Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Jenkins RCE Vulnerability CVE-2026-53435 Now Under Active Exploitation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 09:26:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CI/CD security #CVE_2026_53435 #Deserialization #Jenkins #rce
Daily CyberSecurity
Jenkins RCE Vulnerability CVE-2026-53435 Now Under Active Exploitation
A Jenkins RCE vulnerability (CVE-2026-53435) is under active exploitation. Honeypots are seeing attacks now, so patch your Jenkins controller fast.
16 views
Daily Writeups
⤷ Title: DevSecOps for APIs: How to Secure APIs Before and After Deployment
════════════════════════
𐀪 Author: Puja Maheshvari
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 03:58:48 GMT
════════════════════════
⌗ Tags: #application_security #devsecops #owasp #cloud_security #ci_cd_pipeline
Medium
DevSecOps for APIs: How to Secure APIs Before and After Deployment
APIs are now at the center of most modern applications.
12 views
Daily Writeups
⤷ Title: ‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 16:31:16 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cordyceps #Cybersecurity #GitHub #Novee #Supply Chain #Vulnerability
Hackread
‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and expose tokens across major projects today.
28 views
Daily Writeups
⤷ Title: How a Makefile and an Old Commit Exposed Two CI/CD Secrets
════════════════════════
𐀪 Author: Maram Raboudi
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 12:04:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #ci_cd_pipeline #devsecops
Medium
How a Makefile and an Old Commit Exposed Two CI/CD Secrets
Part 2 of my CICD-Goat pentest: indirect pipeline execution, credentials inherited by a Makefile, and a PyPI token recovered from Git…
12 views
Daily Writeups
⤷ Title: Four CI/CD assumptions that turned into attack paths
════════════════════════
𐀪 Author: Maram Raboudi
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 17:25:59 GMT
════════════════════════
⌗ Tags: #devsecops #penetration_testing #jenkins #ci_cd_pipeline
Medium
Four CI/CD assumptions that turned into attack paths
Part 3 of my CICD-Goat pentest: overprivileged tokens, controller-node execution, fail-open security checks, and mutable Docker images
19 views
Daily Writeups
⤷ Title: One stolen key turned into a Supply-Chain compromise
════════════════════════
𐀪 Author: Maram Raboudi
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 12:49:41 GMT
════════════════════════
⌗ Tags: #ci_cd_pipeline #penetration_testing #devsecops #cicd
Medium
One stolen key turned into a Supply-Chain compromise
The final part of my CICD-Goat pentest: command injection, poisoned artefacts, malicious packages, and secrets crossing multiple pipelines
11 views
Daily Writeups
⤷ Title: Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:59:43 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cybersecurity #Fig #Fig Security #SecOps
Hackread
Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily.
34 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
27 views
Daily Writeups
⤷ Title: JetBrains Patches Critical TeamCity On-Premises Vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 06:17:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #CI/CD #CVE_2026_63077 #cybersecurity #JetBrains #TeamCity
Information Security News
JetBrains Patches Critical TeamCity On-Premises Vulnerability
Build systems rarely capture public attention; however, unauthorized access opens a direct pathway to source code, credentials, and compiled software. Amid this serious threat, JetBrains released …
27 views
Daily Writeups
⤷ Title: npm Supply Chain Attack Hijacks Keyv and Spreads Shai-Hulud Malware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 14:12:20 +0000
════════════════════════
⌗ Tags: #Malware #cacheable #CI/CD security #credential stealer #keyv #npm #Shai_Hulud #Software Supply Chain #supply chain attack
Daily CyberSecurity
npm Supply Chain Attack Hijacks Keyv and Spreads Shai-Hulud Malware
At a glance Malware family Shai-Hulud variant (“Mini Shai-Hulud”) Threat actor Unattributed; linked to the Shai-Hulud lineage and prior TeamPCP and antv campaigns Targets npm and JavaS…
12 views