Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Top Cyber Security Course in India — Upgrade Your Career in 2025
════════════════════════
𐀪 Author: Amaljoseph
════════════════════════
ⴵ Time: Tue, 06 May 2025 10:26:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking_training #cybersecurity #cyber_security_courses #ethical_hacking
Medium
Top Cyber Security Course in India — Upgrade Your Career in 2025
Cyber threats continue to thrive in the fast-paced digital age of today. From data breaches, ransomware, and identity theft, an attack at…
95 views
Daily Writeups
⤷ Title: I Found a Massive Cross-Tenant Access Control Bug by Testing Multiple Roles — Here’s What I Learned!
════════════════════════
𐀪 Author: Whoami
════════════════════════
ⴵ Time: Tue, 06 May 2025 10:54:24 GMT
════════════════════════
⌗ Tags: #idor_vulnerability #bug_bounty_tips #bug_bounty_writeup #privilege_escalation #broken_access_control
Medium
I Found a Massive Cross-Tenant Access Control Bug by Testing Multiple Roles — Here’s What I Learned!
The Setup: A Multi-Tenant CRM and a Curious Hunter
134 views
Daily Writeups
⤷ Title: SysAid Patches 4 Critical Flaws Enabling Pre-Auth RCE in On-Premise Version
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 May 2025 17:01:00 +0530
════════════════════════
⌗ Tags: No_Tags
106 views
Daily Writeups
⤷ Title: Reevaluating SSEs: A Technical Gap Analysis of Last-Mile Protection
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 May 2025 16:26:00 +0530
════════════════════════
⌗ Tags: No_Tags
106 views
Daily Writeups
⤷ Title: Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 May 2025 16:14:00 +0530
════════════════════════
⌗ Tags: No_Tags
98 views
Daily Writeups
⤷ Title: Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 May 2025 13:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
62 views
Daily Writeups
⤷ Title: NSO Group Fined $168M for Targeting 1,400 WhatsApp Users With Pegasus Spyware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 May 2025 11:52:00 +0530
════════════════════════
⌗ Tags: No_Tags
44 views
Daily Writeups
⤷ Title: Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 21:03:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: New Investment Scams Use Facebook Ads, RDGA Domains, and IP Checks to Filter Victims
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 19:06:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: Third Parties and Machine Credentials: The Silent Drivers Behind 2025's Worst Breaches
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 16:55:00 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Entra ID Data Protection: Essential or Overkill?
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 15:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 07 May 2025 11:28:01 +0000
════════════════════════
⌗ Tags: #Security #Agentic AI #AI #Artificial Intelligence #Cybersecurity #Langflow #security #Vulnerability
Hackread
Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
23 views
Daily Writeups
⤷ Title: Fake SSA Emails Trick Users into Installing ScreenConnect RAT
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 06 May 2025 22:03:14 +0000
════════════════════════
⌗ Tags: #Security #Malware #Phishing Scam #Cyber Attack #Cyber Crime #Cybersecurity #RAT #ScreenConnect #TROJAN
Hackread
Fake SSA Emails Trick Users into Installing ScreenConnect RAT
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: ClickFix Scam: How to Protect Your Business Against This Evolving Threat
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 06 May 2025 18:49:33 +0000
════════════════════════
⌗ Tags: #Security #Malware #Captcha #ClickFix #Cybersecurity #Phishing #Scam
Hackread
ClickFix Scam: How to Protect Your Business Against This Evolving Threat
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: Two Hacks, One Empire: The Cyber Assaults Disney Didn’t See Coming
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 06 May 2025 16:39:39 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Hacking News #AI #Cyber Attack #Cyber Crime #Cybersecurity #data breach #Disney #Employee Training #Insider Threat
Hackread
Two Hacks, One Empire: The Cyber Assaults Disney Didn’t See Coming
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
26 views
Daily Writeups
⤷ Title: DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:30:39 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Active Directory #Group Policy #MMC #RSAT
Penetration Testing Tools
DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement
The Disconnected RSAT tool allows launching Group Policy Manager and Certificate Authority snap-ins without requiring a domain join.
19 views
Daily Writeups
⤷ Title: scirius: web application for Suricata ruleset management and threat hunting
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:08:43 +0000
════════════════════════
⌗ Tags: #Data Forensics #Suricata ruleset
Penetration Testing Tools
scirius: web application for Suricata ruleset management and threat hunting
Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files.
18 views
Daily Writeups
⤷ Title: Zero-Day CLFS Vulnerability (CVE-2025-29824) Exploited in Ransomware Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 10:51:51 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #Balloonfly #CLFS #CVE_2025_29824 #cybersecurity #Exploit #Microsoft #Play Ransomware #privilege escalation #ransomware #zero_day
Daily CyberSecurity
Zero-Day CLFS Vulnerability (CVE-2025-29824) Exploited in Ransomware Attacks
A zero-day privilege escalation vulnerability (CVE-2025-29824) in Microsoft CLFS was exploited by Balloonfly (Play ransomware) before the official patch.
19 views
Daily Writeups
⤷ Title: CISA Warns of Unsophisticated Cyber Actors Targeting U.S. Critical Infrastructure OT Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 07:33:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Critical Infrastructure #Cyber Hygiene #industrial control systems #OT Security
Daily CyberSecurity
CISA Warns of Unsophisticated Cyber Actors Targeting U.S. Critical Infrastructure OT Systems
CISA warns that basic cyber attacks are targeting ICS/SCADA systems in the U.S. energy and transportation sectors due to poor cyber hygiene and exposed assets.
16 views
Daily Writeups
⤷ Title: Microsoft Unveils Enhanced Windows AI Features for “Copilot+ PC”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:41:59 +0000
════════════════════════
⌗ Tags: #Technology #AI #artificial intelligence #Click to Do #Copilot+ PC #Microsoft #Snapdragon #software update #windows #Windows 11
Daily CyberSecurity
Microsoft Unveils Enhanced Windows AI Features for "Copilot+ PC"
Microsoft announces new AI-powered features for "Copilot+ PC," including natural language settings search and the "Click to Do" function, enhancing Windows 11.
41 views
Daily Writeups
⤷ Title: CVE-2025-25014 (CVSS 9.1): Prototype Pollution in Kibana Opens Door to Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:50:01 +0000
════════════════════════
⌗ Tags: #Penetration Testing #Arbitrary Code Execution #CVE_2025_25014 #Elastic #Kibana #Prototype Pollution #Vulnerability
Daily CyberSecurity
CVE-2025-25014 (CVSS 9.1): Prototype Pollution in Kibana Opens Door to Code Execution
A critical vulnerability in Kibana (CVE-2025-25014) enables arbitrary code execution via prototype pollution. Elastic urges users to patch immediately.
18 views