Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Entra ID Data Protection: Essential or Overkill?
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 May 2025 15:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 07 May 2025 11:28:01 +0000
════════════════════════
⌗ Tags: #Security #Agentic AI #AI #Artificial Intelligence #Cybersecurity #Langflow #security #Vulnerability
Hackread
Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited, Warns CISA
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
23 views
Daily Writeups
⤷ Title: Fake SSA Emails Trick Users into Installing ScreenConnect RAT
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 06 May 2025 22:03:14 +0000
════════════════════════
⌗ Tags: #Security #Malware #Phishing Scam #Cyber Attack #Cyber Crime #Cybersecurity #RAT #ScreenConnect #TROJAN
Hackread
Fake SSA Emails Trick Users into Installing ScreenConnect RAT
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: ClickFix Scam: How to Protect Your Business Against This Evolving Threat
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 06 May 2025 18:49:33 +0000
════════════════════════
⌗ Tags: #Security #Malware #Captcha #ClickFix #Cybersecurity #Phishing #Scam
Hackread
ClickFix Scam: How to Protect Your Business Against This Evolving Threat
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: Two Hacks, One Empire: The Cyber Assaults Disney Didn’t See Coming
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 06 May 2025 16:39:39 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Hacking News #AI #Cyber Attack #Cyber Crime #Cybersecurity #data breach #Disney #Employee Training #Insider Threat
Hackread
Two Hacks, One Empire: The Cyber Assaults Disney Didn’t See Coming
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
26 views
Daily Writeups
⤷ Title: DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:30:39 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Active Directory #Group Policy #MMC #RSAT
Penetration Testing Tools
DRSAT: Disconnected RSAT Tool Bypasses Domain Join Requirement
The Disconnected RSAT tool allows launching Group Policy Manager and Certificate Authority snap-ins without requiring a domain join.
19 views
Daily Writeups
⤷ Title: scirius: web application for Suricata ruleset management and threat hunting
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:08:43 +0000
════════════════════════
⌗ Tags: #Data Forensics #Suricata ruleset
Penetration Testing Tools
scirius: web application for Suricata ruleset management and threat hunting
Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and update associated files.
18 views
Daily Writeups
⤷ Title: Zero-Day CLFS Vulnerability (CVE-2025-29824) Exploited in Ransomware Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 10:51:51 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #Balloonfly #CLFS #CVE_2025_29824 #cybersecurity #Exploit #Microsoft #Play Ransomware #privilege escalation #ransomware #zero_day
Daily CyberSecurity
Zero-Day CLFS Vulnerability (CVE-2025-29824) Exploited in Ransomware Attacks
A zero-day privilege escalation vulnerability (CVE-2025-29824) in Microsoft CLFS was exploited by Balloonfly (Play ransomware) before the official patch.
19 views
Daily Writeups
⤷ Title: CISA Warns of Unsophisticated Cyber Actors Targeting U.S. Critical Infrastructure OT Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 07:33:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Critical Infrastructure #Cyber Hygiene #industrial control systems #OT Security
Daily CyberSecurity
CISA Warns of Unsophisticated Cyber Actors Targeting U.S. Critical Infrastructure OT Systems
CISA warns that basic cyber attacks are targeting ICS/SCADA systems in the U.S. energy and transportation sectors due to poor cyber hygiene and exposed assets.
16 views
Daily Writeups
⤷ Title: Microsoft Unveils Enhanced Windows AI Features for “Copilot+ PC”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:41:59 +0000
════════════════════════
⌗ Tags: #Technology #AI #artificial intelligence #Click to Do #Copilot+ PC #Microsoft #Snapdragon #software update #windows #Windows 11
Daily CyberSecurity
Microsoft Unveils Enhanced Windows AI Features for "Copilot+ PC"
Microsoft announces new AI-powered features for "Copilot+ PC," including natural language settings search and the "Click to Do" function, enhancing Windows 11.
41 views
Daily Writeups
⤷ Title: CVE-2025-25014 (CVSS 9.1): Prototype Pollution in Kibana Opens Door to Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:50:01 +0000
════════════════════════
⌗ Tags: #Penetration Testing #Arbitrary Code Execution #CVE_2025_25014 #Elastic #Kibana #Prototype Pollution #Vulnerability
Daily CyberSecurity
CVE-2025-25014 (CVSS 9.1): Prototype Pollution in Kibana Opens Door to Code Execution
A critical vulnerability in Kibana (CVE-2025-25014) enables arbitrary code execution via prototype pollution. Elastic urges users to patch immediately.
18 views
Daily Writeups
⤷ Title: Botnet Exploits Old GeoVision IoT Devices via CVE-2024-6047 & CVE-2024-11120
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:46:08 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #botnet #CVE_2024_11120 #CVE_2024_6047 #IoT security #Vulnerability Exploitation
Daily CyberSecurity
Botnet Exploits Old GeoVision IoT Devices via CVE-2024-6047 & CVE-2024-11120
Akamai uncovers active exploitation of retired GeoVision IoT devices via CVE-2024-6047 and CVE-2024-11120 using Mirai-based botnet LZRD.
15 views
Daily Writeups
⤷ Title: CVE-2025-46728: cpp-httplib Vulnerability Exposes Servers to Denial of Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:40:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #C++ vulnerability #cpp_httplib #CVE_2025_46728 #Denial of Service #HTTP chunked encoding #memory exhaustion
Daily CyberSecurity
CVE-2025-46728: cpp-httplib Vulnerability Exposes Servers to Denial of Service
CVE-2025-46728 in cpp-httplib allows memory exhaustion via chunked requests. Patch to v0.20.1 to prevent denial-of-service attacks.
10 views
Daily Writeups
⤷ Title: CVE-2025-47241: Critical Whitelist Bypass in Browser Use Exposes Internal Services
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:35:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agents #ARIMLABS #browser automation #Browser Use #CVE_2025_47241 #internal service exposure #whitelist bypass
Daily CyberSecurity
CVE-2025-47241: Critical Whitelist Bypass in Browser Use Exposes Internal Services
CVE-2025-47241 in Browser Use lets attackers bypass whitelists via crafted URLs. Upgrade to v0.1.45 to secure AI-driven browser automation.
11 views
Daily Writeups
⤷ Title: CoGUI Phishing Kit: Advanced Evasion Tactics Target Japan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:27:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CoGUI #Credential Phishing #cyberattack #Email Security #Japan #phishing campaigns #Phishing Kit
Daily CyberSecurity
CoGUI Phishing Kit: Advanced Evasion Tactics Target Japan
The CoGUI phishing kit uses advanced evasion to target Japan with high-volume campaigns impersonating Amazon, PayPay, and more.
15 views
Daily Writeups
⤷ Title: CVE-2025-24977: Critical RCE Flaw in OpenCTI Platform Exposes Infrastructure to Root-Level Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:24:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_24977 #Cyber Threat Intelligence #OpenCTI #Remote Code Execution #security advisory
Daily CyberSecurity
CVE-2025-24977: Critical RCE Flaw in OpenCTI Platform Exposes Infrastructure to Root-Level Attacks
OpenCTI flaw CVE-2025-24977 allows RCE and secret exposure via webhooks. Patch to v6.4.11 to protect Docker/Kubernetes deployments.
18 views
Daily Writeups
⤷ Title: Scattered Spider (UNC3944) Resurfaces with Ties to DragonForce and RansomHub in Retail Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:22:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DragonForce #Mandiant #RansomHub #ransomware #retail cyberattack #Scattered Spider #social engineering #UNC3944
Daily CyberSecurity
Scattered Spider (UNC3944) Resurfaces with Ties to DragonForce and RansomHub in Retail Attacks
UNC3944 resurfaces as Scattered Spider, linked to DragonForce and RansomHub in new retail attacks. Mandiant warns of social engineering escalation.
12 views
Daily Writeups
⤷ Title: Gunra Ransomware: New Threat Analysis Reveals Evasion Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:20:29 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Threat #cybersecurity #Cyfirma #data exfiltration #Gunra Ransomware #Malware Analysis #ransomware
Daily CyberSecurity
Gunra Ransomware: New Threat Analysis Reveals Evasion Tactics
CYFIRMA's analysis details Gunra Ransomware's sophisticated techniques, including evasion and data exfiltration, impacting global industries.
11 views
Daily Writeups
⤷ Title: Critical AWS Amplify Studio Flaw Allows Code Execution – Update Now!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:15:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #Amplify Studio #AWS Amplify #Code Execution #CVE_2025_4318 #javascript #security #update
Daily CyberSecurity
Critical AWS Amplify Studio Flaw Allows Code Execution - Update Now!
Critical security vulnerability (CVE-2025-4318) in AWS Amplify Studio allows arbitrary code execution. Upgrade to version 2.20.3 immediately!
6 views
Daily Writeups
⤷ Title: Panda Shop Smishing Syndicate: China-Backed Cybercrime-as-a-Service Hits Millions Globally
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:10:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android RCS #Apple iMessage #carding #China cybercrime #cybercrime_as_a_service #Panda Shop #PII theft #Resecurity #smishing #Telegram fraud
Daily CyberSecurity
Panda Shop Smishing Syndicate: China-Backed Cybercrime-as-a-Service Hits Millions Globally
Resecurity exposes Panda Shop smishing kit linked to Chinese cybercrime, targeting millions via iMessage and RCS with carding and data theft.
16 views
Daily Writeups
⤷ Title: Critical Open Source Library ‘easyjson’ Linked to Russian VK Group
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:02:16 +0000
════════════════════════
⌗ Tags: #Cyber Security #easyjson #Hunted Labs #Open Source Security #Russian cyber threat #Software Supply Chain #VK Group
Daily CyberSecurity
Critical Open Source Library 'easyjson' Linked to Russian VK Group
Research reveals the widely used open source library 'easyjson' is controlled by developers linked to Russia's VK Group, raising security concerns.
6 views