Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Unpatched Windows LNK Vulnerability Enables Remote Execution via UNC Path, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:50:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #EnvironmentVariableDataBlock #Microsoft Security #MotW #NTLM Hash Capture #Responder Tool #Shell Parsing #Shortcut Exploit #UNC Path Exploit #Windows LNK
Daily CyberSecurity
Unpatched Windows LNK Vulnerability Enables Remote Execution via UNC Path, PoC Releases
A researcher reveals an unpatched Windows LNK flaw that allows UNC-based remote execution and NTLM hash capture. Microsoft declined to issue a fix.
22 views
Daily Writeups
⤷ Title: High-Severity DoS Vulnerability Found in PowerDNS DNSdist (CVE-2025-30194)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:40:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_30194 #Denial of Service #DNS_over_HTTPS #dnsdist #DoH #patch #PowerDNS #security advisory
Daily CyberSecurity
High-Severity DoS Vulnerability Found in PowerDNS DNSdist (CVE-2025-30194)
Critical DoS vulnerability (CVE-2025-30194) impacts PowerDNS DNSdist 1.9.0-1.9.8 with DoH. Upgrade to 1.9.9 or use h2o provider.
19 views
Daily Writeups
⤷ Title: Proofpoint Exposes TA2900: French-Speaking BEC Actor Exploits Rental Payment System
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:38:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BEC Scam #business email compromise #Email Security #French Threat Actor #IBAN Scam #Proofpoint #Real Estate Fraud #Rental Fraud #TA2900
Daily CyberSecurity
Proofpoint Exposes TA2900: French-Speaking BEC Actor Exploits Rental Payment System
Proofpoint uncovers TA2900, a French-speaking BEC actor exploiting rental payments via fake IBANs and compromised education accounts to steal funds.
31 views
Daily Writeups
⤷ Title: Infoblox Exposes $5.7B Investment Scam Surge Fueled by RDGAs and DNS Abuse
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:35:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DNS Abuse #Infoblox Report #Investment Scams #RDGA #Reckless Rabbit #Ruthless Rabbit #Scam Infrastructure #TDS #threat intelligence
Daily CyberSecurity
Infoblox Exposes $5.7B Investment Scam Surge Fueled by RDGAs and DNS Abuse
Infoblox uncovers $5.7B lost to investment scams in 2024, driven by RDGAs, DNS abuse, and fake profit platforms run by sophisticated threat actors.
24 views
Daily Writeups
⤷ Title: WordPress Malware Alert: Fake Anti-Malware Plugin Grants Admin Access and Executes Remote Code
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:25:21 +0000
════════════════════════
⌗ Tags: #Malware #C2 Server #fake plugin #REST API Exploit #Website Security #Wordfence Threat Intelligence #WordPress Malware #WP_antymalwary_bot #wp_cron.php Infection
Daily CyberSecurity
WordPress Malware Alert: Fake Anti-Malware Plugin Grants Admin Access and Executes Remote Code
Wordfence warns of malware posing as a WordPress plugin that enables admin access, hides itself, and executes remote code via REST API and cron jobs.
20 views
Daily Writeups
⤷ Title: Rancher Releases Patch for CVE-2024-22031 Privilege Escalation Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:20:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Container Management #CVE_2024_22031 #cybersecurity alert #Kubernetes Security #Patch Update #privilege escalation #Rancher #SUSE Security Advisory
Daily CyberSecurity
Rancher Releases Patch for CVE-2024-22031 Privilege Escalation Vulnerability
Rancher patches CVE-2024-22031, a privilege escalation flaw allowing cross-cluster access. Update to v2.11.1, v2.10.5, or v2.9.9 to stay protected.
20 views
Daily Writeups
⤷ Title: JPMorgan Chase CISO Warns of SaaS Security Crisis and Supply Chain Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:15:27 +0000
════════════════════════
⌗ Tags: #Cyber Security #CISO Open Letter #Cloud Integration Risk #cybersecurity alert #JPMorgan Chase #Patrick Opet #SaaS Security #Secure by Design #Software Supply Chain
Daily CyberSecurity
JPMorgan Chase CISO Warns of SaaS Security Crisis and Supply Chain Risk
JPMorgan Chase CISO urges software providers to prioritize security in SaaS delivery, warning of rising risks to global infrastructure and supply chains.
16 views
Daily Writeups
⤷ Title: Cybersecurity Vendors Under Siege: A Deep Dive into Real-World Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:10:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese APTs #Cybersecurity Vendors #DPRK IT workers #Insider Threats #ransomware #SentinelOne #Supply Chain Attacks #Threat Landscape 2025
Daily CyberSecurity
Cybersecurity Vendors Under Siege: A Deep Dive into Real-World Attacks
SentinelOne reveals real-world attacks from DPRK, ransomware groups, and Chinese APTs, exposing evolving threats facing cybersecurity vendors in 2025.
26 views
Daily Writeups
⤷ Title: Hannibal Stealer Malware Targets Crypto Wallets, VPNs, and Browser Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:03:27 +0000
════════════════════════
⌗ Tags: #Malware #Browser Credential Theft #Clipboard Hijacking #Cryptocurrency Theft #Cyfirma #Dark Web Threats #Hannibal Stealer #Info_Stealer Malware #VPN Breach
Daily CyberSecurity
Hannibal Stealer Malware Targets Crypto Wallets, VPNs, and Browser Data
Hannibal Stealer malware resurfaces with new tactics to steal crypto wallets, VPN data, and browser credentials. Learn how it targets users worldwide.
99 views
Daily Writeups
⤷ Title: Find secrets in JS files(bug bounty)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:41:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #bug_bounty_tips #hacking #bug_bounty
Medium
Find secrets in JS files(bug bounty)
Learn how to find secrets in your BB target JS files using different tools
28 views
Daily Writeups
⤷ Title: Understanding UAC Bypasses: A Red Team Perspective
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:26:31 GMT
════════════════════════
⌗ Tags: #red_team #hacking #malware #cybersecurity #cyber
Medium
🔐 Understanding UAC Bypasses: A Red Team Perspective
Whether you’re launching a penetration test or building defenses as part of a blue team, understanding how attackers elevate their…
24 views
Daily Writeups
⤷ Title: Hack The Box — Challenge — Spooky PassWalkthrough (ES)
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:02:22 GMT
════════════════════════
⌗ Tags: #hacking #ctf_writeup #challenge #cybersecurity #hackthebox
Medium
Hack The Box — Challenge — SpookyPass Walkthrough (ES)
Descubre como resolver el challenge “SpookyPass” con explicaciones simples
23 views
Daily Writeups
⤷ Title: Top 10 Cybersecurity Blog Posts That Made April 2025 a Breakthrough Month for OpenExploit
════════════════════════
𐀪 Author: Pawan Jaiswal
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:42:01 GMT
════════════════════════
⌗ Tags: #openexploit #cybersecurity #programming #technology #software_engineering
Medium
Top 10 Cybersecurity Blog Posts That Made April 2025 a Breakthrough Month for OpenExploit
April 2025 was a great month for OpenExploit.in. After months of diligent effort, strategic writing, and creating useful content for…
26 views
Daily Writeups
⤷ Title: The Last Cup of Tea
════════════════════════
𐀪 Author: Emily Wilson
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:35:03 GMT
════════════════════════
⌗ Tags: #sexuality #gun_control #social_media #tea #cybersecurity
Medium
The Last Cup of Tea
It had been a routine—almost sacred—for nearly forty years. Every morning at 7:00 a.m., John would boil the water, steep two cups of Earl Grey, and bring one to Sarah while she read the newspaper in…
22 views
Daily Writeups
⤷ Title: My PortSwigger Journey: Exploring SQL Vulnerabilities Using Burp Suite (Pt 3)
════════════════════════
𐀪 Author: Emmanuel Chibuzor Kingsley
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:31:16 GMT
════════════════════════
⌗ Tags: #portswigger #sql_injection #sql #cybersecurity #appsec
Medium
My PortSwigger Journey: Exploring SQL Vulnerabilities Using Burp Suite (Pt 3)
In the past parts of this series, I explored SQL vulnerabilities in scenarios where the web application provides visible feedback, making…
19 views
Daily Writeups
⤷ Title: KQL (Kusto): Introduction| TryHackMe Walkthrough
════════════════════════
𐀪 Author: Cyber.Bae
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:12:32 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #kql #cybersecurity #microsoft_sentinel
Medium
KQL (Kusto): Introduction| TryHackMe Walkthrough
Learning to perform KQL queries in Microsoft Sentinel
27 views
Daily Writeups
⤷ Title: Learning Cyber Security: Network Traffic Analisys — Web Attack
════════════════════════
𐀪 Author: Juni Artawan
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 01:06:13 GMT
════════════════════════
⌗ Tags: #network_forensics #wireshark #cybersecurity
Medium
Learning Cyber Security: Network Traffic Analisys — Web Attack
Diberikan sebuah file packet capture (web-attack.pcap) dan instruksi untuk menemukan rekam jejak dari serangan ke aplikasi berbasis web.
22 views
Daily Writeups
⤷ Title: Strengthening Our Academic Foundations: How ExeQuantum is Advancing Post-Quantum Cryptography…
════════════════════════
𐀪 Author: ExeQuantum
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:34:14 GMT
════════════════════════
⌗ Tags: #exequantum #cybersecurity #academia #post_quantum_cryptography
Medium
Strengthening Our Academic Foundations: How ExeQuantum is Advancing Post-Quantum Cryptography…
Introduction
33 views
Daily Writeups
⤷ Title: Top 10 Cybersecurity Trends to Watch in 2025
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:26:26 GMT
════════════════════════
⌗ Tags: #information_technology #ai #cybersecurity #cyber_security_awareness #cybercrime
Medium
Top 10 Cybersecurity Trends to Watch in 2025
Why 2025 will test the resilience of businesses, security teams, and trust like never before
43 views
Daily Writeups
⤷ Title: CISA Adds SAP NetWeaver Zero-Day CVE-2025-31324 to KEV Database
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 02:01:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Brute Ratel #CISA KEV #CVE_2025_31324 #file upload flaw #Remote Code Execution #SAP NetWeaver #Visual Composer #Zero_Day Vulnerability
Daily CyberSecurity
CISA Adds SAP NetWeaver Zero-Day CVE-2025-31324 to KEV Database
CVE-2025-31324 in SAP NetWeaver is under active attack. A critical zero-day flaw allows unauthenticated file uploads and remote code execution.
42 views
Daily Writeups
⤷ Title: Port Scanning Speed Test: RustScan vs Naabu
════════════════════════
𐀪 Author: Patar Isac Pardomuan
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 03:02:37 GMT
════════════════════════
⌗ Tags: #network_security #cybersecurity #penetration_testing #red_team #bug_bounty
Medium
Port Scanning Speed Test: RustScan vs. Naabu
Rust or Go? Comparing the raw scanning speed of RustScan and Naabu.
31 views