Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: HTB Cap Walkthrough
════════════════════════
𐀪 Author: The Cyber Outpost
════════════════════════
ⴵ Time: Sun, 20 Apr 2025 23:02:20 GMT
════════════════════════
⌗ Tags: #wireshark #hackthebox_writeup #hackthebox_walkthrough #hackthebox
Medium
HTB Cap Walkthrough
In this article, we’re going to explore the retired easy box of Cap, following the guided mode.
36 views
Daily Writeups
⤷ Title: Cellebrite Android Zero-Day Exploit PoC Released: CVE-2024-53104
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:50:42 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability #android #Cellebrite #CVE_2024_53104 #Exploit #privacy #security #spyware #zero_day
Daily CyberSecurity
Cellebrite Android Zero-Day Exploit PoC Released: CVE-2024-53104
Cellebrite's Android zero-day exploit (CVE-2024-53104) used in alleged spyware attempt on activist. Details, technical analysis, and patch info.
45 views
Daily Writeups
⤷ Title: Critical PyTorch Vulnerability CVE-2025-32434 Allows Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:48:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_32434 #deep_learning #machine_learning #PyTorch #rce #security
Daily CyberSecurity
Critical PyTorch Vulnerability CVE-2025-32434 Allows Remote Code Execution
CVE-2025-32434: Critical RCE vulnerability in PyTorch’s torch.load(weights_only=True) affects ≤2.5.1. Update to v2.6.0 to patch this major flaw
24 views
Daily Writeups
⤷ Title: Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:36:41 +0000
════════════════════════
⌗ Tags: #Cyber Security #Billbug #Bronze Elgin #ChromeKatz #cyberattack #DLL Sideloading #Espionage Campaign #Lotus Blossom #Lotus Panda #malware #Sagerunex #Southeast Asia #Symantec #Threat Actors
Daily CyberSecurity
Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign
The Billbug group targeted Southeast Asian organizations using advanced tools & DLL sideloading. This report details their sophisticated espionage campaign.
20 views
Daily Writeups
⤷ Title: Yokogawa Recorders Vulnerable to Attack Due to Insecure Default Settings
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:34:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1863 #cybersecurity #ICS #industrial control systems #insecure default settings #recorder #Yokogawa
Daily CyberSecurity
Yokogawa Recorders Vulnerable to Attack Due to Insecure Default Settings
Yokogawa recorders have a critical vulnerability (CVE-2025-1863) due to insecure default settings. Attackers can manipulate data. Update security now!
17 views
Daily Writeups
⤷ Title: CVE-2025-2492: Critical ASUS Router Vulnerability Requires Immediate Firmware Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:33:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AiCloud #ASUS #CVE_2025_2492 #cybersecurity #firmware update #improper authentication #Remote Access #router security
Daily CyberSecurity
CVE-2025-2492: Critical ASUS Router Vulnerability Requires Immediate Firmware Update
ASUS routers have a critical vulnerability (CVE-2025-2492) allowing unauthorized access. Update firmware and strengthen security now.
17 views
Daily Writeups
⤷ Title: State-Sponsored Actors Adopt ClickFix Technique in Cyber Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:30:07 +0000
════════════════════════
⌗ Tags: #Cyber Security #ClickFix #cyberattack #cybersecurity #Proofpoint #social engineering #state_sponsored actors #TA422 Sources and related content #TA427 #TA450 #Threat Actors #UNK_RemoteRogue
Daily CyberSecurity
State-Sponsored Actors Adopt ClickFix Technique in Cyber Espionage
State-sponsored hackers from North Korea, Iran, and Russia are now using ClickFix, a cybercrime-born social engineering trick.
12 views
Daily Writeups
⤷ Title: Larva-24005: Kimsuky’s Global Cyber Espionage Campaign Exploits RDP and Office Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:24:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #cyberattack #Kimsuky #Larva_24005 #malware #RDP #threat intelligence
Daily CyberSecurity
Larva-24005: Kimsuky’s Global Cyber Espionage Campaign Exploits RDP and Office Flaws
ASEC report details Kimsuky's Larva-24005 campaign targeting South Korea and globally with RDP exploits, MySpy malware, and keyloggers.
17 views
Daily Writeups
⤷ Title: CVE-2025-42599: Critical Buffer Overflow in Active! mail Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:20:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active! mail #buffer overflow #CVE_2025_42599 #JPCERT #rce #security
Daily CyberSecurity
CVE-2025-42599: Critical Buffer Overflow in Active! mail Exploited in the Wild
Critical vulnerability (CVE-2025-42599) in Active! mail allows remote code execution. Update to the latest version immediately to protect your systems.
15 views
Daily Writeups
⤷ Title: APT41/RedGolf Infrastructure Briefly Exposed: Fortinet Zero-Days Targeted Shiseido
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:15:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #APT41 #cyberattack #Exploit #Fortinet #KEYPLUG #RedGolf #Shiseido #threat intelligence #zero_day
Daily CyberSecurity
APT41/RedGolf Infrastructure Briefly Exposed: Fortinet Zero-Days Targeted Shiseido
A misconfiguration exposed APT41 tools targeting Shiseido, revealing Fortinet exploit scripts, webshells, and reconnaissance tactics.
17 views
Daily Writeups
⤷ Title: Critical Meshtastic RCE Vulnerability (CVE-2025-24797) Requires Urgent Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:05:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_24797 #LoRa #Meshtastic #patch #rce #security
15 views
Daily Writeups
⤷ Title: How I Found a Facebook IDOR Bug in 15 Minutes (And How You Can Too)
════════════════════════
𐀪 Author: Ibtissam Hammadi
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 01:01:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #idor #facebook_security #bug_bounty
Medium
How I Found a Facebook IDOR Bug in 15 Minutes (And How You Can Too)
Most hackers spend weeks hunting for bugs — I found a critical Facebook IDOR vulnerability in 15 minutes. Here’s exactly how I did it.
23 views
Daily Writeups
⤷ Title: Bypass Verification Code in Reset Password Endpoint
════════════════════════
𐀪 Author: Firdaus Muhammad Ismail
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:42:37 GMT
════════════════════════
⌗ Tags: #bypass #verification #bug_bounty_tips #bug_bounty #vulnerability
Medium
Bypass Verification Code in Reset Password Endpoint
halo teman teman semuanya. saya lagi, lmao. pada artikel kali ini, saya akan sedikit berbagi pengalaman kepada teman teman bagaimana saya…
17 views
Daily Writeups
⤷ Title: Automated Shodan Recon (bug bounty)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:41:25 GMT
════════════════════════
⌗ Tags: #penetration_testing #automation #cybersecurity #hacking #bug_bounty
Medium
Automated Shodan Recon (bug bounty)
Another great tool for bug bounty hunters
24 views
Daily Writeups
⤷ Title: The 8-Layer Security Framework Every Developer Should Implement
════════════════════════
𐀪 Author: Orami
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 01:00:10 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #web_security #secure_coding #software_development
Medium
The 8-Layer Security Framework Every Developer Should Implement
You don’t need to be a security expert to build secure applications. This practical framework provides defense in depth that protects…
16 views
Daily Writeups
⤷ Title: Hack The Box — Spookifier Walkthrough (EN)
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:06:01 GMT
════════════════════════
⌗ Tags: #hacking #ctf #writeup #hackthebox #cybersecurity
Medium
Hack The Box — Spookifier Walkthrough (EN)
Learn how to solve HTB’s “Spookifier” challenge with simple explanations.
20 views
Daily Writeups
⤷ Title: The CVE Crisis Isn’t Over: What Comes Next for Global Vulnerability Management
════════════════════════
𐀪 Author: Arachne Digital
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 01:42:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability_management #cyber_threat_intelligence #cve #open_source
Medium
The CVE Crisis Isn’t Over: What Comes Next for Global Vulnerability Management
By Kade Morton, Co-founder of Arachne Digital
17 views
Daily Writeups
⤷ Title: Module 3 — Information Security Threats and Vulnerability Assessment
════════════════════════
𐀪 Author: YaquisTech
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 01:17:04 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #technology #ec_council
Medium
Module 3 — Information Security Threats and Vulnerability Assessment
What is a Threat?
20 views
Daily Writeups
⤷ Title: 6 Identity and Access Management Patterns That Prevent 90% of Data Breaches
════════════════════════
𐀪 Author: Orami
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 01:04:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #data_security #security #technology #identity_management
Medium
6 Identity and Access Management Patterns That Prevent 90% of Data Breaches
Most major breaches stem from identity compromises. These battle-tested patterns create robust protection while maintaining usability —…
22 views
Daily Writeups
⤷ Title: EXPOSED: Why Hackers Are Silently Targeting Your Security Misconfigurations
════════════════════════
𐀪 Author: YuvaSec
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:18:03 GMT
════════════════════════
⌗ Tags: #web_security #authentication #cybersecurity #security
Medium
EXPOSED: Why Hackers Are Silently Targeting Your Security Misconfigurations
Security Misconfigurations: How Simple Mistakes Lead to Breaches.
34 views
Daily Writeups
⤷ Title: Pentesting və Red Teaming : Aralarındakı fərq
════════════════════════
𐀪 Author: alizadasec
════════════════════════
ⴵ Time: Sun, 20 Apr 2025 23:49:45 GMT
════════════════════════
⌗ Tags: #pentesting #kibertəhlükəsizlik #cybersecurity #red_teaming #red_team
Medium
Pentesting və Red Teaming : Aralarındakı fərq
Hər kəsə salam🙋‍♀️ Gəlin bu məqalədə bir-biri ilə səhv salınan iki anlayış haqqında müzakirə edək. Məqalənin sonunda fikirlərinizi…
52 views