Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Some experiments and fun with SAST, DAST and CI/CD tools. And Juice Shop.
════════════════════════
𐀪 Author: Swapnil Deshpande
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 05:10:33 GMT
════════════════════════
⌗ Tags: #devsecops #github_actions #application_security #ci_cd_pipeline #information_security
Medium
Some experiments and fun with SAST, DAST and CI/CD tools. And Juice Shop.
I took a look at setting up SAST and DAST tools on OWASP Juice Shop. SAST scanners look at the application code to find security issues and…
11 views
Daily Writeups
⤷ Title: Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:05:24 +0000
════════════════════════
⌗ Tags: #Announcement #CISA KEV #CVE Alerts #CVE_Watch #EPSS #Exploit Intelligence #Free Trial #GitHub Issues #Microsoft Teams #patch management #Reserved CVE #Slack Integration #threat intelligence #vulnerability management
Daily CyberSecurity
Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
Daily CyberSecurity, the team behind the CVE-Watchtower vulnerability tracking platform on securityonline.info, today announced the general availability of CVE Alerts, a subscription service that …
15 views
Daily Writeups
⤷ Title: Placeholder Domain Hijacked for ClickFix Campaigns
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 13:11:40 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Github #malware #Social Engineering
Information Security News
Placeholder Domain Hijacked for ClickFix Campaigns
A mundane, ubiquitous example URL embedded within countless developer documentation files has horrifyingly metamorphosed into a live attack vector. The specific domain, third-party[.]com, historic…
25 views
Daily Writeups
⤷ Title: GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:02:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #GeoServer #GeoServer Cloud #GeoServer Cloud vulnerability #GitHub Actions #pull_request_target #Supply Chain Security
Daily CyberSecurity
GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets
TL;DR GeoServer maintainers disclosed a CVSS 10 GeoServer Cloud vulnerability in a GitHub Actions workflow. It could have let an outside contributor run code on the build runner and steal reposito…
23 views
Daily Writeups
⤷ Title: AI Coding Agents Leak 13,000 Internal Screenshots to Public GitHub Repos
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:21:06 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Agents #Data Exposure #DevSecOps #github #Glow Labs #PixelLeak #shadow AI
Daily CyberSecurity
AI Coding Agents Leak 13,000 Internal Screenshots to Public GitHub Repos
More than 13,000 internal screenshots sat in public GitHub repositories, open to anyone. Glow Labs says AI coding agents put them there. The firm calls this AI agent screenshot leak “PixelLe…
14 views
Daily Writeups
⤷ Title: PixelLeak: AI Agents Expose Corporate Secrets
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 12:37:29 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Agents #data breach #Github #PixelLeak
Information Security News
PixelLeak: AI Agents Expose Corporate Secrets
When an AI agent encountered difficulties attaching a screenshot to a private pull request, certain systems engineered an unexpected circumvention. They autonomously generated public repositories …
12 views
Daily Writeups
⤷ Title: PixelLeak: AI Agents Expose Corporate Secrets
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 12:37:29 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Agents #data breach #Github #PixelLeak
Information Security News
PixelLeak: AI Agents Expose Corporate Secrets
When an AI agent encountered difficulties attaching a screenshot to a private pull request, certain systems engineered an unexpected circumvention. They autonomously generated public repositories …
7 views
Daily Writeups
⤷ Title: I Built THM-TUNNEL to Fix One Annoying TryHackMe VPN Problem
════════════════════════
𐀪 Author: Harshsonker
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 08:04:49 GMT
════════════════════════
⌗ Tags: #github_repositories #tryhackme #tryhackme_writeup #bash #bash_script
Medium
I Built THM-TUNNEL to Fix One Annoying TryHackMe VPN Problem
If you use TryHackMe regularly, you might have faced this:
❤1
20 views
Daily Writeups
⤷ Title: Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 07:11:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AppDomainManager hijacking #Blinder Tunnel #CL_STA_1178 #fake job lure #Github C2 #Iran #ShelbyLoader #Unit 42
Daily CyberSecurity
Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq
At a Glance Actor CL-STA-1178, assessed as Iranian state-aligned (high confidence, per Unit 42) Activity Fake job lures, trojanized coding tests, GitHub-based espionage malware, credential phishin…
❤1
20 views
Daily Writeups
⤷ Title: Google suspend son bug bounty open source submergé par l’IA
════════════════════════
𐀪 Author: Marc Barbezat
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 11:31:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #open_source #hackerone #google #github
Medium
Google suspend son bug bounty open source submergé par l’IA
Google suspend son bug bounty open source submergé par l’IA Face à un déluge de faux signalements générés par l’IA, Google a gelé les soumissions de failles visant ses logiciels open …
12 views
Daily Writeups
⤷ Title: GhostAction Hack Compromises GitHub Developer Accounts
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 13:20:50 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #data breach #GhostAction #Github #supply chain attack
Information Security News
GhostAction Hack Compromises GitHub Developer Accounts
Malicious actors operating the GhostAction campaign successfully compromised two GitHub developer accounts. Within mere hours, they stealthily injected malicious scripts into a staggering minimum …
9 views
Daily Writeups
⤷ Title: Kimsuky Spear Phishing Targets Ukrainian Diplomacy and Security Experts in Operation GitPower
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 06:22:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #Genians #GitHub abuse #Kimsuky #Kimsuky spear phishing #LNK malware #North Korea #Operation GitPower #Ukraine
Daily CyberSecurity
Kimsuky Spear Phishing Targets Ukrainian Diplomacy and Security Experts in Operation GitPower
At a glance Actor Kimsuky, a North Korea-linked threat group (assessed by Genians) Activity Reply-baiting spear phishing, malicious LNK files, fake Zoom installer, credential phishing Targets Ukra…
21 views
Daily Writeups
⤷ Title: Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
════════════════════════
𐀪 Author: Eduard Kovacs
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 16:01:00 +0000
════════════════════════
⌗ Tags: #Data Breaches #data breach #Featured #GitHub #Meta
SecurityWeek
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
36 views
Daily Writeups
⤷ Title: npm Trusted Publishing Now Expires After 48 Hours
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 03:37:09 +0000
════════════════════════
⌗ Tags: #Technology #DevSecOps #github #GitHub Actions #npm #OIDC #open_source #Supply Chain Security #Trusted Publishing
Daily CyberSecurity
npm Trusted Publishing Now Expires After 48 Hours
GitHub Tightens npm Trusted Publishing Rules GitHub has changed the rules for npm trusted publishing. A new configuration that does not complete its first successful publish within 48 hours will n…
18 views
Daily Writeups
⤷ Title: Meta GitHub Breach Exposes Code and 1,500 Personal Records
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 08:04:31 +0000
════════════════════════
⌗ Tags: #Data Leak #cybersecurity #data breach #Github #Meta #source code
Information Security News
Meta GitHub Breach Exposes Code and 1,500 Personal Records
Threat actors recently exfiltrated proprietary Meta product source code alongside the personal records of approximately 1,500 individuals. Specifically, the attackers gained unauthorized access to…
8 views
Daily Writeups
⤷ Title: Your AI Coding Assistant Just Became a Hacker. Here’s the Proof.
════════════════════════
𐀪 Author: Sunil
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 15:06:32 GMT
════════════════════════
⌗ Tags: #chatgpt #github #artificial_intelligence #bug_bounty #cybersecurity
Medium
🤖Your AI Coding Assistant Just Became a Hacker. Here’s the Proof.
I found a critical vulnerability in ChatGPT’s GitHub connector. I reported it. They called it out of scope. So I am publishing the proof…
29 views