Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 15:48:52 +0000
════════════════════════
⌗ Tags: #Security #Leaks #Privacy #Cybersecurity #data breach #database #ExpressVPN #security #Vibetech
Hackread
Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data
An misconfigured Vibetech database exposed 13.7 million records from previous breaches, including AT&T, Casio and FBI data, passwords and bank details.
25 views
Daily Writeups
⤷ Title: Your MCP Server Shouldn’t Decide Where Your Credentials Go
════════════════════════
𐀪 Author: DvsTeja
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 17:47:16 GMT
════════════════════════
⌗ Tags: #mcp_server #ai_agent #security #infosec #ai
Medium
Your MCP Server Shouldn’t Decide Where Your Credentials Go
On October 6, a security flaw was found in the official MCP TypeScript SDK. In short: an MCP server could trick your AI agent into sending…
27 views
Daily Writeups
⤷ Title: Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 20:29:48 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #Al Jazeera #Candiru #Citizen Lab #Confiant #Cyber Attack #Cybersecurity #Discover_Tech #Integrity Labs #Israel #Privacy #Qatar #Spyware
Hackread
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad system reached government networks.
37 views
Daily Writeups
⤷ Title: How I Discovered an Architectural Security Boundary Bypass in PGP Leading to DoS (CVE-2026–76088)
════════════════════════
𐀪 Author: Omar Elsayed
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 20:24:48 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #pentesting #cryptography #security_research
Medium
How I Discovered an Architectural Security Boundary Bypass in PGP Leading to DoS (CVE-2026–76088)
Hey there,
❤1
30 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough: SOC Alert Reporting, Escalation, and Communication
════════════════════════
𐀪 Author: yong
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 02:44:39 GMT
════════════════════════
⌗ Tags: #tryhackme #security_analysts #cybersecurity #soc #alerting
Medium
TryHackMe Walkthrough: SOC Alert Reporting, Escalation, and Communication
In a Security Operations Center (SOC), analyzing an alert is only the first step. When an L1 analyst discovers a real threat or a complex…
27 views
Daily Writeups
⤷ Title: Burger King Japan Data Breach Impacts 11.18 Million App Member Records
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 10:03:41 +0000
════════════════════════
⌗ Tags: #Data Breaches #Security #Burger King #Cyber Attack #Cybersecurity #data breach #Japan #Privacy #security
Hackread
Burger King Japan Data Breach Impacts 11.18 Million App Member Records
The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other data from nearly 12 million app members.
22 views
Daily Writeups
⤷ Title: $6,500 for a Regex That Couldn’t Say No: ReDoS in an Email Validation Field
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 09:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #security #hacking #bug_bounty
Medium
$6,500 for a Regex That Couldn’t Say No: ReDoS in an Email Validation Field
Most denial-of-service findings in bug bounty programs get an immediate, reasonable skepticism from triage, because flooding an endpoint…
18 views
Daily Writeups
⤷ Title: Build a page that shows people everything their browser silently leaks about them
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 10:16:01 GMT
════════════════════════
⌗ Tags: #infosec #browser_extension #cybersecurity #security #ai
Medium
Build a page that shows people everything their browser silently leaks about them
A thing or two on spying
15 views
Daily Writeups
⤷ Title: MDR vs EDR vs SOC: What You’re Actually Buying in 2026 
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:42:59 +0000
════════════════════════
⌗ Tags: #Security #Technology #Cybersecurity #EDR #MDR #SOC
Hackread
MDR vs EDR vs SOC: What You’re Actually Buying in 2026 
MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.
23 views
Daily Writeups
⤷ Title: Beyond the 9.8: Why CVSS Is Not Your Business Risk
════════════════════════
𐀪 Author: Davud Qasimov
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 14:43:51 GMT
════════════════════════
⌗ Tags: #information_technology #technology #security #infosec #cybersecurity
Medium
Beyond the 9.8: Why CVSS Is Not Your Business Risk
If you have spent even a single week working in cybersecurity, software engineering, or IT management, you have likely encountered the…
11 views