Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sun, 09 Jul 2023 16:16:13 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: MuleSoft - Secure APIs using Okta as OAuth2.0 OIDC Client Provider
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/318b07dbe7aa
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #api_security #oauth2_provider #mulesoft #anypoint_platform #oauth_token
Medium
MuleSoft - Secure APIs using Okta as OAuth2.0 OIDC Client Provider
This blog will cover details on :
16 views
Daily Writeups
β€· Title: Part -1 of OAuth Series
════════════════════════
π€ͺ Author: Mounika
════════════════════════
β΄΅ Time: Wed, 09 Jul 2025 07:06:39 GMT
════════════════════════
βŒ— Tags: #authorization #oauth_token #oauth2 #api_security #authentication
Medium
I Didn’t Always Understand How Apps Talk to Each Other β€” Until I Met OAuth
I Didn’t Always Understand How Apps Talk to Each Otherβ€Šβ€”β€ŠUntil I Met OAuth
64 views
Daily Writeups
β€· Title: Salesforce Revokes Access Tokens: Gainsight App Breach May Have Exposed Customer Data
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 21 Nov 2025 02:58:47 +0000
════════════════════════
βŒ— Tags: #Data Leak #AppExchange #Cloud Security #CRM #Data Breach #Gainsight #OAuth Token #Salesforce #security alert #supply chain attack
Daily CyberSecurity
Salesforce Revokes Access Tokens: Gainsight App Breach May Have Exposed Customer Data
Salesforce revoked all Gainsight app tokens and removed the app from the AppExchange after finding unusual activity that may have exposed customer data via the connection.
29 views
Daily Writeups
β€· Title: ShinyHunters Claims Gainsight Breach, Threatens Salesforce Extortion Over Customer Data
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 24 Nov 2025 02:47:15 +0000
════════════════════════
βŒ— Tags: #Data Leak #AppExchange #cybercrime #data breach #Extortion #Gainsight #OAuth Token #Salesforce #ShinyHunters #supply chain attack
Penetration Testing Tools
ShinyHunters Claims Gainsight Breach, Threatens Salesforce Extortion Over Customer Data
Salesforce revoked all Gainsight app tokens after a breach, potentially exposing customer data. ShinyHunters claims responsibility, threatening to leak data from ~1,000 organizations.
27 views
Daily Writeups
β€· Title: ToddyCat APT Steals Microsoft 365 Cloud Email by Dumping OAuth Tokens from Memory and Copying Locked OST Files
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 25 Nov 2025 00:21:05 +0000
════════════════════════
βŒ— Tags: #Malware #APT #cyber_espionage #Microsoft 365 #OAuth Token Theft #Outlook OST #ProcDump #TCSectorCopy #ToddyCat
Daily CyberSecurity
ToddyCat APT Steals Microsoft 365 Cloud Email by Dumping OAuth Tokens from Memory and Copying Locked OST Files
Kaspersky exposed ToddyCat APT's evolution: the group steals M365 OAuth tokens from memory and uses TCSectorCopy to steal locked Outlook OST files, allowing covert access to cloud email outside the perimeter.
37 views
Daily Writeups
β€· Title: The Antigravity Reinstatement: Google Relents on Ban Wave but Issues Final Warning on OpenClaw Proxies
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 02 Mar 2026 09:44:11 +0000
════════════════════════
βŒ— Tags: #Technology #Account Recovery #Account Suspension #DeepMind #Gemini #Google AI Ultra #Google Antigravity #OAuth token proxy #OpenAI Codex #OpenClaw #OpenCode #Tech News 2026
Daily CyberSecurity
The Antigravity Reinstatement: Google Relents on Ban Wave but Issues Final Warning on OpenClaw Proxies
Google has refreshed Antigravity and started reinstating accounts suspended for token proxying. Learn how to recover your access and avoid permanent bans.
15 views
Daily Writeups
β€· Title: The Identity Crisis: How β€œPatient” Hackers and AI Phishing Defined the 2025 Cyber Landscape
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sat, 07 Mar 2026 02:13:12 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #2025 Cyber Threat Report #AI phishing #cloud security #Fox_IT #identity theft #NCC Group #OAuth token theft #Qilin syndicate #ransomware trends #Supply Chain Security #Tech News 2026
Penetration Testing Tools
The Identity Crisis: How "Patient" Hackers and AI Phishing Defined the 2025 Cyber Landscape
The bygone year heralded no profoundly β€œexotic” nascent threats; rather, it brutally illuminated the catastrophic toll exacted by
8 views
Daily Writeups
β€· Title: The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 13 Apr 2026 00:02:38 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #AiTM Attack #Black Lotus Labs #cyber_espionage #cybersecurity #DNS Redirection #Forest Blizzard #FrostArmada #MikroTik #OAuth Token Theft #router exploitation #TP_Link
Daily CyberSecurity
The Invisible Hijack: How FrostArmada Turned 18,000 Routers Into a Global Spy Network
Russian-linked Forest Blizzard's FrostArmada campaign hijacked 18,000+ routers to steal OAuth tokens via DNS redirection. Learn how they stayed invisible.
20 views
Daily Writeups
β€· Title: LastPass Customer Data Stolen in Klue Supply Chain Breach
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Tue, 23 Jun 2026 23:45:06 +0000
════════════════════════
βŒ— Tags: #Data Leak #Data Breach #Icarus #Klue #LastPass #OAuth Token Theft #Salesforce #supply chain attack
Daily CyberSecurity
LastPass Customer Data Stolen in Klue Supply Chain Breach
LastPass confirms the Klue breach exposed customer CRM data via OAuth token theft in Salesforce. Vaults stayed safe. Here's what to know.
26 views