Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: 5 Best AI Detection & Response Platforms for 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 16:56:41 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #AI #Cybersecurity #MCP #security #Technology #Threat Detection #Threat Intelligence
Hackread
5 Best AI Detection & Response Platforms for 2026
Compare AI detection & response platforms for 2026, including Dash, Lakera, Operant AI, HiddenLayer and Prisma AIRS, for runtime threat protection and response.
20 views
Daily Writeups
⤷ Title: OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 19:14:21 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #Afghanistan #backdoor #Central Asia #China #Kaspersky #Linux #LurkProxy #MystRodX #OctLurk #PlugX #SilentRaid #SilkLurk #Syria #TrustFall #Windows #WinRAR
Hackread
OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries
Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.
27 views
Daily Writeups
⤷ Title: How I Bypassed Authentication on a Fintech Platform Using a Broken Password Reset Flow (Bug Bounty…
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 19:09:16 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #bug_bounty_writeup #security #cybersecurity
Medium
How I Bypassed Authentication on a Fintech Platform Using a Broken Password Reset Flow (Bug Bounty Writeup)
I almost closed the tab on this program twice.
24 views
Daily Writeups
⤷ Title: WebGPU: Hacking 101
════════════════════════
𐀪 Author: Pratik Sharma
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 20:49:13 GMT
════════════════════════
⌗ Tags: #javascript #programming #security #hacking
Medium
WebGPU: Hacking 101
WebGPU Gives Websites Access to Your GPU. So Why Can’t a Page Read Your VRAM?
30 views
Daily Writeups
⤷ Title: I Built an AI-Assisted Threat Modeling Pipeline. The Hardest Part Wasn’t Finding Threats.
════════════════════════
𐀪 Author: Vinibrisola
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 21:46:53 GMT
════════════════════════
⌗ Tags: #devsecops #application_security #ai_security #threat_modeling #security_engineering
Medium
I Built an AI-Assisted Threat Modeling Pipeline. The Hardest Part Wasn’t Finding Threats.
What I learned while trying to turn architecture diagrams into traceable security decisions and actionable engineering work.
3 views
Daily Writeups
⤷ Title: The 2 AM Query That Started Rowly
════════════════════════
𐀪 Author: PopKoren
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 17:53:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #supabase #security
Medium
The 2 AM Query That Started Rowly
Why I built an open-source RLS auditor after years of breaking into Supabase apps for a living.
2 views
Daily Writeups
⤷ Title: MariaDB CVE-2026–49261: Pre-Authentication Remote Code Execution via wsrep_notify_cmd
════════════════════════
𐀪 Author: LETCHU PKT
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 06:31:01 GMT
════════════════════════
⌗ Tags: #security #letchupkt #bug_bounty_writeup #cve_2026_49261 #cve
Medium
MariaDB CVE-2026–49261: Pre-Authentication Remote Code Execution via wsrep_notify_cmd
How an attacker-controlled Galera node name resulted in arbitrary OS command execution across cluster members.
7 views
Daily Writeups
⤷ Title: The SSRF That Wasn’t Supposed to Work Twice
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 20:16:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #pentesting #bug_bounty_writeup #security
Medium
The SSRF That Wasn’t Supposed to Work Twice
This one has a twist in it, so bear with the setup. The bug wasn’t hard to find. Getting it accepted was the actual fight.
5 views
Daily Writeups
⤷ Title: MariaDB CVE-2026–48165: Authenticated Remote Code Execution through WSREP State Snapshot Transfer
════════════════════════
𐀪 Author: LETCHU PKT
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 16:37:09 GMT
════════════════════════
⌗ Tags: #security #letchupkt #cve #bug_bounty_writeup #cve202648165
Medium
MariaDB CVE-2026–48165: Authenticated Remote Code Execution through WSREP State Snapshot Transfer
How a missing validation check in Galera’s SST implementation allowed authenticated OS command execution.
6 views
Daily Writeups
⤷ Title: I Followed Those Weird YouTube Spam Bots. Here’s Where They Actually Go
════════════════════════
𐀪 Author: Mysterious Immature
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 01:09:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #cybercrime #security #infosec
Medium
I Followed Those Weird YouTube Spam Bots. Here’s Where They Actually Go
This article discusses social-engineering lures that use explicitly themed material. To keep this write-up safe and readable for a general…
12 views