Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Hackers Using AI to Target Siemens PLCs in Critical US Sectors
════════════════════════
𐀪 Author: Eduard Kovacs
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:02:02 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #ICS/OT #AI #Featured #ICS #PLC #Siemens
SecurityWeek
Hackers Using AI to Target Siemens PLCs in Critical US Sectors
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
105 views
Daily Writeups
⤷ Title: Rockwell Automation Patches a Dozen Vulnerabilities Across RSLinx, Logix, and FactoryTalk
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 07 Sep 2026 14:10:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #CIP protocol #Denial of Service #FactoryTalk #ICS Security #Industrial Control Systems #Logix controllers #Rockwell Automation #RSLinx Classic
Information Security News
Rockwell Automation Patches a Dozen Vulnerabilities Across RSLinx, Logix, and FactoryTalk
Rockwell Automation has closed more than a dozen vulnerabilities in software and controllers used at industrial facilities. The gravest of these flaws permit the disabling of control-system compon…
34 views
Daily Writeups
⤷ Title: Critical Siemens Vulnerabilities Hit Industrial Edge and OIS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 00:49:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_18963 #CVE_2026_50093 #ICS security #Industrial Edge Management #Siemens
Daily CyberSecurity
Critical Siemens Vulnerabilities Hit Industrial Edge and OIS
Siemens ProductCERT disclosed two critical Siemens vulnerabilities on September 8, 2026. One allows full account takeover in Industrial Edge Management. The other permits root-level access on Sive…
11 views
Daily Writeups
⤷ Title: From Lab to Plant: What Can an OT Penetration Testing Course Realistically Teach?
════════════════════════
𐀪 Author: Sulaiman Alhasawi
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 11:06:30 GMT
════════════════════════
⌗ Tags: #penetration_testing #ot_security #ics_security #cybersecurity #pentesting
Medium
From Lab to Plant: What Can an OT Penetration Testing Course Realistically Teach?
Operational Technology penetration testing is difficult to teach realistically.
22 views
Daily Writeups
⤷ Title: EKS/ICS Pentest Labı — Bölüm 4: OpenPLC Kurulumu ve PLC Ortamının Hazırlanması
════════════════════════
𐀪 Author: Sefa Yıldırım
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 18:37:08 GMT
════════════════════════
⌗ Tags: #ics_security #scada #plc #cybersecurity #penetration_testing
Medium
EKS/ICS Pentest Labı — Bölüm 4: OpenPLC Kurulumu ve PLC Ortamının Hazırlanması
Bir önceki bölümde OT Server üzerinde Docker ortamını kurmuş ve Docker üzerinde FUXA SCADA’yı çalıştırmıştık.
33 views
Daily Writeups
⤷ Title: EKS/ICS Pentest Labı — Bölüm 5: FUXA SCADA ve OpenPLC Entegrasyonu
════════════════════════
𐀪 Author: Sefa Yıldırım
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 14:02:30 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ics_security #scada_cyber_security #plc
Medium
EKS/ICS Pentest Labı — Bölüm 5: FUXA SCADA ve OpenPLC Entegrasyonu
Bölüm 4'te OpenPLC Runtime’ı Docker üzerinde çalıştırarak PLC katmanını oluşturduk. Structured Text kullanarak motor, pompa, vana, tank…
33 views
Daily Writeups
⤷ Title: Penetration Testing Industrial Control Systems: A 2005 Paper That Still Reads Like Modern OT…
════════════════════════
𐀪 Author: Sulaiman Alhasawi
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 08:36:40 GMT
════════════════════════
⌗ Tags: #penetration_testing #ics_security #ot_security #cybersecurity #pentesting
Medium
Penetration Testing Industrial Control Systems: A 2005 Paper That Still Reads Like Modern OT Security Guidance
In cybersecurity, a paper written more than twenty years ago can easily feel obsolete. Tools change, architectures evolve, terminology…
32 views
Daily Writeups
⤷ Title: CISA Warns of 10 Toptech TMS7 and TopHAT Vulnerabilities, One Rated CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 19:48:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_71379 #ICS security #sql injection #TMS7 #TopHAT #Toptech #Toptech TMS7 vulnerabilities
Daily CyberSecurity
CISA Warns of 10 Toptech TMS7 and TopHAT Vulnerabilities, One Rated CVSS 10.0
TL;DR CISA published advisory ICSA-26-272-02 on September 29, 2026, covering 10 Toptech TMS7 vulnerabilities that also affect TopHAT. The worst, CVE-2026-71379, scores CVSS 10.0 and lets an unauth…
25 views
Daily Writeups
⤷ Title: Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 08:43:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache PLC4X #Apache PLC4X vulnerability #CVE_2026_102508 #ICS security #OPC UA #OPC UA driver #OT Security
Daily CyberSecurity
Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs
TL;DR The Apache Software Foundation disclosed CVE-2026-102508, a critical Apache PLC4X vulnerability in its OPC UA driver, on September 30, 2026. It scores 9.2 under CVSS 4.0. An attacker in a ne…
17 views
Daily Writeups
⤷ Title: Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 14:41:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_86325 #CVE_2026_86326 #Firmware Security #ICS security #MGate #Moxa #Protocol Gateway
Daily CyberSecurity
Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk
TL;DR Moxa disclosed two Moxa MGate vulnerabilities on October 2, 2026. The worse flaw, CVE-2026-86325, scores 9.4 on CVSS 4.0 and lets a read-only user corrupt device memory. The second, CVE-2026…
14 views