Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: How to Comply with MiCA Regulations for Crypto Asset Service Providers in the European Market?
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 00:39:21 +0000
════════════════════════
⌗ Tags: #Crypto #Fintech #Technology #Blockchain #MiCA
Hackread
How to Comply with MiCA Regulations for Crypto Asset Service Providers in the European Market?
MiCA compliance requires crypto firms entering the EU to address authorization, governance, capital, client asset protection and ongoing reporting requirements.
9 views
Daily Writeups
⤷ Title: Why Small Businesses Shouldn’t Go It Alone With Cloud Migration
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 23:21:43 +0000
════════════════════════
⌗ Tags: #Technology #Business
Hackread
Why Small Businesses Shouldn’t Go It Alone With Cloud Migration
Cloud migration generally involves moving data, applications or workloads from existing infrastructure into cloud-based services
11 views
Daily Writeups
⤷ Title: Local Presence, Global Reach: How Virtual Numbers Support International Customer Communication
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 23:07:03 +0000
════════════════════════
⌗ Tags: #Technology
Hackread
Local Presence, Global Reach: How Virtual Numbers Support International Customer Communication
Virtual numbers provide one option by separating a business telephone number from a particular physical phone line or location.
16 views
Daily Writeups
⤷ Title: Integrating AI Tools Into Research Teams: Productivity Benefits and Risks
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 22:35:53 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Technology
Hackread
Integrating AI Tools Into Research Teams: Productivity Benefits and Risks
AI tools are finding a place in research workflows, particularly for tasks such as transcription, summarization, and qualitative analysis and organizing large amounts of information
15 views
Daily Writeups
⤷ Title: How a single broken button got me £150 from a bug bounty program
════════════════════════
𐀪 Author: Sairaj Thorat
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 23:00:36 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #cybersecurity #bug_bounty #bug_bounty_writeup #infosec
Medium
How a single broken button got me £150 from a bug bounty program
How a single broken button got me £150 from a bug bounty program The first step in this story was recon as well. While I was reconning one of my bug bounty targets, I found a domain that I was not …
21 views
Daily Writeups
⤷ Title: How Cybercriminals Misuse OSINT Tools
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 22:58:24 GMT
════════════════════════
⌗ Tags: #cybercrime #hacking #cyberattack #osint #cybersecurity
Medium
How Cybercriminals Misuse OSINT Tools
Six tools that reveal what outsiders can learn about you
24 views
Daily Writeups
⤷ Title: Linux File Transfer Methods — A Practitioner’s Reference
════════════════════════
𐀪 Author: Gabriel D. Vincent
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 22:41:01 GMT
════════════════════════
⌗ Tags: #windows #cybersecurity #ethical_hacking #pentesting #infosec
Medium
Linux File Transfer Methods — A Practitioner’s Reference
A reference for moving files to and from Linux targets. Organized by use case, not theory.
35 views
Daily Writeups
⤷ Title: CTF Player: Should You Build Your Own Tools or Use Existing Ones?
════════════════════════
𐀪 Author: GUNASEELAN
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #cybersecurity_careers #ctf #ethical_hacking #cybersecurity #career_advice
Medium
CTF Player: Should You Build Your Own Tools or Use Existing Ones?
Every CTF player hits this moment eventually.
30 views
Daily Writeups
⤷ Title: Using Paybis as a Crypto On-Ramp in 2026: Fees, Wallets and Checks
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 00:12:59 +0000
════════════════════════
⌗ Tags: #Crypto #Blockchain #Fintech #Cryptocurrency #Paybis #Technology
Hackread
Using Paybis as a Crypto On-Ramp in 2026: Fees, Wallets and Checks
Paybis offers crypto on-ramp and off-ramp services with cards, bank transfers and wallets. Learn about its fees, verification, security and regional availability.
26 views
Daily Writeups
⤷ Title: D-Link DIR-822A Vulnerabilities Details and PoC Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 01:50:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_86296 #CVE_2026_86510 #D_Link #DIR_822A #proof_of_concept #router security
Daily CyberSecurity
D-Link DIR-822A Vulnerabilities Details and PoC Disclosed
TL;DR Security researchers revealed two severe D-Link DIR-822A vulnerabilities impacting wireless networking hardware. The flaws allow unauthenticated local attackers to trigger stack buffer overf…
19 views
Daily Writeups
⤷ Title: Pega Platform SAML Authentication Bypass: Critical 9.5 Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 01:42:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #improper authentication #P26 advisory #Pega #Pega Platform #SAML authentication bypass #SSO #X.509 certificate
Daily CyberSecurity
Pega Platform SAML Authentication Bypass: Critical 9.5 Flaw Patched
TL;DR Pega disclosed a Pega Platform SAML authentication bypass on September 18, 2026. It covers two flaws, one Critical (CVSS 9.5) and one High (CVSS 7.0). Pega has released patches and hotfixes.…
17 views
Daily Writeups
⤷ Title: Exploited Zyxel Switch Vulnerability Added to CISA KEV
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 01:35:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CISA KEV #CVE_2026_7273 #network_security #Zyxel
Daily CyberSecurity
Exploited Zyxel Switch Vulnerability Added to CISA KEV
TL;DR On September 21, 2026, federal authorities confirmed active attacks against a critical Zyxel switch vulnerability. The flaw allows unauthenticated local attackers to execute arbitrary system…
19 views
Daily Writeups
⤷ Title: cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 01:00:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CUPS #cups2root #Linux zero_day #lpadmin #privilege escalation #proof_of_concept #Root Exploit
Daily CyberSecurity
cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS
TL;DR A researcher published cups2root, a working proof-of-concept that escalates a local lpadmin user to root on CUPS. The exploit chains several configuration and privilege-boundary flaws. No CV…
22 views
Daily Writeups
⤷ Title: Public PoC Disclosed for Android Telecom Vulnerability CVE-2026-49881
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 00:23:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #CVE_2026_49881 #cybersecurity #Telecom Service #Vulnerability
Daily CyberSecurity
Public PoC Disclosed for Android Telecom Vulnerability CVE-2026-49881
TL;DR A critical logic flaw exists in the Android 17 Telecom service. The Android Telecom vulnerability allows unprivileged applications to execute arbitrary code within the system server. Further…
20 views
Daily Writeups
⤷ Title: How does a DAST scanner prove a vulnerability without reading your code?
════════════════════════
𐀪 Author: Codeunderfire
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 01:48:49 GMT
════════════════════════
⌗ Tags: #devsecops #application_security
Medium
How does a DAST scanner prove a vulnerability without reading your code?
Dynamic application security testing attacks a running app over HTTP, sends crafted requests, and reads the responses. A finding is not a…
20 views
Daily Writeups
⤷ Title: What is BOLA and how do attackers exploit broken object level authorization?
════════════════════════
𐀪 Author: Apiunderattack
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 01:17:06 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_development #owasp #api_security
Medium
What is BOLA and how do attackers exploit broken object level authorization?
BOLA, Broken Object Level Authorization, is an API that verifies who you are and then returns any object whose ID you supply, without…
29 views
Daily Writeups
⤷ Title: Retrieval as Execution
════════════════════════
𐀪 Author: Fnu Tarana
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 00:14:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai_security #application_security #ai_agent
Medium
Retrieval as Execution
Why agent memory poisoning is stored XSS all over again, and what your SAST pipeline will and won’t catch.
28 views
Daily Writeups
⤷ Title: Four Hours Changed Everything: My BSCP Exam Experience
════════════════════════
𐀪 Author: Alejandro Perez
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 01:22:34 GMT
════════════════════════
⌗ Tags: #certification #cybersecurity #burpsuite #hacking #web_exploitation
Medium
Four Hours Changed Everything: My BSCP Exam Experience
I have spent a lot of time doing CTFs, Hack The Box machines, Active Directory environments, and practical certification exams.
33 views
Daily Writeups
⤷ Title: Assume the Laptop Is Lost: Encryption at Rest for the Infostealer Era
════════════════════════
𐀪 Author: Mate Valko
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 00:50:09 GMT
════════════════════════
⌗ Tags: #infosec #safety #encryption #cyber_security_awareness #ai
Medium
Assume the Laptop Is Lost: Encryption at Rest for the Infostealer Era
What a four-hour window in August 2025 taught me about secrets at rest
51 views
Daily Writeups
⤷ Title: Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 03:14:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista Networks #CVE_2026_93952 #network_security #VeloCloud #Vulnerability #zero_day
Daily CyberSecurity
Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10
TL;DR On September 22, 2026, Arista Networks warned of active attacks against a critical VeloCloud vulnerability. Tracked as CVE-2026-93952, the flaw earns a maximum CVSS rating of 10.0. The vendo…
35 views
Daily Writeups
⤷ Title: OpenAI Races to Counter Grok Bot and Meta’s Muse
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 02:59:59 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #Codex #Grok Bot #Meta Muse #OpenAI #OpenClaw
Daily CyberSecurity
OpenAI Races to Counter Grok Bot and Meta’s Muse
According to a report on The Information’s website, OpenAI is actively adjusting its product strategy to withstand a powerful pincer from rivals in the field of the personal AI agent. The ou…
34 views