Daily Writeups
@Daily_Writeups
4.04K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.04K subscribers
Daily Writeups
⤷ Title: INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:01:29 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2026_35616 #INC Ransomware affiliates #INC Ransomware affiliates AI #Phantom Framework #SOCRadar #The Gentlemen Ransomware
Daily CyberSecurity
INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors
At a Glance Malware Family INC Ransomware (Rust-based encryptors), The Gentlemen extortion kit, Phantom framework, Ghost C2, and RevSocks Threat Actor Confirmed affiliates of INC Ransomware (MITRE…
11 views
Daily Writeups
⤷ Title: Australian Court Forces Apple to Open the App Store
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:50:01 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #Australia #Epic Games #Fortnite #ios #Sideloading
Daily CyberSecurity
Australian Court Forces Apple to Open the App Store
Another Regulator Pushes Apple to Open Up Two days after the UK Competition and Markets Authority (CMA) issued an ultimatum over iPhone NFC payment access and high fees, an Australian court has or…
7 views
Daily Writeups
⤷ Title: CAPCOM ID Data Breach Exposes 11.77 Million Records
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:33:56 +0000
════════════════════════
⌗ Tags: #Data Leak #Account Security #Capcom #CAPCOM ID #cybersecurity #Data Breach #gaming #Japan #phishing
Daily CyberSecurity
CAPCOM ID Data Breach Exposes 11.77 Million Records
Capcom Confirms Unauthorized Access Japanese game maker Capcom has confirmed unauthorized access to its CAPCOM ID membership system. The breach involves 11.77 million user records worldwide. CAPCO…
10 views
Daily Writeups
⤷ Title: Arc Browser Shutdown Set for December 22, 2026
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:30:41 +0000
════════════════════════
⌗ Tags: #Technology #AI Browser #Arc browser #Browser Shutdown #Data Migration #Dia browser #macOS #The Browser Company #windows
Daily CyberSecurity
Arc Browser Shutdown Set for December 22, 2026
The Browser Company Retires Arc The Browser Company has already stopped developing Arc, a browser that developers loved. Its user base never grew large enough, so the company chose to move on to a…
9 views
Daily Writeups
⤷ Title: Doppelganger Campaign Targets Israel Elections With Fake News and AI Poisoning
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:01:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI poisoning #ClearSky #Disinformation #Doppelgänger campaign #Israel #russia
Daily CyberSecurity
Doppelganger Campaign Targets Israel Elections With Fake News and AI Poisoning
TL;DR Russian threat actors revived the Doppelganger campaign in August 2026 to target voters ahead of Israel’s October 27 elections. Through a spoofed news portal, the Doppelganger campaign…
24 views
Daily Writeups
⤷ Title: I Built a Vulnerable Demo App to Understand How Common Web Bugs Happen
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:28:05 GMT
════════════════════════
⌗ Tags: #programming #python #data_science #web_development #bug_bounty
Medium
I Built a Vulnerable Demo App to Understand How Common Web Bugs Happen
I used to think web security was mostly about learning the right tools. Building an intentionally vulnerable application taught me…
12 views
Daily Writeups
⤷ Title: Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
════════════════════════
𐀪 Author: FlawPilot
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:57:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #open_source #application_security #software_development #artificial_intelligence
Medium
Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
The free service can find vulnerabilities and suggest patches, but enrolled projects must be ready to validate the results themselves.
7 views
Daily Writeups
⤷ Title: Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
════════════════════════
𐀪 Author: Robert Broeckelmann
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:53 GMT
════════════════════════
⌗ Tags: #threat_modeling #identity_management #application_security #threat
Medium
Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
Threat modeling is one of those security practices that everybody agrees is important, but not everybody agrees on how to do.
10 views
Daily Writeups
⤷ Title: OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned
════════════════════════
𐀪 Author: Mohammed Salah Khaleel
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #oscp #offsec #hacking #pentesting #cybersecurity
Medium
OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned
I had 8 hours left and only needed one more flag. I gave up. I still don’t know why.
9 views
Daily Writeups
⤷ Title: Introduction to Active Directory: What Every Pentester Needs to Know First
════════════════════════
𐀪 Author: Vipin_M
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:50 GMT
════════════════════════
⌗ Tags: #kali_linux #hacking #pentesting #networking #active_directory
Medium
Introduction to Active Directory: What Every Pentester Needs to Know First
Walk into almost any internal penetration test and you’ll find the same thing running the show: Active Directory. It’s the system deciding…
13 views
Daily Writeups
⤷ Title: PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
════════════════════════
𐀪 Author: ExploitDNA
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:46:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #security #artificial_intelligence #infosec
Medium
PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
Part 1: Introduction, Background, and Why PHP2Shell Matters
17 views
Daily Writeups
⤷ Title: Php2Shell
════════════════════════
𐀪 Author: clwwn
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:10:54 GMT
════════════════════════
⌗ Tags: #php #tryhackme #php2shell
Medium
Php2Shell
Upload Progress
20 views
Daily Writeups
⤷ Title: TryHackMe PHP2Shell — Complete Walkthrough
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:58:21 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cve #tryhackme #php
Medium
TryHackMe PHP2Shell — Complete Walkthrough
PHP2Shell is a PHP runtime vulnerability chain that can lead to memory disclosure and remote code execution (RCE). Unlike application-level…
26 views
Daily Writeups
⤷ Title: Stolen OAuth tokens: what DPoP fixes, and what it doesn’t
════════════════════════
𐀪 Author: Piotr Honik
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:54:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #software_architecture #oauth2 #dpop
Medium
Stolen OAuth tokens: what DPoP fixes, and what it doesn’t
Where DPoP is now the default, where it falls short, and how to choose.
33 views
Daily Writeups
⤷ Title: China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:31:16 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Malware & Threats #AI #China #China APT #ConnectWise #Microsoft
SecurityWeek
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.
21 views
Daily Writeups
⤷ Title: Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:58:34 +0000
════════════════════════
⌗ Tags: #Vulnerabilities #Arista #exploited #vulnerability #Zero_Day
SecurityWeek
Attackers Exploit Third Arista VCO Zero-Day in Four Months
The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.
19 views
Daily Writeups
⤷ Title: Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:06:00 +0530
════════════════════════
⌗ Tags: No_Tags
14 views
Daily Writeups
⤷ Title: Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:10:43 +0530
════════════════════════
⌗ Tags: No_Tags
17 views
Daily Writeups
⤷ Title: Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:05:45 +0530
════════════════════════
⌗ Tags: No_Tags
16 views
Daily Writeups
⤷ Title: Speaker-Activated Backdoor Hijacks Speech AI Agents
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:59:40 +0000
════════════════════════
⌗ Tags: #Malware #AI Agents #AI security #Backdoor #machine learning #Speaker_Activated Backdoor #Speech Recognition #Voice Cloning #Whisper
Information Security News
Speaker-Activated Backdoor Hijacks Speech AI Agents
A Backdoor That Listens for One Voice Researchers have taught speech recognition systems to recognize a specific person by voice. At that moment, the system secretly changes the person’s wor…
12 views
Daily Writeups
⤷ Title: NS2JB Brings a Switch 2 Jailbreak With Codex Help
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:01:45 +0000
════════════════════════
⌗ Tags: #Technology #Codex #Homebrew #jailbreak #Mario Kart World #Nintendo #Nintendo Switch 2 #NS2JB #SmileBASIC 4
Daily CyberSecurity
NS2JB Brings a Switch 2 Jailbreak With Codex Help
Researcher Releases a Switch 2 Jailbreak Researcher Sammy Hajhamid has published NS2JB, a jailbreak project for the Nintendo Switch 2 handheld. He built it with help from Codex, which analyzed the…
10 views