Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: CVE-2025-46762: Apache Parquet Java Flaw Allows Potential RCE via Avro Schema
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:48:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Avro Schema #Big Data Security #CVE_2025_46762 #Java Vulnerability #Metadata Exploit #Remote Code Execution
Daily CyberSecurity
CVE-2025-46762: Apache Parquet Java Flaw Allows Potential RCE via Avro Schema
CVE-2025-46762 in Apache Parquet Java enables code execution via malicious Avro schema metadata. Upgrade to 1.15.2 or harden deserialization settings.
12 views
Daily Writeups
⤷ Title: Venom Spider Evolves: Arctic Wolf Exposes More_eggs Campaign Targeting HR
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:46:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #Arctic Wolf #backdoor #HR Phishing #JavaScript Obfuscation #LOLBAS #Polymorphic Malware #Resume Malware #TA4557
Daily CyberSecurity
Venom Spider Evolves: Arctic Wolf Exposes More_eggs Campaign Targeting HR
Arctic Wolf exposes Venom Spider’s More_eggs campaign, where fake resumes and polymorphic JavaScript target HR to deploy a stealthy backdoor.
13 views
Daily Writeups
⤷ Title: Critical SQL Injection Vulnerability Found in ADOdb PHP Library – CVE-2025-46337 (CVSS 10.0)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:43:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_46337 #database security #pg_insert_id #PHP vulnerability #PostgreSQL Driver #sqli
Daily CyberSecurity
Critical SQL Injection Vulnerability Found in ADOdb PHP Library - CVE-2025-46337 (CVSS 10.0)
CVE-2025-46337 is a critical SQL injection flaw in ADOdb's PostgreSQL driver. Patch to version 5.22.9 or sanitize input to avoid exploitation.
17 views
Daily Writeups
⤷ Title: Bridewell Uncovers ‘Operation Deceptive Prospect’ Targeting UK Organizations via Feedback Portals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:40:16 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_Generated Lures #Espionage Campaign #Feedback Form Phishing #RomCom backdoor #SnipBot #UK Critical Infrastructure
Daily CyberSecurity
Bridewell Uncovers ‘Operation Deceptive Prospect’ Targeting UK Organizations via Feedback Portals
Bridewell uncovers Operation Deceptive Prospect, a RomCom campaign using fake customer feedback to deliver malware via spoofed cloud storage links.
18 views
Daily Writeups
⤷ Title: StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:35:49 +0000
════════════════════════
⌗ Tags: #Malware #Amadey #C2 Protocol #Credential Theft #Malware Analysis #MSI Loader #PowerShell Malware #RC4 Encryption #ThreatLabz
Daily CyberSecurity
StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader
ThreatLabz reveals StealC V2—an evolving info-stealer with encrypted C2, MSI and PowerShell payloads, and a rule-driven control panel for targeted attacks.
15 views
Daily Writeups
⤷ Title: SonicWall Exploit Chain Exposes Admin Hijack Risk via CVE-2023-44221 and CVE-2024-38475
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:28:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache mod_rewrite #Authentication Bypass #CISA KEV #Command Injection #CVE_2023_44221 #CVE_2024_38475 #SMA Exploit #SonicWall
Daily CyberSecurity
SonicWall Exploit Chain Exposes Admin Hijack Risk via CVE-2023-44221 and CVE-2024-38475
CVE-2024-38475 and CVE-2023-44221 form an exploit chain targeting SonicWall SMA appliances, enabling remote admin hijack and code execution.
18 views
Daily Writeups
⤷ Title: APT36 Targets India with Pahalgam Attack-Themed Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:27:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #cyber_espionage #Indian government #Pahalgam Attack #phishing #Seqrite Labs #Transparent Tribe
Daily CyberSecurity
APT36 Targets India with Pahalgam Attack-Themed Phishing
Seqrite Labs uncovers APT36 phishing campaign using Pahalgam terror attack-themed lures to deploy Crimson RAT against Indian government targets.
30 views
Daily Writeups
⤷ Title: Golden Chickens Unveils TerraStealerV2 and TerraLogger Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:18:13 +0000
════════════════════════
⌗ Tags: #Malware
Daily CyberSecurity
Golden Chickens Unveils TerraStealerV2 and TerraLogger Malware
Recorded Future uncovers TerraStealerV2 and TerraLogger—two new malware families from Golden Chickens, aimed at stealing credentials and logging keystrokes.
13 views
Daily Writeups
⤷ Title: CVE-2025-31191: Microsoft Exposes macOS Vulnerability Allowing App Sandbox Escape
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:13:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Keychain Exploit #macOS vulnerability #Microsoft Threat Intelligence #Sandbox Escape #Security_Scoped Bookmarks
Daily CyberSecurity
CVE-2025-31191: Microsoft Exposes macOS Vulnerability Allowing App Sandbox Escape
Microsoft uncovers CVE-2025-31191, a macOS sandbox escape exploiting security-scoped bookmarks. Apple patched it in March 2025.
13 views
Daily Writeups
⤷ Title: SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:10:31 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Darktrace #JavaScript malware #Keitaro TDS #malware loader #NTLM Hashing #ransomware #SCF Exploits #WebDAV
Daily CyberSecurity
SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
Darktrace uncovers a SocGholish campaign using obfuscated loaders and legacy Windows exploits to harvest NTLM hashes and deliver ransomware payloads.
12 views
Daily Writeups
⤷ Title: Iranian APT Group Breaches Middle Eastern Critical Infrastructure in Stealth Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:03:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #cyber_espionage #FortiGuard #HanifNet #HXLibrary #Iranian APT #Lemon Sandstorm #NeoExpressRAT
Daily CyberSecurity
Iranian APT Group Breaches Middle Eastern Critical Infrastructure in Stealth Campaign
FortiGuard reveals an Iranian APT's multi-stage intrusion into Middle Eastern critical infrastructure using custom malware and stealthy persistence.
19 views
Daily Writeups
⤷ Title: SIGINT(Signals Intelligence)Tools
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:42:24 GMT
════════════════════════
⌗ Tags: #osint #cybersecurity #hacking #programming #sigint
Medium
SIGINT(Signals Intelligence)Tools
A collection of tools to help SIGINT investigations
17 views
Daily Writeups
⤷ Title: Initial Methodology for Hack The Box Machines
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:36:10 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #ctf_writeup #ctf #hacking
Medium
Initial Methodology for Hack The Box Machines
Automate and organize your first steps in Hack The Box: from connecting to the VPN to setting up the interactive shell.
16 views
Daily Writeups
⤷ Title: Securing National Infrastructure: The Silent War for Cyber Sovereignty
════════════════════════
𐀪 Author: Saleh A AbuRumman
════════════════════════
ⴵ Time: Mon, 05 May 2025 01:45:38 GMT
════════════════════════
⌗ Tags: #cyber_defense #critical_infrastructure #national_infrastructure #cybersecurity #infrastructure_security
Medium
The Hidden Threat in Our Connected World
The Hidden Threat in Our Connected World
16 views
Daily Writeups
⤷ Title: SolarWinds Unshaded: A Deep Dive into the 2020 Supply Chain Breach — Cyber Threat
════════════════════════
𐀪 Author: Jadala Ajay
════════════════════════
ⴵ Time: Mon, 05 May 2025 01:39:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #cyber_intelligence #cyber_threat_intelligence #solarwinds
Medium
SolarWinds Unshaded: A Deep Dive into the 2020 Supply Chain Breach — Cyber Threat Intelligence
By analyzing the attack lifecycle, detection challenges, and defensive takeaways, this case study aims to offer a practical and technical
15 views
Daily Writeups
⤷ Title: Mastering Modern Red Teaming Infrastructure — Part 8: Simulating APT Infostealer via Stealthy…
════════════════════════
𐀪 Author: Faris Faisal 0xFF
════════════════════════
ⴵ Time: Mon, 05 May 2025 01:25:34 GMT
════════════════════════
⌗ Tags: #cybercrime #redteam_tool #cyberattack #cyber #cybersecurity
Medium
Mastering Modern Red Teaming Infrastructure — Part 8: Simulating APT Infostealer via Stealthy Browser Extension for Cookie Exfiltration…
In this part of the “Mastering Modern Red Teaming Infrastructure” series, we explore the design and deployment of a stealthy Chrome…
21 views
Daily Writeups
⤷ Title: Securing a Small Business Network with Switch and Router Configurations
════════════════════════
𐀪 Author: Cell
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:47:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #networking #cisco #ccna
Medium
Securing a Small Business Network with Switch and Router Configurations
Introduction
14 views
Daily Writeups
⤷ Title: Writing a Detection Broke My Brain (And Made Me Respect Security Engineers Forever)
════════════════════════
𐀪 Author: Emmanuel Joshua
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:44:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_engineering #detection_engineering #incident_response #lessons_learned
Medium
Writing a Detection Broke My Brain (And Made Me Respect Security Engineers Forever)
So here’s the story.
13 views
Daily Writeups
⤷ Title: My PortSwigger Journey: Exploring SQL Vulnerabilities Using Burp Suite (Pt 6)
════════════════════════
𐀪 Author: Emmanuel Chibuzor Kingsley
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:39:17 GMT
════════════════════════
⌗ Tags: #sql_injection #web_app_security #pentesting #cybersecurity #portswigger
Medium
My PortSwigger Journey: Exploring SQL Vulnerabilities Using Burp Suite (Pt 6)
Exploiting blind SQL injection by triggering time delays
22 views
Daily Writeups
⤷ Title: Email Spoofing Can Destroy Your Business!!
════════════════════════
𐀪 Author: Md. Ashiquer Rahman Fahad
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:16:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #email_security
Medium
Email Spoofing Can Destroy Your Business!!
Understanding Email Spoofing: A Silent Threat to Organizations
33 views
Daily Writeups
⤷ Title: Security in the Grey: A Study of Risk, Reward, and Human Nature
════════════════════════
𐀪 Author: Tuan Kamiss
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:14:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #risk_management #security_awareness #tech_leadership #cyber_resilience
Medium
Security in the Grey: A Study of Risk, Reward, and Human Nature
“At its most basic level, security is a feeling — a perception born from a deep understanding of risk and reward.”
32 views