Daily Writeups
@Daily_Writeups
3.6K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.6K subscribers
Daily Writeups
⤷ Title: The Rise of the Agentic SOC: Why Collaboration Between Humans and AI is the Future of Cyber…
════════════════════════
𐀪 Author: Vivek Mokkarala
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 22:35:03 GMT
════════════════════════
⌗ Tags: #agentic_ai #security_operations #cybersecurity #ai_in_cybersecurity #security_operation_center
Medium
The Rise of the Agentic SOC: Why Collaboration Between Humans and AI is the Future of Cyber…
Today’s Security Operations Centers are stretched to their limits. Endless alerts, talent shortages, and ever-evolving threats mean SOC…
22 views
Daily Writeups
⤷ Title: HIPAA Just Got Teeth: How 2025 Changes Will Hit Security Teams
════════════════════════
𐀪 Author: Claudio Gallo
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 22:34:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #privacy #hipaa_compliance
Medium
HIPAA Just Got Teeth: How 2025 Changes Will Hit Security Teams
HIPAA is finally catching up with reality. After years of minor tweaks, 2025 has brought the most significant changes to healthcare privacy…
26 views
Daily Writeups
⤷ Title: My Journey into AI: How I Passed Microsoft’s AI-900 and Began My AI Path
════════════════════════
𐀪 Author: Syed Ali Turab
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 22:28:15 GMT
════════════════════════
⌗ Tags: #ai_900 #cybersecurity #azure #ai #cloud
Medium
My Journey into AI: How I Passed Microsoft’s AI-900 and Began My AI Path
In today’s world, AI is everywhere — from work conversations to social media to everyday life, AI has become the buzzword for everyone.
44 views
Daily Writeups
⤷ Title: The Rise of Ransomware as a Service and EDR Killers - A New Era of Cyber Threats
════════════════════════
𐀪 Author: Avnishyam
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 22:26:20 GMT
════════════════════════
⌗ Tags: #cyber_resilience #edr_evasion #cybersecurity #coe_security #ransomware_protection
Medium
The Rise of Ransomware as a Service and EDR Killers - A New Era of Cyber Threats
In 2025, organizations worldwide face a new level of ransomware threat driven by Ransomware as a Service (RaaS) platforms enhanced by…
46 views
Daily Writeups
⤷ Title: Ghosting-AMSI: AMSI Bypass via RPC Hijack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:21:59 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #AMSI Bypass
Penetration Testing Tools
Ghosting-AMSI: AMSI Bypass via RPC Hijack
AMSI Bypass via RPC Hijack (NdrClientCall3) technique exploits the COM-level mechanics AMSI uses when delegating scan requests to antivirus
34 views
Daily Writeups
⤷ Title: ntfstool: Forensics tool for NTFS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:15:06 +0000
════════════════════════
⌗ Tags: #Data Forensics #NTFS Forensics tool
Penetration Testing Tools
ntfstool: Forensics tool for NTFS
NTFSTool is a forensic tool to play with disks and NTFS volumes. It supports reading partition info (mbr, partition table, vbr)
32 views
Daily Writeups
⤷ Title: 0-Click NTLM Authentication Bypass Hits Microsoft Telnet Server, PoC Releases, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 01:56:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #Critical Vulnerability #Hacker Fantastic #Legacy Windows #Microsoft Telnet #MS_TNAP #NTLM Vulnerability #Remote Exploit
Daily CyberSecurity
0-Click NTLM Authentication Bypass Hits Microsoft Telnet Server, PoC Releases, No Patch
A severe vulnerability affecting Microsoft Telnet Server has been uncovered, allowing remote attackers to completely bypass authentication and gain administrator access without valid credentials. …
22 views
Daily Writeups
⤷ Title: Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 01:38:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CVE_2025_31650 #CVE_2025_31651 #Denial of Service #Java Servlet #Rewrite Rule Bypass #security update #vulnerability patch
Daily CyberSecurity
Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws
Apache Tomcat patches CVE-2025-31650 and CVE-2025-31651 to fix denial of service and rewrite rule bypass issues. Upgrade now to stay secure.
23 views
Daily Writeups
⤷ Title: CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:50:13 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability #CVE_2025_21756 #Cybersecurity Research #kernel_exploitation #Linux Kernel Vulnerability #Michael Hoefler #privilege escalation #use after free #vsock UAF
Daily CyberSecurity
CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases
CVE-2025-21756 exploited a tiny Linux vsock bug to achieve root access via UAF and ROP chains. Michael Hoefler reveals the full exploitation path.
17 views
Daily Writeups
⤷ Title: Weaponized Uyghur Language Software: Citizen Lab Uncovers Targeted Malware Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:43:00 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Citizen Lab #cybersecurity #Digital Transnational Repression #Human Rights #Malware Targeting Diaspora #Spearphishing Attack #Uyghur Malware #UyghurEditPP
Daily CyberSecurity
Weaponized Uyghur Language Software: Citizen Lab Uncovers Targeted Malware Campaign
Citizen Lab reveals a malware campaign targeting Uyghur exiles by hijacking trusted language software, exposing new digital transnational repression tactics.
23 views
Daily Writeups
⤷ Title: Fog Ransomware Group Exposed: Inside the Tools, Tactics, and Victims of a Stealthy Threat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:40:32 +0000
════════════════════════
⌗ Tags: #Malware #Active Directory Exploits #Credential Theft #Cyber Threat Intelligence #DFIR Report #Fog Ransomware #ransomware attack #Sliver C2 #SonicWall Exploits
Daily CyberSecurity
Fog Ransomware Group Exposed: Inside the Tools, Tactics, and Victims of a Stealthy Threat
DFIR Report exposes the Fog ransomware group's sophisticated use of SonicWall exploits, Sliver C2, and credential theft across tech, retail, and education sectors.
16 views
Daily Writeups
⤷ Title: Quantum Issues Critical Patch for StorNext GUI RCE Vulnerabilities (CVE-2025-46616, CVE-2025-46617)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_46616 #CVE_2025_46617 #Cybersecurity Patch #Quantum Security Advisory #Remote Code Execution #Storage Security #StorNext Vulnerabilities
Daily CyberSecurity
Quantum Issues Critical Patch for StorNext GUI RCE Vulnerabilities (CVE-2025-46616, CVE-2025-46617)
Quantum warns of critical RCE vulnerabilities in StorNext GUI (CVE-2025-46616, CVE-2025-46617). Users must upgrade or patch immediately to prevent exploitation.
12 views
Daily Writeups
⤷ Title: CVE-2025-3200: Wiesemann & Theis Com-Server Devices Exposed by Deprecated TLS Protocols
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:32:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #CERT@VDE #COM Server #Com_Server Security Flaw #Critical Infrastructure Cybersecurity #CVE_2025_3200 #industrial automation #Industrial Security #security advisory #TLS 1.0 #TLS 1.1 #TLS Vulnerability #Wiesemann & Theis
Daily CyberSecurity
CVE-2025-3200: Wiesemann & Theis Com-Server Devices Exposed by Deprecated TLS Protocols
CERT@VDE reveals CVE-2025-3200 in Wiesemann & Theis devices: outdated TLS protocols expose Com-Server models to interception and man-in-the-middle attacks.
14 views
Daily Writeups
⤷ Title: Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:25:12 +0000
════════════════════════
⌗ Tags: #Malware #credit card theft #eCommerce Breach #Fake GIF Malware #MageCart Attack #Magento Security #Reverse Proxy Skimming #Sucuri Research #web skimming
Daily CyberSecurity
Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento
A fake GIF and malicious reverse proxy server enabled a multi-stage card skimming attack on a Magento site, exposing customer credit card data and credentials.
17 views
Daily Writeups
⤷ Title: Triada Trojan Evolves: Pre-Installed Android Malware Now Embedded in Device Firmware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:20:37 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Android security #Cybersecurity Threats #Firmware Infection #Kaspersky Labs #mobile security #Pre_Installed Malware #Triada Trojan
Daily CyberSecurity
Triada Trojan Evolves: Pre-Installed Android Malware Now Embedded in Device Firmware
Kaspersky warns that Triada Trojan now comes pre-installed in counterfeit Android device firmware, making it nearly impossible to remove without reinstallation.
13 views
Daily Writeups
⤷ Title: Critical Vulnerabilities in Quick Agent Software Expose Ricoh MFPs to Remote Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:13:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_26692 #CVE_2025_27937 #CVE_2025_31144 #cybersecurity #Path Traversal #Quick Agent #Remote Code Execution #Ricoh MFPs #SIOS Technology
Daily CyberSecurity
Critical Vulnerabilities in Quick Agent Software Expose Ricoh MFPs to Remote Attacks
Quick Agent vulnerabilities could let attackers execute code or steal files from Ricoh MFPs. Update now to secure systems from critical remote attacks.
12 views
Daily Writeups
⤷ Title: Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:10:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Cyberespionage #Earth Kurma #Government Hacking #KRNRAT #MORIYA #Rootkits #SIMPOBOXSPY #Southeast Asia #Trend Research
Daily CyberSecurity
Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage
Earth Kurma APT campaign targets Southeast Asian governments and telecoms using rootkits, loaders, and cloud services to steal sensitive data.
23 views
Daily Writeups
⤷ Title: Discord Used as C2 for Stealthy Python-Based RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:03:08 +0000
════════════════════════
⌗ Tags: #Malware #Cybercrime #Cyfirma #Discord #malware #Python #rat #Remote Access Trojan
Daily CyberSecurity
Discord Used as C2 for Stealthy Python-Based RAT
Cyfirma uncovers a Python-based RAT using Discord for command and control. It can lock screens, simulate BSOD, move the mouse, and steal data.
28 views
Daily Writeups
⤷ Title: Password Recovery? More Like Account Delivery Host Header Injection Madness
════════════════════════
𐀪 Author: r00t
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 01:26:13 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #infosec
Medium
Password Recovery? More Like Account Delivery Host Header Injection Madness
بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ
26 views
Daily Writeups
⤷ Title: $500,000 to Catch STON.fi Bugs?! Let’s Get Hunting, STONfiers!
════════════════════════
𐀪 Author: MADEOFBLU
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 01:00:02 GMT
════════════════════════
⌗ Tags: #rewards #stonfi #bug_bounty #cryptocurrency #defi
Medium
$500,000 to Catch STON.fi Bugs?! Let’s Get Hunting, STONfiers!
Don’t scroll past this, STONfiers! Your favorite STON.fi homie dropping in with some news that’s gonna make your inner code ninja do a…
14 views
Daily Writeups
⤷ Title: Find .JS files of your bug bounty target(JS FILES RECON)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:42:35 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #bug_bounty #bug_bounty_tips
Medium
Find .JS files of your bug bounty target(JS FILES RECON)
.JS files are goldmines for bug bounty hunters
16 views