Daily Writeups
@Daily_Writeups
3.51K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.51K subscribers
Daily Writeups
⤷ Title: ‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 16:31:16 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cordyceps #Cybersecurity #GitHub #Novee #Supply Chain #Vulnerability
Hackread
‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and expose tokens across major projects today.
27 views
Daily Writeups
⤷ Title: 8 GitHub Repositories That Make Google Dorking Ridiculously Powerful
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 14:07:34 GMT
════════════════════════
⌗ Tags: #google #github #ethical_hacking #cybersecurity #cyber_security_awareness
Medium
8 GitHub Repositories That Make Google Dorking Ridiculously Powerful
Most people think Google is just a search engine.
42 views
Daily Writeups
⤷ Title: Gemini CLI Vulnerability Hits Maximum CVSS 10 Score
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 01:16:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12537 #Gemini CLI #GitHub Actions #Vulnerability
Daily CyberSecurity
Gemini CLI Vulnerability Hits Maximum CVSS 10 Score
A critical Gemini CLI vulnerability (CVE-2026-12537) exposes developer workflows to maximum severity attacks. Google disclosed this CVSS 10 rating flaw recently. TL;DR A critical Gemini CLI vulner…
24 views
Daily Writeups
⤷ Title: Android Signing Key Leak Exposes 278 Apps to Fake Updates
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 16:10:10 +0000
════════════════════════
⌗ Tags: #Data Leak #Android Signing Key #APK Re_signing #Baidu CarLife #Baidu Keyboard #GitHub Secrets Exposure #Keystore Leak #supply chain attack
Information Security News
Android Signing Key Leak Exposes 278 Apps to Fake Updates
A digital signature should prove that an Android app truly comes from its original developer. New research shows how a single leaked signing key can turn that trust mechanism into a supply-chain w…
15 views
Daily Writeups
⤷ Title: GitHub CD-ROM Repository: Physical Code Discs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 13:53:59 +0000
════════════════════════
⌗ Tags: #Technology #CD_ROM #github #physical media #Sony PlayStation
Daily CyberSecurity
GitHub CD-ROM Repository: Physical Code Discs
Sony recently announced that it will cease production of physical game discs for new releases starting in January 2028. This pivotal decision signals a complete transition for the Sony PlayStation…
8 views
Daily Writeups
⤷ Title: GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 13:00:20 +0000
════════════════════════
⌗ Tags: #Security #Agentic AI #Cybersecurity #GitHub #GitHub Actions #GitLost #Privacy #Repository #Vulnerability
Hackread
GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.
19 views
Daily Writeups
⤷ Title: GitHub Agentic Workflows Vulnerability Exposed
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 13:00:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Github #GitLost #Prompt Injection
Information Security News
GitHub Agentic Workflows Vulnerability Exposed
A seemingly mundane submission within a bug-tracking system can masquerade as a covert directive for artificial intelligence. Recently, researchers at Noma Labs demonstrated how a singular GitHub …
26 views
Daily Writeups
⤷ Title: Install Burp Suite Professional 2026 (Linux )| By Dharavath Nagaraju
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 19:06:09 GMT
════════════════════════
⌗ Tags: #burpsuite_profissional #ethical_hacking #linux #github #web_security
Medium
Install Burp Suite Professional 2026 (Linux )| By Dharavath Nagaraju
Burp Suite Professional is one of the most widely used tools for web application security testing, providing features that help security…
42 views
Daily Writeups
⤷ Title: Malicious Go Module Exposes a 222-Repository GitHub Lure Network
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 07:11:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AsyncRAT #GitHub lure network #malicious Go module #Operation Muck and Load #Socket #Software Supply Chain #Vidar Infostealer
Daily CyberSecurity
Malicious Go Module Exposes a 222-Repository GitHub Lure Network
Actor / group Unnamed actor tracked as “Operation Muck and Load”; overlaps with the ischhfd83 cluster Activity type Software supply-chain lures and Windows malware staging Targets / vi…
9 views
Daily Writeups
⤷ Title: South Korean Police Uncover Massive GitHub Token Leak
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 12:41:19 +0000
════════════════════════
⌗ Tags: #Data Leak #cybersecurity #data breach #Github #Investigation
Information Security News
South Korean Police Uncover Massive GitHub Token Leak
The Initial Discovery Investigators found a single key on a hacker. This discovery led South Korean police to a massive GitHub token leak. Law enforcement soon discovered over 500 compromised user…
16 views