Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Ask Master: The “EncystPHP” Web Shell is Silently Annexing Global FreePBX Telephony Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:15:29 +0000
════════════════════════
⌗ Tags: #Malware #Asterisk #CVE_2025_64328 #Cyber Security 2026 #Elastix #EncystPHP #FortiGuard Labs #FreePBX #INJ3CTOR3 #Sangoma #telephony fraud #VoIP security #Web Shell
Penetration Testing Tools
Ask Master: The "EncystPHP" Web Shell is Silently Annexing Global FreePBX Telephony Servers
A mundane telephony vulnerability has metamorphosed into a comprehensive server capitulation. Cybersecurity specialists have unearthed a pernicious web
18 views
Daily Writeups
⤷ Title: North Korean Hackers Abuse GitHub to Spy on South Korean Firms
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 17:05:23 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Attack #Cybersecurity #FortiGuard #GitHub #Lazarus #North Korea #PowerShell #South Korea #Windows
Hackread
North Korean Hackers Abuse GitHub to Spy on South Korean Firms
North Korean hackers target South Korean companies using GitHub, LNK shortcuts, PowerShell, and fake PDFs in a stealth espionage campaign.
9 views
Daily Writeups
⤷ Title: Zero-Day Alert: Critical FortiClient EMS Flaw Under Active Exploitation—Patch Now!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:36:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #CVE_2026_35616 #Cybersecurity 2026 #endpoint security #FortiClient EMS #FortiGuard #Fortinet #Infosec #PSIRT #remote code execution #zero_day
Penetration Testing Tools
Zero-Day Alert: Critical FortiClient EMS Flaw Under Active Exploitation—Patch Now!
Fortinet has issued a stark admonition regarding a critical vulnerability discovered within its FortiClient EMS (Endpoint Management Server)
11 views
Daily Writeups
⤷ Title: New Phishing Campaign Abuses GitHub to Target South Korea
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:01:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyberespionage #FortiGuard Labs #Github C2 #infosec #LNK malware #LotL #Mirae Asset 3.0 #phishing #powershell #south korea #VBScript #XenoRAT
Daily CyberSecurity
New Phishing Campaign Abuses GitHub to Target South Korea
FortiGuard Labs unmasks a South Korean espionage wave abusing the GitHub API for C2 and using LNK files to stay invisible. Protect your network from LotL.
16 views
Daily Writeups
⤷ Title: New Mirai Variant Nexcorium Hijacks DVR Devices for DDoS Attacks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 14:00:59 +0000
════════════════════════
⌗ Tags: #Security #Malware #Cyber Attack #Cybersecurity #DDOS #FortiGuard #Fortinet #IoT #Mirai #Nexcorium #Vulnerability
Hackread
New Mirai Variant Nexcorium Hijacks DVR Devices for DDoS Attacks
Fortinet team has discovered Nexcorium, a new Mirai-based malware targeting TBK DVR systems to turn them into a botnet for DDoS attacks.
28 views
Daily Writeups
⤷ Title: New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 08:40:14 +0000
════════════════════════
⌗ Tags: #Malware #.NET malware #Cyber Security #Environment Variables #FortiGuard Labs #infosec #Infostealer #PawsRunner #Phishing Lure #PureLogs #Steganography Loader #TXZ Archive
Daily CyberSecurity
New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
FortiGuard Labs warns of PawsRunner, a new .NET steganography loader hiding PureLogs infostealer payloads inside cat images to bypass corporate EDR.
16 views
Daily Writeups
⤷ Title: PureLogs Info Stealer Campaign Exploits Trusted Windows Process
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:02:45 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #FortiGuard Labs #info_stealer #Phishing Campaign #Process Hollowing #PureLogs #threat intelligence
Daily CyberSecurity
PureLogs Info Stealer Campaign Exploits Trusted Windows Process
FortiGuard Labs exposes a highly evasive PureLogs info stealer campaign utilizing process hollowing and fileless execution.
14 views
Daily Writeups
⤷ Title: The NetScaler Siege: Citrix Infrastructure Faces Mass Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:39:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV catalog patch #Citrix NetScaler vulnerability #CVE_2026_3055 exploit #FortiGuard threat intelligence #Gateway memory leak #SAML identity provider flaw
Information Security News
CVE-2026-3055 Exploit: Citrix NetScaler Flaw
Analyze the active CVE-2026-3055 exploit threat. Learn how the Citrix NetScaler memory leak impacts SAML setups and how to fix it.
12 views
Daily Writeups
⤷ Title: COXMO Botnet Variant: New Advanced Threat Exploits Router Firmware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 08:22:19 +0000
════════════════════════
⌗ Tags: #Malware #Botnet Scanner #COXMO #CVE_2021_27137 #DDoS attacks #FortiGuard Labs #Gafgyt botnet #Gafgyt Variant #IoT botnet #IoT Malware #Python malware script #router security
Daily CyberSecurity
COXMO Botnet Variant: New Advanced Threat Exploits Router Firmware
Read the latest Gafgyt malware analysis revealing how the dangerous COXMO botnet variant spreads via standalone scripts.
13 views
Daily Writeups
⤷ Title: AsyncRAT AI Lures Target Users Hunting AI Skills
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 08:03:39 +0000
════════════════════════
⌗ Tags: #Malware #AI Threats #AsyncRAT #AutoHotkey #FortiGuard Labs #Process Hollowing #rat
Daily CyberSecurity
AsyncRAT AI Lures Target Users Hunting AI Skills
As artificial intelligence dominates tech headlines, cybercriminals are riding the wave. FortiGuard Labs has detailed a fresh campaign built around AsyncRAT AI lures — booby-trapped archives dress…
15 views