Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:20:01 +0530
════════════════════════
⌗ Tags: No_Tags
12 views
Daily Writeups
⤷ Title: PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:10:45 +0530
════════════════════════
⌗ Tags: No_Tags
11 views
Daily Writeups
⤷ Title: LiteLLM Supply Chain Attack Compromises PyPI and Docker
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:58:36 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Infostealer #LiteLLM #PyPI #supply chain attack
Information Security News
LiteLLM Supply Chain Attack Compromises PyPI and Docker
Merely launching Python after installing LiteLLM triggered immediate credential theft. On October 21, threat actors injected a malicious data stealer into version 1.107.0. The compromise affected …
9 views
Daily Writeups
⤷ Title: Ukraine Data Exchange Breach Linked to Log4Shell
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:15:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #data breach #Graylog #Log4Shell #Ukraine
Information Security News
Ukraine Data Exchange Breach Linked to Log4Shell
A five-year-old software vulnerability recently compromised servers associated with the Ukrainian state data exchange infrastructure. Specifically, an unidentified adversary leveraged the critical…
6 views
Daily Writeups
⤷ Title: ZDI Leaks Critical Linux Kernel Vulnerabilities to LKML
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #Linux Kernel #remote code execution #vulnerability #ZDI #zero_day
Information Security News
ZDI Leaks Critical Linux Kernel Vulnerabilities to LKML
The Zero Day Initiative (ZDI) team at Trend Micro recently experienced an operational mishap. Specifically, researchers inadvertently copied several confidential vulnerability reports to the publi…
7 views
Daily Writeups
⤷ Title: Storm-0940 Hits ConnectWise With ARTEX Agentic AI
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:52:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Agentic AI #ARTEX #cloud security #ConnectWise #Entra ID #Microsoft 365 #Storm_0940 #supply chain attack
Information Security News
Storm-0940 Hits ConnectWise With ARTEX Agentic AI
A Cloud Breach in Under Three Hours A cloud breach can fit inside a single work meeting. Microsoft has disclosed a large operation by the actor Storm-0940. Its members used the ARTEX AI platform t…
7 views
Daily Writeups
⤷ Title: LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:44:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_113499 #CVE_2026_113500 #CVE_2026_113501 #LiteSpeed Cache #Stored XSS #WordPress Plugin #wpscan
Daily CyberSecurity
LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
TL;DR LiteSpeed Cache 7.9.2, released October 20, 2026, fixes three LiteSpeed Cache vulnerabilities disclosed by WPScan on October 23. Two flaws let unauthenticated commenters plant stored XSS tha…
8 views
Daily Writeups
⤷ Title: OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:35:29 +0000
════════════════════════
⌗ Tags: #Linux #cybersecurity #Kernel Security #OpenBSD #OpenSSH #Operating Systems
Daily CyberSecurity
OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata
Even OpenBSD, an operating system acclaimed for proactive security, required immediate updates on launch day. On October 20, developers launched the 61st edition of the platform. As detailed in th…
10 views
Daily Writeups
⤷ Title: INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:01:29 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2026_35616 #INC Ransomware affiliates #INC Ransomware affiliates AI #Phantom Framework #SOCRadar #The Gentlemen Ransomware
Daily CyberSecurity
INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors
At a Glance Malware Family INC Ransomware (Rust-based encryptors), The Gentlemen extortion kit, Phantom framework, Ghost C2, and RevSocks Threat Actor Confirmed affiliates of INC Ransomware (MITRE…
13 views
Daily Writeups
⤷ Title: Australian Court Forces Apple to Open the App Store
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:50:01 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #Australia #Epic Games #Fortnite #ios #Sideloading
Daily CyberSecurity
Australian Court Forces Apple to Open the App Store
Another Regulator Pushes Apple to Open Up Two days after the UK Competition and Markets Authority (CMA) issued an ultimatum over iPhone NFC payment access and high fees, an Australian court has or…
9 views
Daily Writeups
⤷ Title: CAPCOM ID Data Breach Exposes 11.77 Million Records
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:33:56 +0000
════════════════════════
⌗ Tags: #Data Leak #Account Security #Capcom #CAPCOM ID #cybersecurity #Data Breach #gaming #Japan #phishing
Daily CyberSecurity
CAPCOM ID Data Breach Exposes 11.77 Million Records
Capcom Confirms Unauthorized Access Japanese game maker Capcom has confirmed unauthorized access to its CAPCOM ID membership system. The breach involves 11.77 million user records worldwide. CAPCO…
12 views
Daily Writeups
⤷ Title: Arc Browser Shutdown Set for December 22, 2026
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:30:41 +0000
════════════════════════
⌗ Tags: #Technology #AI Browser #Arc browser #Browser Shutdown #Data Migration #Dia browser #macOS #The Browser Company #windows
Daily CyberSecurity
Arc Browser Shutdown Set for December 22, 2026
The Browser Company Retires Arc The Browser Company has already stopped developing Arc, a browser that developers loved. Its user base never grew large enough, so the company chose to move on to a…
11 views
Daily Writeups
⤷ Title: Doppelganger Campaign Targets Israel Elections With Fake News and AI Poisoning
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:01:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI poisoning #ClearSky #Disinformation #Doppelgänger campaign #Israel #russia
Daily CyberSecurity
Doppelganger Campaign Targets Israel Elections With Fake News and AI Poisoning
TL;DR Russian threat actors revived the Doppelganger campaign in August 2026 to target voters ahead of Israel’s October 27 elections. Through a spoofed news portal, the Doppelganger campaign…
26 views
Daily Writeups
⤷ Title: I Built a Vulnerable Demo App to Understand How Common Web Bugs Happen
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:28:05 GMT
════════════════════════
⌗ Tags: #programming #python #data_science #web_development #bug_bounty
Medium
I Built a Vulnerable Demo App to Understand How Common Web Bugs Happen
I used to think web security was mostly about learning the right tools. Building an intentionally vulnerable application taught me…
15 views
Daily Writeups
⤷ Title: Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
════════════════════════
𐀪 Author: FlawPilot
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:57:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #open_source #application_security #software_development #artificial_intelligence
Medium
Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
The free service can find vulnerabilities and suggest patches, but enrolled projects must be ready to validate the results themselves.
8 views
Daily Writeups
⤷ Title: Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
════════════════════════
𐀪 Author: Robert Broeckelmann
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:53 GMT
════════════════════════
⌗ Tags: #threat_modeling #identity_management #application_security #threat
Medium
Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
Threat modeling is one of those security practices that everybody agrees is important, but not everybody agrees on how to do.
12 views
Daily Writeups
⤷ Title: OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned
════════════════════════
𐀪 Author: Mohammed Salah Khaleel
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #oscp #offsec #hacking #pentesting #cybersecurity
Medium
OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned
I had 8 hours left and only needed one more flag. I gave up. I still don’t know why.
11 views
Daily Writeups
⤷ Title: Introduction to Active Directory: What Every Pentester Needs to Know First
════════════════════════
𐀪 Author: Vipin_M
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:50 GMT
════════════════════════
⌗ Tags: #kali_linux #hacking #pentesting #networking #active_directory
Medium
Introduction to Active Directory: What Every Pentester Needs to Know First
Walk into almost any internal penetration test and you’ll find the same thing running the show: Active Directory. It’s the system deciding…
14 views
Daily Writeups
⤷ Title: PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
════════════════════════
𐀪 Author: ExploitDNA
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:46:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #security #artificial_intelligence #infosec
Medium
PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
Part 1: Introduction, Background, and Why PHP2Shell Matters
20 views
Daily Writeups
⤷ Title: Php2Shell
════════════════════════
𐀪 Author: clwwn
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:10:54 GMT
════════════════════════
⌗ Tags: #php #tryhackme #php2shell
Medium
Php2Shell
Upload Progress
21 views
Daily Writeups
⤷ Title: TryHackMe PHP2Shell — Complete Walkthrough
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:58:21 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cve #tryhackme #php
Medium
TryHackMe PHP2Shell — Complete Walkthrough
PHP2Shell is a PHP runtime vulnerability chain that can lead to memory disclosure and remote code execution (RCE). Unlike application-level…
28 views