Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Mon, 04 Sep 2023 07:42:00 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: 5 Benefits of Improving Your Microsoft 365 Secure Score to protect your business!
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/8a44ed895331
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #m365 #microsoft_365_business #microsoft_365 #microsoft
Medium
5 Benefits of Improving Your Microsoft 365 Secure Score to protect your business!
Boost your cyber security with Microsoft 365 Secure Score. Learn the 5 benefits of improving your M365 secure score and stay protected.
12 views
Daily Writeups
β€· Title: Do you use Microsoft Entra Connect? Do you follow best practices?
════════════════════════
π€ͺ Author: Horizon Secured
════════════════════════
β΄΅ Time: Tue, 21 Jan 2025 14:19:30 GMT
════════════════════════
βŒ— Tags: #cybersecurity #entra_id #m365 #azure_active_directory #active_directory
Medium
Do you use Microsoft Entra Connect? Do you follow best practices?
There are some best practices you should follow.
18 views
Daily Writeups
β€· Title: Creating a Well-Rounded Microsoft 365 Security Program
════════════════════════
π€ͺ Author: John Waller
════════════════════════
β΄΅ Time: Fri, 07 Feb 2025 19:44:16 GMT
════════════════════════
βŒ— Tags: #microsoft_365 #m365_security #cybersecurity
Medium
Creating a Well-Rounded Microsoft 365 Security Program
Microsoft 365 (M365)β€Šβ€”β€Šoriginally introduced as Office in 1990, rebranded as Office 365 in 2011 when the bundle moved to a cloud…
28 views
Daily Writeups
β€· Title: Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 25 Aug 2025 01:50:43 +0000
════════════════════════
βŒ— Tags: #Vulnerability #audit logs #Compliance #Copilot #cybersecurity #data breach #enterprise security #M365 #Microsoft #vulnerability
Penetration Testing Tools
Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
A critical flaw in Microsoft 365 Copilot allowed it to access files without a trace in audit logs, leaving organizations with incomplete records for months.
10 views
Daily Writeups
β€· Title: msInvader: New Tool Lets Blue Teams Stress-Test M365 and Azure Defenses with Real-World Attacks
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Fri, 26 Sep 2025 04:17:43 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #adversary simulation #AiTM #Azure #blue team #Detection Engineering #Exchange Online #M365 #msInvader
Penetration Testing Tools
msInvader: New Tool Lets Blue Teams Stress-Test M365 and Azure Defenses with Real-World Attacks
msInvader is a tool for blue teams to simulate realistic post-compromise attacks (like token theft, MFA bypass) within M365 and Azure to test detection rules.Export to Sheets
37 views
Daily Writeups
β€· Title: Russian APT UTA0355 Steals Microsoft 365 OAuth Tokens via Fake Security Conference Lures and WhatsApp Support
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 08 Dec 2025 00:36:25 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Device Code #Fake Conference #M365 #OAuth Phishing #Russian APT #social engineering #UTA0355 #Volexity
Daily CyberSecurity
Russian APT UTA0355 Steals Microsoft 365 OAuth Tokens via Fake Security Conference Lures and WhatsApp Support
Volexity exposed Russian APT UTA0355 using fake security conference sites and WhatsApp support to trick victims. The attacks steal Microsoft 365 OAuth and Device Code tokens for persistent access.
18 views
Daily Writeups
β€· Title: M365 Monitoring Basics β€” Part 2
════════════════════════
π€ͺ Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
β΄΅ Time: Wed, 11 Mar 2026 09:42:10 GMT
════════════════════════
βŒ— Tags: #tryhackme_walkthrough #tryhackme_pre_security #tryhackme_writeup #m365_security #tryhackme
Medium
M365 Monitoring Basics β€” Part 2
Learn the importance of Entra ID and M365 in modern SOC environments and explore their logs.
5 views
Daily Writeups
β€· Title: M365 Monitoring Basics
════════════════════════
π€ͺ Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
β΄΅ Time: Wed, 11 Mar 2026 09:18:21 GMT
════════════════════════
βŒ— Tags: #tryhackme_pre_security #tryhackme_writeup #tryhackme_walkthrough #tryhackme #m365_security
Medium
M365 Monitoring Basics
Learn the importance of Entra ID and M365 in modern SOC environments and explore their logs.
6 views
Daily Writeups
β€· Title: M365 Monitoring Basics Walkthrough Notes | TryHackMe
════════════════════════
π€ͺ Author: Sle3pyHead ‍
════════════════════════
β΄΅ Time: Thu, 12 Mar 2026 08:41:18 GMT
════════════════════════
βŒ— Tags: #tryhackme_writeup #tryhackme #microsoft_365 #m365_security #tryhackme_walkthrough
Medium
M365 Monitoring Basics Walkthrough Notes | TryHackMe
M365 monitoring guide using Entra logs and Splunk investigations.
18 views
Daily Writeups
β€· Title: M365 Monitoring Basics (THM) Tryhackme WriteUp With All Answer
════════════════════════
π€ͺ Author: Lawvye
════════════════════════
β΄΅ Time: Fri, 13 Mar 2026 05:00:40 GMT
════════════════════════
βŒ— Tags: #tryhackme #cybersecurity #blue_team #microsoft #m365
Medium
M365 Monitoring Basics (THM) Tryhackme WriteUp With All Answer
Description : Learn the importance of Entra ID and M365 in modern SOC environments and explore their logs.
16 views
Daily Writeups
β€· Title: Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
Penetration Testing Tools
Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft
13 views