Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: IEA Report: AI Boom Drives Massive Surge in Data Center Energy Demand
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 08:58:54 +0000
════════════════════════
⌗ Tags: #Technology #AI #artificial intelligence #climate change #data centers #electricity #energy consumption #IEA
Daily CyberSecurity
IEA Report: AI Boom Drives Massive Surge in Data Center Energy Demand
An IEA report reveals AI's growing energy demands, projecting data center electricity use to more than double by 2030, impacting global emissions targets.
46 views
Daily Writeups
⤷ Title: GPT-4 Retiring: GPT-4o Takes Over in ChatGPT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 07:25:55 +0000
════════════════════════
⌗ Tags: #Technology #AI models #AI retirement #artificial intelligence #ChatGPT #GPT_4 #GPT_4o #language models #OpenAI
Daily CyberSecurity
GPT-4 Retiring: GPT-4o Takes Over in ChatGPT
GPT-4 retires in ChatGPT as OpenAI shifts to GPT-4o, offering enhanced multimodal capabilities. Developers retain GPT-4 API access.
24 views
Daily Writeups
⤷ Title: Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:42:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2022_42475 #CVE_2023_27997 #CVE_2024_21762 #cybersecurity #FortiGate #Fortinet #patch management #SSL_VPN vulnerability #symbolic link
Daily CyberSecurity
Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices
Fortinet warns of a novel persistence exploit using symbolic links in FortiGate SSL-VPNs. Upgrade to patched FortiOS versions to mitigate the threat.
24 views
Daily Writeups
⤷ Title: SSL Certificate Validity Reduced to 47 Days After Apple Proposal
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:12:19 +0000
════════════════════════
⌗ Tags: #Technology #Apple #CA/Browser Forum #certificates #cybersecurity #ssl #tls #Web Security
Daily CyberSecurity
SSL Certificate Validity Reduced to 47 Days After Apple Proposal
SSL certificate validity to drop to 47 days after Apple's proposal, impacting web security and increasing renewal frequency for enterprises.
20 views
Daily Writeups
⤷ Title: OpenAI to Require ID Verification for Advanced AI Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 03:40:06 +0000
════════════════════════
⌗ Tags: #Technology #AI models #API #Developers #GPT #identity verification #OpenAI
Daily CyberSecurity
OpenAI to Require ID Verification for Advanced AI Models
OpenAI plans to introduce ID verification for API accounts to combat misuse, granting access to advanced AI models only to verified users.
25 views
Daily Writeups
⤷ Title: CVE-2025-32428: Jupyter Remote Desktop Proxy Exposes TigerVNC to Network Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 01:55:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_32428 #data science security #Jupyter #JupyterLab #Linux Security #Remote Desktop #TigerVNC #VNC vulnerability
Daily CyberSecurity
CVE-2025-32428: Jupyter Remote Desktop Proxy Exposes TigerVNC to Network Access
CVE-2025-32428 flaw in Jupyter Remote Desktop Proxy exposes TigerVNC over the network. Patch to version 3.0.1 or switch to TurboVNC to mitigate.
29 views
Daily Writeups
⤷ Title: Tor Browser and the Dark Web: A Beginner’s Guide to Anonymity and Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:55:52 +0000
════════════════════════
⌗ Tags: #How To #.onion #Anonymity #dark web #Deep Web #Internet #Onion Routing #Online Safety #online security #privacy #security #tor browser #vpn
Daily CyberSecurity
Tor Browser and the Dark Web: A Beginner's Guide to Anonymity and Security
Learn about Tor Browser, the Dark Web, and how to navigate it safely. This guide covers installation, configuration, security precautions, and the potential risks of exploring the dark web.
24 views
Daily Writeups
⤷ Title: CVE-2025-27840: How a Tiny ESP32 Chip Could Crack Open Bitcoin Wallets Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:46:49 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bitcoin #cryptocurrency #cryptography #CVE_2025_27840 #cybersecurity #Electrum #ESP32 #Hacking #hardware #IoT security #private key #wallet
Daily CyberSecurity
CVE-2025-27840: How a Tiny ESP32 Chip Could Crack Open Bitcoin Wallets Worldwide
A critical vulnerability (CVE-2025-27840) in ESP32 microcontrollers threatens billions of IoT devices and the security of Bitcoin wallets. Exploits range from private key theft to forged transactions.
21 views
Daily Writeups
⤷ Title: Nationwide Smishing Scam Targets Toll Road Users, Stealing Payment Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:40:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #Cybercrime #cybersecurity #Data Theft #E_ZPass #phishing #smishing #Toll Road Scam #Wang Duo Yu
Daily CyberSecurity
Nationwide Smishing Scam Targets Toll Road Users, Stealing Payment Data
A widespread smishing campaign targeting toll road users across multiple U.S. states is stealing payment credentials. Learn how scammers are impersonating E-ZPass and other toll systems to trick victims
19 views
Daily Writeups
⤷ Title: npm Malware Targets Atomic and Exodus Wallets to Steal Crypto Funds
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:30:50 +0000
════════════════════════
⌗ Tags: #Malware #Atomic Wallet #crypto wallets #Exodus Wallet #JavaScript threats #npm malware #pdf_to_office #ReversingLabs #supply chain attack #Web3 security
Daily CyberSecurity
npm Malware Targets Atomic and Exodus Wallets to Steal Crypto Funds
A fake npm package named pdf-to-office has been discovered injecting malicious code into Atomic and Exodus crypto wallets, redirecting funds and stealing data
20 views
Daily Writeups
⤷ Title: TROX Stealer: Urgency-Themed MaaS Malware Targets Consumer Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:28:56 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Threats #Infostealer #MaaS #Nuitka #phishing #Sublime Research #Telegram exfiltration #TROX Stealer #WebAssembly malware
Daily CyberSecurity
TROX Stealer: Urgency-Themed MaaS Malware Targets Consumer Data
TROX Stealer exploits urgency via phishing emails to deliver obfuscated MaaS malware that steals credit cards, browser data, and crypto wallets
20 views
Daily Writeups
⤷ Title: Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:18:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #eCrime #financial fraud #Fraud #identity theft #Lighthouse kit #Phishing Kit #smishing #Smishing Triad #SMS phishing #Wang Duo Yu
Daily CyberSecurity
Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing
Silent Push reveals Smishing Triad's widespread SMS phishing campaigns targeting 121+ countries. The group uses sophisticated kits to steal credentials and financial data.
16 views
Daily Writeups
⤷ Title: Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:16:26 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Data Theft #dependency confusion #FortiGuard Labs #Information stealing #javascript #Malicious packages #npm #NPM packages #Package manager #paypal #Software security #supply chain attack
Daily CyberSecurity
Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames
23 views
Daily Writeups
⤷ Title: Urgent: Yii 2 Vulnerability CVE-2024-58136 Under Active Exploit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:10:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_4990 #CVE_2024_58136 #Exploit #patch #php #Remote Code Execution #security #web framework #Yii 2
Daily CyberSecurity
Urgent: Yii 2 Vulnerability CVE-2024-58136 Under Active Exploit
CVE-2024-58136: A security vulnerability in the Yii 2 PHP framework is being actively exploited. Learn about the risk and necessary updates.
22 views
Daily Writeups
⤷ Title: $10,000 worth GitHub Access Tokens | Secret Search Operators
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 05:09:51 GMT
════════════════════════
⌗ Tags: #hidden #github #bug_bounty #secrets #access_token
Medium
$10,000 worth GitHub Access Tokens | Secret Search Operators
Secret but basic GitHub dorks & search operators that can lead to $10k bounty worth Acess Tokens.
22 views
Daily Writeups
⤷ Title: The Hidden XSS: A Bug Hidden in the Mist
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 15:10:05 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #ethical_hacking #hacker
Medium
The Hidden XSS: A Bug Hidden in the Mist
From Subdomain Chaos to an Unexpected XSS A beginner’s bug bounty journey that led to a hidden Self-XSS on Paytm, with the help of some…
17 views
Daily Writeups
⤷ Title: One Random Recon, One Real Bounty: The Paytm Story
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 15:08:57 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #programming #hacking #vulnerability
Medium
One Random Recon, One Real Bounty: The Paytm Story
From countless dead ends to a single Swagger UI payload — the unexpected breakthrough that changed my bug hunting journey forever.
24 views
Daily Writeups
⤷ Title: How Burp Suite AI Makes Vulnerability Testing Easy and Fast
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:59:32 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #ai #burpsuite #penetration_testing
Medium
How Burp Suite AI Makes Vulnerability Testing Easy and Fast
beginner-friendly guide to Burp Suite’s AI features
16 views
Daily Writeups
⤷ Title: How I Found a Bug in a Government Website (And Got Recognized for It) ️)
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:56:22 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #infosec #secrets
Medium
How I Found a Bug in a Government Website (And Got Recognized for It) 🇮🇳🛡️)
Free Article Link
11 views
Daily Writeups
⤷ Title: A Hacker’s Instinct: The Power You Unlock When You Stop Looking and Start Seeing
════════════════════════
𐀪 Author: Akash Ghosh
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:43:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #infosec #technology #bug_bounty
Medium
A Hacker’s Instinct: The Power You Unlock When You Stop Looking and Start Seeing
Part 3 of my recon evolution series — now with more brains, bugs, and breakthroughs.
14 views
Daily Writeups
⤷ Title: How My Name Crashed a Welcome Party: SSI to RCE Surprise! with $$$$
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:31:01 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #bug_bounty #money #cybersecurity
Medium
How My Name Crashed a Welcome Party: SSI to RCE Surprise! with $$$$🎉
Free Link🎈
17 views