Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 31 Mar 2023 00:38:26 GMT
———————————————
✏️Title: Exposed Docker Registries Server as Critical Reminder on Container Security
———————————————
📎Link: https://medium.com/p/a9bba13b403d
———————————————
Tags: #docker #bug_bounty #exposed_docker_registry #docker_exploit #cybersecurity

Medium

Exposed Docker Registries Server as Critical Reminder on Container Security

What is Docker?

2 views02:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sat, 29 Apr 2023 01:13:55 GMT
———————————————
✏️Title: Exposed: Supreme Court Chief Justice’s Wife Earned Millions in Secret Commissions
———————————————
📎Link: https://medium.com/p/aac8ca50949b
———————————————
Tags: #hacking #ai #justice #supreme_court #ethical_hacking

Medium

#Exposed: #SupremeCourt Chief Justice’s Wife Earned #Millions in Secret Commissions

rolodexter’s abilities went beyond its initial purpose. Not only could it predict legal trends and identify potential candidates for law…

3 views02:00

Daily Writeups

⤷ Title: The NPM Token That Stayed Alive for Two Years
════════════════════════
𐀪 Author: Arshad Kazmi
════════════════════════
ⴵ Time: Fri, 30 May 2025 15:29:14 GMT
════════════════════════
⌗ Tags: #hackerone_report #bug_bounty #npm_token #dockerhub #exposed_credential

Medium

The NPM Token That Stayed Alive for Two Years

About two years ago, while testing an early, unreleased version of iScan.today, I picked up something odd during a routine scan.

39 views16:03

Daily Writeups

⤷ Title: Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:44:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #APT_C_36 #AsyncRAT #Blind Eagle #Colombia #Cybercrime #Exposed C2 #Latin America #phishing #rat #Remcos #Remote Access Trojan #Trustwave #VBS Malware

Daily CyberSecurity

Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM

Trustwave exposes Blind Eagle (APT-C-36) leveraging exposed infrastructure and VBS malware in phishing campaigns, targeting Colombian banks with blatant disregard for concealment.

17 views01:04

Daily Writeups

⤷ Title: Power Grid ICS Are Exposed — What Does This Mean for Critical Infrastructure?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 03:14:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Infrastructure #cyberattack #cybersecurity #Exposed Devices #ICS #industrial control systems #Operation Sindoor #OT Security #Power Grid #Vulnerability #zoomeye

Daily CyberSecurity

Power Grid ICS Are Exposed — What Does This Mean for Critical Infrastructure?

Over 143,000 ICS devices in the power sector are publicly exposed to the internet, facing high/critical vulnerabilities. Urgent action is needed to secure global energy infrastructure.

14 views07:04

Daily Writeups

⤷ Title: Penetration Testing Exposed: A Day in the Life of a Professional Hacker (For Good)
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 15:23:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #exposed #professional_hackers #penetration_testing

Medium

Penetration Testing Exposed: A Day in the Life of a Professional Hacker (For Good)

Breaking Into Offices, Bypassing Security, and Getting Paid to Do It—All With Permission

6 views16:05

Daily Writeups

⤷ Title: Beyond Cryptominers: A New Malware Strain Is Hijacking Exposed Docker APIs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 10 Sep 2025 00:05:45 +0000
════════════════════════
⌗ Tags: #Malware #Akamai #botnet #cryptomining #cybersecurity #Docker malware #exposed APIs #malware evolution #Remote Access

Daily CyberSecurity

Beyond Cryptominers: A New Malware Strain Is Hijacking Exposed Docker APIs

A new malware strain is targeting exposed Docker APIs, evolving from a cryptominer into a stealthy botnet that blocks ports to "own" a victim's system for exclusive use.

9 views02:04

Daily Writeups

⤷ Title: 48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:07:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #Cisco ASA #Exposed Devices #Firepower #NCSC #network security #RCE #Shadowserver #zero_day

Penetration Testing Tools

48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds

A Shadowserver scan found over 48,000 Cisco ASA/FTD firewalls remain unpatched against two critical zero-day RCE/Unauthorized Access flaws, despite CISA’s emergency directive.

6 views04:04

Daily Writeups

⤷ Title: MuddyWater’s Latest Malware Suite Exposed: A Global Espionage Campaign
════════════════════════
𐀪 Author: Himanshu Bhatt
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 11:28:01 GMT
════════════════════════
⌗ Tags: #campaign #cybersecurity #malware #exposed #hacking

Medium

MuddyWater’s Latest Malware Suite Exposed: A Global Espionage Campaign

Group-IB Threat Intelligence has uncovered a sophisticated phishing campaign, attributed with high confidence to the Advanced Persistent…

14 views12:04

Daily Writeups

⤷ Title: The Shai-Hulud Attack: Exposing Weak Links in Modern Software Supply Chains
════════════════════════
𐀪 Author: Himanshu Bhatt
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 15:17:18 GMT
════════════════════════
⌗ Tags: #attack #software #cybersecurity #hacking #exposed

Medium

The Shai-Hulud Attack: Exposing Weak Links in Modern Software Supply Chains

The recent “Shai-Hulud” worm that hit the NPM ecosystem shows just how fragile our software supply chains really are. This malware — named…

21 views16:04

Daily Writeups

⤷ Title: CyberHeroes THM Writeup
════════════════════════
𐀪 Author: Death Esther
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 14:31:28 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cyberheros_thm #exposed_javascript #broken_authentication #tryhackme

Medium

CyberHeroes THM Writeup

Understanding Broken Authentication Through Exposed JavaScript Logic

25 views16:04

About

Blog

Apps

Platform