsoft Security Updates 2026 #Patch Verification Guide #System Level Privilege Escalation #Windows Endpoint Patch
Information Security News
Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
Microsoft has formally disseminated a security advisory detailing the successful remediation of critical vulnerabilities identified within the Microsoft
25 views
Daily Writeups
⤷ Title: The Windows 10 Sunset: HP’s Market Opportunity and the Consumer ESU Deadline
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:37:32 +0000
════════════════════════
⌗ Tags: #Technology #Windows #consumer ESU program #enterprise update costs #HP hardware refresh #IoT LTSC alternatives #Microsoft security lifecycle #Windows 10 extended support
Daily CyberSecurity
The Windows 10 Sunset: HP's Market Opportunity and the Consumer ESU Deadline
Learn about the Windows 10 extended support lifecycle. Discover consumer ESU details, enterprise update costs, and HP hardware trends.
14 views
Daily Writeups
⤷ Title: Microsoft Discovers Crypto Clipper Utilizing Tor for Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Clipper #Microsoft Security #Tor Network #USB Malware
Information Security News
Microsoft Discovers Crypto Clipper Utilizing Tor for Control
Microsoft has detailed a sophisticated crypto clipper utilizing Tor for command and control, spreading via USB drives to hijack cryptocurrency transactions.
24 views
Daily Writeups
⤷ Title: How I Earned $10,000 From Microsoft (From Just 2 Bugs Out of 30+)
════════════════════════
𐀪 Author: Aman Kumar (ak)
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 08:37:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #india #bug_bounty #microsoft_security #microsoft
Medium
How I Earned $10,000 From Microsoft (From Just 2 Bugs Out of 30+)
One year. More than thirty reports to Microsoft, only two of them paid, and a whole security conference built on the side while I did it…
11 views
Daily Writeups
⤷ Title: Entra ID Security: Dynamic Group Attribute Manipulation Leading to Privilege Escalation
════════════════════════
𐀪 Author: Borz Fabian-Denis
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 05:43:53 GMT
════════════════════════
⌗ Tags: #entra_id #privilege_escalation #hacking #microsoft_security #group_dynamics
Medium
Entra ID Security: Dynamic Group Attribute Manipulation Leading to Privilege Escalation
In this article I will demonstrate how poor dynamic group membership rules could be exploited by hackers in order to enumerate and escalate…
11 views