Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Vulnerability analysis that a developer can act on
════════════════════════
𐀪 Author: Sriman Soundarapandiyan
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 09:56:18 GMT
════════════════════════
⌗ Tags: #information_security #application_security #cybersecurity #vulnerability_management #devsecops
Medium
Vulnerability analysis that a developer can act on
A vulnerability scanner is good at listing. It is less good at deciding which list item should move a sprint. The gap between those two…
12 views
Daily Writeups
⤷ Title: Long Running npm Malware Campaign Exposes the Growing Risk of Software Supply Chain Attacks
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 10:59:30 GMT
════════════════════════
⌗ Tags: #devsecops #cybersecurity #application_security #cloud_security #supply_chain_security
Medium
Long Running npm Malware Campaign Exposes the Growing Risk of Software Supply Chain Attacks
Open source software has become an essential part of modern application development.
20 views
Daily Writeups
⤷ Title: Progress Fixes Critical Command Injection Flaw CVE-2026-91140 in DataDirect AI Model Generator Agents
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 14:12:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #Command Injection #CVE_2026_91140 #DataDirect #DevSecOps #OpenAPI #Progress
Daily CyberSecurity
Progress Fixes Critical Command Injection Flaw CVE-2026-91140 in DataDirect AI Model Generator Agents
TL;DR Progress has fixed CVE-2026-91140, a critical Progress DataDirect vulnerability in its Autonomous REST Connector AI Model Generator agents. A crafted OpenAPI or Swagger file could run comman…
12 views
Daily Writeups
⤷ Title: Can AI Autofix Actually Close a Cloud Attack Path?
════════════════════════
𐀪 Author: Cloud Under Fire
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 12:44:46 GMT
════════════════════════
⌗ Tags: #ai_autofix #vulnerability_management #cloud_security #application_security #devsecops
Medium
Can AI Autofix Actually Close a Cloud Attack Path?
Why a patch that passes review can still leave the one hop an attacker needs wide open.
26 views
Daily Writeups
⤷ Title: Argo CD Patches Four Critical CVSS 9.9 Flaws Affecting the Repo-Server and AppProject Controls
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 16:56:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Argo CD #CVE_2026_77459 #DevSecOps #GitOps #Jsonnet #Kubernetes #Kustomize #Remote Code Execution
Daily CyberSecurity
Argo CD Patches Four Critical CVSS 9.9 Flaws Affecting the Repo-Server and AppProject Controls
TL;DR The Argo CD project has fixed four critical security flaws, each rated 9.9 on CVSS. Three of these Argo CD vulnerabilities let a user run commands or read files inside the argocd-repo-server…
24 views
Daily Writeups
⤷ Title: Gitea Fixes 27 Security Flaws Across 28.0.0 and 28.1.0, Including SSRF and Account Takeover Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 14:35:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2026_101027 #CVE_2026_103059 #CVE_2026_96404 #DevSecOps #git #Gitea #ssrf
Daily CyberSecurity
Gitea Fixes 27 Security Flaws Across 28.0.0 and 28.1.0, Including SSRF and Account Takeover Bugs
TL;DR Gitea has shipped 27 security fixes across versions 28.0.0 and 28.1.0. This Gitea security update closes server-side request forgery (SSRF) paths, an installer bug that grants admin sessions…
21 views
Daily Writeups
⤷ Title: What Does “Secure” Actually Mean for Your Business?
════════════════════════
𐀪 Author: Parveen Kr. Arora
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 05:20:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #privacy #application_security #digital_transformation #devsecops
Medium
What Does “Secure” Actually Mean for Your Business?
Why security assessments should be scoped around business risk — not generic checklists.
17 views
Daily Writeups
⤷ Title: Cryptominers Are Targeting AI Servers: 5 Checks for Developers
════════════════════════
𐀪 Author: Tessa Mero
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 19:50:45 GMT
════════════════════════
⌗ Tags: #devsecops #cybersecurity #vulnerability #hacking
Medium
Cryptominers Are Targeting AI Servers: 5 Checks for Developers
Someone is using a poem on GitHub to coordinate a cryptomining botnet called PoeLLM, according to Lumen’s Black Lotus Labs. Gamers, if you…
24 views
Daily Writeups
⤷ Title: Cloudflare Let AI Attack Its WAF 1,107 Times. The Constraints Mattered More Than the Model
════════════════════════
𐀪 Author: Muhawi Eka
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 12:01:02 GMT
════════════════════════
⌗ Tags: #devsecops #cybersecurity #artificial_intelligence #software_engineering #application_security
Medium
Cloudflare Let AI Attack Its WAF 1,107 Times. The Constraints Mattered More Than the Model
This was not a story about AI replacing security engineers. It was a demonstration of how AI becomes useful when humans refuse to give it…
12 views
Daily Writeups
⤷ Title: Threat Modeling vs. Penetration Testing: The $80 Million Lesson From Capital One
════════════════════════
𐀪 Author: Ciphemicacademia
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 01:39:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #devsecops #appsec #threat_modeling
Medium
Threat Modeling vs. Penetration Testing: The $80 Million Lesson From Capital One
Threat Modeling vs. Penetration Testing: The $80 Million Lesson From Capital One
27 views