Daily Writeups
@Daily_Writeups
3.51K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.51K subscribers
Daily Writeups
⤷ Title: Critical CVE-2025-20188 (CVSS 10) Flaw in Cisco IOS XE WLCs Allows Remote Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 01:48:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #cisco #CVE_2025_20188 #IOS XE #security advisory #wireless LAN controller #WLC
Daily CyberSecurity
Critical CVE-2025-20188 (CVSS 10) Flaw in Cisco IOS XE WLCs Allows Remote Root Access
Cisco patches CVE-2025-20188, a CVSS 10 flaw in IOS XE WLCs, enabling unauthenticated remote file uploads and root-level command execution.
26 views
Daily Writeups
⤷ Title: Multi Vulnerabilities Found in SonicWall SMA 100 Series Prompt Urgent Security Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 01:40:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_32819 #cybersecurity #Cybersecurity Advisory #firmware update #MFA #MFA security #patch #Path Traversal #remote command injection #security advisory #SMA 100 #SonicWall #SSLVPN vulnerability #waf
Daily CyberSecurity
Multi Vulnerabilities Found in SonicWall SMA 100 Series Prompt Urgent Security Update
SonicWall urges urgent updates to SMA 100 Series devices after critical post-auth vulnerabilities expose systems to file deletion and command injection.
21 views
Daily Writeups
⤷ Title: CVE-2025-23123 (CVSS 10): Critical UniFi Protect Cameras Flaw Demands Immediate Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:50:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #camera vulnerability #CVE_2025_23123 #CVE_2025_23164 #rce #security advisory #Ubiquiti #UniFi Protect
Daily CyberSecurity
CVE-2025-23123 (CVSS 10): Critical UniFi Protect Cameras Flaw Demands Immediate Updates
Ubiquiti warns of critical RCE flaw in UniFi Protect Cameras (CVE-2025-23123); update firmware and app to prevent potential network compromise.
16 views
Daily Writeups
⤷ Title: Google Uncovers LOSTKEYS Malware Used by Russian COLDRIVER for Cyber Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:45:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #ClickFix #COLDRIVER #cyber_espionage #google #LOSTKEYS #malware #russia #Star Blizzard #UNC4057
Daily CyberSecurity
Google Uncovers LOSTKEYS Malware Used by Russian COLDRIVER for Cyber Espionage
Google's GTIG reveals LOSTKEYS malware, a new tool by Russian actor COLDRIVER, targeting NATO advisors and Ukraine via fake CAPTCHAs.
17 views
Daily Writeups
⤷ Title: Iranian Cyber Espionage Uses Fake Modeling Agency for Targeted Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:40:52 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT35 #browser fingerprinting #Charming Kitten #cyber_espionage #Iran cyberattack #social engineering
Daily CyberSecurity
Iranian Cyber Espionage Uses Fake Modeling Agency for Targeted Attacks
Unit 42 uncovers Iranian cyber espionage using a fake modeling agency website to selectively target victims with sophisticated techniques.
17 views
Daily Writeups
⤷ Title: Inferno Drainer Steals Millions in Evolving Crypto Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:34:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blockchain security #Collab.Land #Crypto theft #cryptocurrency #Discord #Inferno Drainer #NFT #phishing #Wallet drainer
Daily CyberSecurity
Inferno Drainer Steals Millions in Evolving Crypto Attacks
Inferno Drainer returns stronger than ever, using Discord phishing and blockchain obfuscation to steal millions in crypto.
14 views
Daily Writeups
⤷ Title: Agenda Ransomware Evolves with NETXLOADER and SmokeLoader in Global Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:30:44 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reactor #Agenda #cyberattack #Data Theft #Loader Malware #malware #NETXLOADER #Qilin #ransomware #SmokeLoader #threat actor #threat intelligence #Trend Micro
Daily CyberSecurity
Agenda Ransomware Evolves with NETXLOADER and SmokeLoader in Global Campaigns
Agenda ransomware (Qilin) is back, now using the advanced NETXLOADER and SmokeLoader to enhance infiltration and evade detection. Targets global sectors.
9 views
Daily Writeups
⤷ Title: APT36 Suspected in India Gov Spoofing Phishing with ClickFix Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:26:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #APT36 #ClickFix #cyberattack #Government #Hunt.io #India #Indian Ministry #Linux #Linux Malware #malware #phishing #social engineering #Threat Hunting #threat intelligence #Transparent Tribe #windows #Windows malware
Daily CyberSecurity
APT36 Suspected in India Gov Spoofing Phishing with ClickFix Tactics
A sophisticated phishing campaign, possibly by APT36, spoofs Indian government sites and uses ClickFix tactics to target Windows and Linux users.
9 views
Daily Writeups
⤷ Title: CVE-2025-27533: Apache ActiveMQ Memory Allocation Bug Could Lead to Denial of Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:20:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache ActiveMQ #dos #Memory Allocation Vulnerability #Message Broker #open_source
Daily CyberSecurity
CVE-2025-27533: Apache ActiveMQ Memory Allocation Bug Could Lead to Denial of Service
A vulnerability in Apache ActiveMQ's buffer handling can cause memory exhaustion, leading to denial of service. Patch now to version 6.1.6+ or 5.19.0+.
10 views
Daily Writeups
⤷ Title: Aikido Uncovers Malicious Code in Popular npm Package rand-user-agent
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:13:33 +0000
════════════════════════
⌗ Tags: #Malware #Aikido Security #javascript #npm malware #Remote Access Trojan #supply chain attack
Daily CyberSecurity
Aikido Uncovers Malicious Code in Popular npm Package rand-user-agent
Aikido discovers a Remote Access Trojan (RAT) hidden in rand-user-agent, a popular npm package with 45,000 weekly downloads.
25 views
Daily Writeups
⤷ Title: Lampion Malware Returns with ClickFix Tactics to Target Portuguese Sectors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:10:25 +0000
════════════════════════
⌗ Tags: #Malware #Infostealer #Malware Campaign #PowerShell Attacks #threat intelligence #VBScript
Daily CyberSecurity
Lampion Malware Returns with ClickFix Tactics to Target Portuguese Sectors
Unit 42 uncovers a sophisticated Lampion malware campaign using ClickFix social engineering tactics to target government and financial sectors in Portugal.
15 views
Daily Writeups
⤷ Title: Critical Privilege Escalation Flaw in IGEL OS Exposes Systems to Root Access Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:03:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #Edge OS #endpoint security #Linux Security #Vulnerability Alert
Daily CyberSecurity
Critical Privilege Escalation Flaw in IGEL OS Exposes Systems to Root Access Risks
IGEL OS suffers from a critical privilege escalation vulnerability affecting OS 11 and OS 12. Users are urged to patch immediately.
20 views
Daily Writeups
⤷ Title: Unmasking Robots.txt: What Web Crawlers Hide and relates OSINT
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Wed, 07 May 2025 13:41:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #robotstxt #osint #site_crawlers #bug_bounty
Medium
Unmasking Robots.txt: What Web Crawlers Hide and relates OSINT
All bug hunters should know before jumping into recon
19 views
Daily Writeups
⤷ Title: 7 Cara Hacker Menipu Karyawan Anda (Dan Gimana Kita Bisa Menghentikannya)
════════════════════════
𐀪 Author: handev.code
════════════════════════
ⴵ Time: Thu, 08 May 2025 01:23:01 GMT
════════════════════════
⌗ Tags: #engineering #hacking #cybersecurity #cyber_security_awareness #technology
Medium
7 Cara Hacker Menipu Karyawan Anda (Dan Gimana Kita Bisa Menghentikannya)
Ditulis oleh Handev Code — Ethical Hacker | Cyber Risk Strategist  “Ancaman siber itu bukan sekadar teknologi. Tapi tentang manusia yang…
13 views
Daily Writeups
⤷ Title: Mobile Cybersecurity for Kids & Teens: Protecting Your Child in 2025In an era where kids and teens…
════════════════════════
𐀪 Author: ‌‌‌‌‌‌‌‌‌
════════════════════════
ⴵ Time: Thu, 08 May 2025 01:17:34 GMT
════════════════════════
⌗ Tags: #hacking #kids #mobile #teens
Medium
Mobile Cybersecurity for Kids & Teens: Protecting Your Child in 2025In an era where kids and teens…
“Mobile Cybersecurity for Kids & Teens: Protecting Your Child in 2025In an era where kids and teens…” is published by 🇨‌🇾‌🇧‌🇪‌🇷‌🇹‌🇪‌🇨‌🇰‌.
10 views
Daily Writeups
⤷ Title: Online investigation toolkit for OSINT investigators
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:37:33 GMT
════════════════════════
⌗ Tags: #hacking #osint #osint_investigation #cybersecurity #toolkit
Medium
Online investigation toolkit for OSINT investigators
Very useful resource in your OSINT journey
11 views
Daily Writeups
⤷ Title: The Luddites Guide To Love… Or Operational Security For Online Dating.
════════════════════════
𐀪 Author: Seccult
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:26:59 GMT
════════════════════════
⌗ Tags: #dating #opsec #hacking #tutorial #privacy
Medium
The Luddites Guide To Love… Or Operational Security For Online Dating.
Note: This is based off of a presentation I gave, for the purposes of maintaining good Opsec, I've removed the slides, and personal…
18 views
Daily Writeups
⤷ Title: Lab Rats: 6 Essential Tools For Your RF Hacking Lab
════════════════════════
𐀪 Author: Investigator515
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:11:09 GMT
════════════════════════
⌗ Tags: #radio_hackers #radio #cybersecurity #hacking #homelab
Medium
Lab Rats: 6 Essential Tools For Your RF Hacking Lab
To experiment with RF, you’ll need a proper workspace and some suitable tools.
11 views
Daily Writeups
⤷ Title: Guía de Nmap — El escaneo de puertos es solo el comienzo
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:02:37 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #tools #cybersecurity #ctf
Medium
Guía de Nmap — El escaneo de puertos es solo el comienzo
Guía práctica para dominar Nmap: comandos esenciales, escaneos avanzados y consejos útiles para pentesting y CTFs.
10 views
Daily Writeups
⤷ Title: Nmap Guide — Port Scanning is Just the Beginning
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:02:36 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #hacking #tools #ctf
Medium
Nmap Guide — Port Scanning is Just the Beginning
Practical guide to mastering Nmap: essential commands, advanced scans, and useful tips for pentesting and CTFs.
12 views
Daily Writeups
⤷ Title: hash-only-2 | Writeup
════════════════════════
𐀪 Author: Marvin
════════════════════════
ⴵ Time: Thu, 08 May 2025 01:48:11 GMT
════════════════════════
⌗ Tags: #picoctf #ctf_writeup #cybersecurity
Medium
hash-only-2 | Writeup
這題與 hash-only-1 的手法相同，差別在於多了一個 rbash 繞過的技巧
9 views