Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
════════════════════════
𐀪 Author: Robert Broeckelmann
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:53 GMT
════════════════════════
⌗ Tags: #threat_modeling #identity_management #application_security #threat
Medium
Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
Threat modeling is one of those security practices that everybody agrees is important, but not everybody agrees on how to do.
13 views
Daily Writeups
⤷ Title: How to Protect Your Business Website From Cyberattacks
════════════════════════
𐀪 Author: neyo4africa technologies
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:15:25 GMT
════════════════════════
⌗ Tags: #marketing #cybersecurity #application_security #technology
Medium
How to Protect Your Business Website From Cyberattacks
Cybersecurity
15 views
Daily Writeups
⤷ Title: Web Cache Deception: How a Harmless .css Becomes Full Account Takeover
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:09:45 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #application_security #bug_bounty #penetration_testing
Medium
🧊🎯🔓💥 Web Cache Deception: How a Harmless .css Becomes Full Account Takeover
A CDN and your app can read the exact same URL two different ways. That tiny disagreement is enough to hand one user’s session token to a…
15 views
Daily Writeups
⤷ Title: Patch Node.js, Not Just Your npm Dependencies
════════════════════════
𐀪 Author: Rahul
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:14:56 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_engineering #devops #nodejs
Medium
Patch Node.js, Not Just Your npm Dependencies
The October 2026 security release is a reminder that runtime upgrades must be rebuilt, redeployed, and verified across every production…
17 views
Daily Writeups
⤷ Title: PHPShell: The rise of branded vulnerabilities
════════════════════════
𐀪 Author: Geva Solomonovich
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 16:37:09 GMT
════════════════════════
⌗ Tags: #application_security #artificial_intelligence #php2shell #cybersecurity #vulnerability
Medium
PHPShell: The rise of branded vulnerabilities
PHP2Shell, and why taking the internet offline is not an acceptable mitigation
27 views
Daily Writeups
⤷ Title: PHP2Shell: Taking Production Offline Cannot Become the New Normal
════════════════════════
𐀪 Author: Lotem
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 17:37:40 GMT
════════════════════════
⌗ Tags: #exploitation #exploit #application_security #php2shell #cybersecurity
Medium
PHP2Shell: Taking Production Offline Cannot Become the New Normal
PHP2Shell shows how AI is changing the economics of exploitation, and why application defense must learn, reason, and adapt at machine…
12 views
Daily Writeups
⤷ Title: A Vulnerability Scan is Not an Application Security Program
════════════════════════
𐀪 Author: Arthur Steel | Contra Average
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 19:36:49 GMT
════════════════════════
⌗ Tags: #owasp #risk_management #software_development #cybersecurity #application_security
Medium
A Vulnerability Scan is Not an Application Security Program
Your scanner may be working perfectly. Your security strategy may still be dangerously incomplete.
15 views
Daily Writeups
⤷ Title: PART II — Complete Guide on mTLS for Interviews and Penetration Testing
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 21:01:41 GMT
════════════════════════
⌗ Tags: #penetration_testing #application_security #interview #hackerone #mtls_authentication
Medium
PART II — Complete Guide on mTLS for Interviews and Penetration Testing
In the previous article, we touched upon the basics of certificates, mTLS, x509 standard for certificates, along with public and private…
22 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:41:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #application_security #penetration_testing
Medium
🔪🧬🔓💥 HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
The bug class scanners love to “detect” and almost never prove — and why 2025 quietly made it deadlier than it has ever been.
11 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and…
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:21:20 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_architecture #enterprise_architecture #cloud_security
Medium
Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and the PMO-Meets-ADM Engine
Part 3 of 3 in the series “Security Requirements That Actually Work”
10 views