Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 May 2025 13:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
62 views
Daily Writeups
⤷ Title: NSO Group Fined $168M for Targeting 1,400 WhatsApp Users With Pegasus Spyware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 07 May 2025 11:52:00 +0530
════════════════════════
⌗ Tags: No_Tags
44 views
Daily Writeups
⤷ Title: Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 21:03:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: New Investment Scams Use Facebook Ads, RDGA Domains, and IP Checks to Filter Victims
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 19:06:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: Third Parties and Machine Credentials: The Silent Drivers Behind 2025's Worst Breaches
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 16:55:00 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Entra ID Data Protection: Essential or Overkill?
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 15:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 07 May 2025 11:28:01 +0000
════════════════════════
⌗ Tags: #Security #Agentic AI #AI #Artificial Intelligence #Cybersecurity #Langflow #security #Vulnerability
Hackread
Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
23 views
Daily Writeups
⤷ Title: Fake SSA Emails Trick Users into Installing ScreenConnect RAT
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 06 May 2025 22:03:14 +0000
════════════════════════
⌗ Tags: #Security #Malware #Phishing Scam #Cyber Attack #Cyber Crime #Cybersecurity #RAT #ScreenConnect #TROJAN
Hackread
Fake SSA Emails Trick Users into Installing ScreenConnect RAT
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: ClickFix Scam: How to Protect Your Business Against This Evolving Threat
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 06 May 2025 18:49:33 +0000
════════════════════════
⌗ Tags: #Security #Malware #Captcha #ClickFix #Cybersecurity #Phishing #Scam
Hackread
ClickFix Scam: How to Protect Your Business Against This Evolving Threat
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: Two Hacks, One Empire: The Cyber Assaults Disney Didn’t See Coming
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 06 May 2025 16:39:39 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Hacking News #AI #Cyber Attack #Cyber Crime #Cybersecurity #data breach #Disney #Employee Training #Insider Threat
Hackread
Two Hacks, One Empire: The Cyber Assaults Disney Didn’t See Coming
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
26 views
Daily Writeups
⤷ Title: DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:30:39 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Active Directory #Group Policy #MMC #RSAT
Penetration Testing Tools
DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement
The Disconnected RSAT tool allows launching Group Policy Manager and Certificate Authority snap-ins without requiring a domain join.
19 views
Daily Writeups
⤷ Title: scirius: web application for Suricata ruleset management and threat hunting
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:08:43 +0000
════════════════════════
⌗ Tags: #Data Forensics #Suricata ruleset
Penetration Testing Tools
scirius: web application for Suricata ruleset management and threat hunting
Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files.
18 views
Daily Writeups
⤷ Title: Zero-Day CLFS Vulnerability (CVE-2025-29824) Exploited in Ransomware Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 10:51:51 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #Balloonfly #CLFS #CVE_2025_29824 #cybersecurity #Exploit #Microsoft #Play Ransomware #privilege escalation #ransomware #zero_day
Daily CyberSecurity
Zero-Day CLFS Vulnerability (CVE-2025-29824) Exploited in Ransomware Attacks
A zero-day privilege escalation vulnerability (CVE-2025-29824) in Microsoft CLFS was exploited by Balloonfly (Play ransomware) before the official patch.
19 views
Daily Writeups
⤷ Title: CISA Warns of Unsophisticated Cyber Actors Targeting U.S. Critical Infrastructure OT Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 07:33:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Critical Infrastructure #Cyber Hygiene #industrial control systems #OT Security
Daily CyberSecurity
CISA Warns of Unsophisticated Cyber Actors Targeting U.S. Critical Infrastructure OT Systems
CISA warns that basic cyber attacks are targeting ICS/SCADA systems in the U.S. energy and transportation sectors due to poor cyber hygiene and exposed assets.
16 views
Daily Writeups
⤷ Title: Microsoft Unveils Enhanced Windows AI Features for “Copilot+ PC”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:41:59 +0000
════════════════════════
⌗ Tags: #Technology #AI #artificial intelligence #Click to Do #Copilot+ PC #Microsoft #Snapdragon #software update #windows #Windows 11
Daily CyberSecurity
Microsoft Unveils Enhanced Windows AI Features for "Copilot+ PC"
Microsoft announces new AI-powered features for "Copilot+ PC," including natural language settings search and the "Click to Do" function, enhancing Windows 11.
41 views
Daily Writeups
⤷ Title: CVE-2025-25014 (CVSS 9.1): Prototype Pollution in Kibana Opens Door to Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:50:01 +0000
════════════════════════
⌗ Tags: #Penetration Testing #Arbitrary Code Execution #CVE_2025_25014 #Elastic #Kibana #Prototype Pollution #Vulnerability
Daily CyberSecurity
CVE-2025-25014 (CVSS 9.1): Prototype Pollution in Kibana Opens Door to Code Execution
A critical vulnerability in Kibana (CVE-2025-25014) enables arbitrary code execution via prototype pollution. Elastic urges users to patch immediately.
18 views
Daily Writeups
⤷ Title: Botnet Exploits Old GeoVision IoT Devices via CVE-2024-6047 & CVE-2024-11120
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:46:08 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #botnet #CVE_2024_11120 #CVE_2024_6047 #IoT security #Vulnerability Exploitation
Daily CyberSecurity
Botnet Exploits Old GeoVision IoT Devices via CVE-2024-6047 & CVE-2024-11120
Akamai uncovers active exploitation of retired GeoVision IoT devices via CVE-2024-6047 and CVE-2024-11120 using Mirai-based botnet LZRD.
15 views
Daily Writeups
⤷ Title: CVE-2025-46728: cpp-httplib Vulnerability Exposes Servers to Denial of Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:40:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #C++ vulnerability #cpp_httplib #CVE_2025_46728 #Denial of Service #HTTP chunked encoding #memory exhaustion
Daily CyberSecurity
CVE-2025-46728: cpp-httplib Vulnerability Exposes Servers to Denial of Service
CVE-2025-46728 in cpp-httplib allows memory exhaustion via chunked requests. Patch to v0.20.1 to prevent denial-of-service attacks.
10 views
Daily Writeups
⤷ Title: CVE-2025-47241: Critical Whitelist Bypass in Browser Use Exposes Internal Services
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:35:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agents #ARIMLABS #browser automation #Browser Use #CVE_2025_47241 #internal service exposure #whitelist bypass
Daily CyberSecurity
CVE-2025-47241: Critical Whitelist Bypass in Browser Use Exposes Internal Services
CVE-2025-47241 in Browser Use lets attackers bypass whitelists via crafted URLs. Upgrade to v0.1.45 to secure AI-driven browser automation.
11 views
Daily Writeups
⤷ Title: CoGUI Phishing Kit: Advanced Evasion Tactics Target Japan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:27:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CoGUI #Credential Phishing #cyberattack #Email Security #Japan #phishing campaigns #Phishing Kit
Daily CyberSecurity
CoGUI Phishing Kit: Advanced Evasion Tactics Target Japan
The CoGUI phishing kit uses advanced evasion to target Japan with high-volume campaigns impersonating Amazon, PayPay, and more.
15 views
Daily Writeups
⤷ Title: CVE-2025-24977: Critical RCE Flaw in OpenCTI Platform Exposes Infrastructure to Root-Level Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:24:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_24977 #Cyber Threat Intelligence #OpenCTI #Remote Code Execution #security advisory
Daily CyberSecurity
CVE-2025-24977: Critical RCE Flaw in OpenCTI Platform Exposes Infrastructure to Root-Level Attacks
OpenCTI flaw CVE-2025-24977 allows RCE and secret exposure via webhooks. Patch to v6.4.11 to protect Docker/Kubernetes deployments.
18 views