Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Microsoft Dismantles Lumma Stealer Network, Seizes 2,000+ Domains
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 21 May 2025 23:56:25 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Malware #BitSight #CleanDNS #CloudFlare #Cyber Attack #Cybersecurity #eset #Infostealer #Lumen #Lumma Stealer #Microsoft #Phishing
Hackread
Microsoft Dismantles Lumma Stealer Network, Seizes 2,000+ Domains
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: XRP Futures Offer New Tools for Navigating Crypto Volatility
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 21 May 2025 19:18:00 +0000
════════════════════════
⌗ Tags: #Cryptocurrency #Crypro #Technology #XRP
Hackread
XRP Futures Offer New Tools for Navigating Crypto Volatility
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
8 views
Daily Writeups
⤷ Title: Current Cybersecurity Trends in 2025: What Businesses Must Know
════════════════════════
𐀪 Author: Cullensam
════════════════════════
ⴵ Time: Wed, 21 May 2025 23:54:08 GMT
════════════════════════
⌗ Tags: #cyber_security_training #cybercrime #cybersecurity #cyber_security_awareness
Medium
Current Cybersecurity Trends in 2025: What Businesses Must Know
In 2025, current cybersecurity trends are evolving rapidly as businesses face increasingly sophisticated cyber threats. From AI-driven…
6 views
Daily Writeups
⤷ Title: Choose the Best Cybersecurity Services in Noida to Protect Your Company’s Digital Assets and…
════════════════════════
𐀪 Author: Aman Wish geeks techserve
════════════════════════
ⴵ Time: Wed, 21 May 2025 23:53:24 GMT
════════════════════════
⌗ Tags: #cyber_security_services #cybersecurity
Medium
Choose the Best Cybersecurity Services in Noida to Protect Your Company’s Digital Assets and…
In today’s digitally connected world, cyber threats are more sophisticated and dangerous than ever before. From data breaches and…
11 views
Daily Writeups
⤷ Title: Zero Tust: When “Never Trust, Always Verify” Breaks Down
════════════════════════
𐀪 Author: Postmodern Cybersecurity
════════════════════════
ⴵ Time: Wed, 21 May 2025 23:11:42 GMT
════════════════════════
⌗ Tags: #security #zta #zero_trust #cybersecurity
Medium
Zero Tust: When “Never Trust, Always Verify” Breaks Down
Zero Trust, the security model promising to solve all our problems by assuming everyone is a potential threat, may not be as effective as…
10 views
Daily Writeups
⤷ Title: ️ Home SOC Lab — Project-Z v1.0
════════════════════════
𐀪 Author: 0xZetss
════════════════════════
ⴵ Time: Wed, 21 May 2025 22:51:20 GMT
════════════════════════
⌗ Tags: #blue_team #soc #homelab #cybersecurity #purple_team
Medium
🛡️ Home SOC Lab — Project-Z v1.0
From Blueprint to Detection: Building My Own Blue/Purple Team Lab  By Ziad Okka (0xZetss)
10 views
Daily Writeups
⤷ Title: Ripple’s xrpl.js npm Package Was Backdoored: Here’s How Private Keys Were Stolen
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Wed, 21 May 2025 22:40:36 GMT
════════════════════════
⌗ Tags: #cybercrime #ai #information_security #cybersecurity #cyber_security_awareness
Medium
Ripple’s xrpl.js npm Package Was Backdoored: Here’s How Private Keys Were Stolen
The open-source ecosystem was hit with another wake-up call — and this time, the target was one of the most widely used libraries in the…
9 views
Daily Writeups
⤷ Title: Free VPNs : When “Free” comes at a hidden cost
════════════════════════
𐀪 Author: Larbi OUIYZME
════════════════════════
ⴵ Time: Wed, 21 May 2025 22:39:07 GMT
════════════════════════
⌗ Tags: #privacy #encryption #privacy_protection #vpn #cybersecurity
Medium
Free VPNs : When “Free” comes at a hidden cost
In an era where the risk of sensitive data breaches is ever-present, using a VPN (Virtual Private Network) has become a common practice to…
9 views
Daily Writeups
⤷ Title: Cyber Chat: Page Glave
════════════════════════
𐀪 Author: Ryan G. Cox
════════════════════════
ⴵ Time: Wed, 21 May 2025 22:36:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #detection_engineering #information_security #blue_team #career_change
Medium
Cyber Chat: Page Glave
Pivoting careers. Panther + Scanner is the optimal stack. Day-to-day as a Detection Engineer. And more…
11 views
Daily Writeups
⤷ Title: Hijacking ssh client to get passwords of other server
════════════════════════
𐀪 Author: gerald amasi
════════════════════════
ⴵ Time: Wed, 21 May 2025 23:11:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #red_teaming #hijack #hijacking #ssh
Medium
Hijacking ssh client to get passwords of other server
A simple scenario to this is when you have somehow gained access to the server, and you wan’t to pivot in the network further but no more…
14 views
Daily Writeups
⤷ Title: MalBuster’s Challenge ️‍♀️
════════════════════════
𐀪 Author: Iram Jack
════════════════════════
ⴵ Time: Wed, 21 May 2025 22:31:23 GMT
════════════════════════
⌗ Tags: #dynamic_analysis #malware_analysis #static_analysis #tryhackme #miss_robot
Medium
MalBuster’s Challenge 🕵️‍♀️
Basic Static Analysis | Part 3
21 views
Daily Writeups
⤷ Title: SQL INJECTION LEADING TO DDOS ATTACK IN PRIVATE CONQUER SERVER WEBSITE
════════════════════════
𐀪 Author: Alkaptonurea
════════════════════════
ⴵ Time: Wed, 21 May 2025 23:50:54 GMT
════════════════════════
⌗ Tags: #conquer #ddos_attack #penetration_testing #xss_vulnerability #sql_injection
Medium
SQL injection leading to Stored XSS leading to DDOS attack in game website
BUG INFO :
28 views
Daily Writeups
⤷ Title: MSFTRecon: Unauthenticated Recon Tool for Microsoft 365 & Azure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 00:55:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #Azure #cybersecurity #enumeration #Microsoft 365 #MSFTRecon #reconnaissance #Red Team
Penetration Testing Tools
MSFTRecon: Unauthenticated Recon Tool for Microsoft 365 & Azure
MSFTRecon is a powerful tool for red teamers to map Microsoft 365 and Azure infrastructure without authentication, identifying misconfigurations.
23 views
Daily Writeups
⤷ Title: YATAS: AWS security, hardening, configurations, logging auditing tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 00:29:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #AWS hardening
Penetration Testing Tools
YATAS: AWS security, hardening, configurations, logging auditing tool
Yet Another Testing & Auditing Solution is a simple and easy to use tool to audit your infrastructure for misconfiguration or potential security issues.
19 views
Daily Writeups
⤷ Title: Grafana Zero-Day? Emergency Patch Released ‘One Day Ahead of Schedule’ for XSS Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 01:46:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_4123 #cybersecurity #emergency patch #Grafana #security #XSS #zero_day
Daily CyberSecurity
Grafana Zero-Day? Emergency Patch Released 'One Day Ahead of Schedule' for XSS Flaw
Grafana rushed an emergency patch for CVE-2025-4123, a high-severity XSS flaw that was made public. Upgrade now to prevent unauthorized access.
28 views
Daily Writeups
⤷ Title: GitLab Patches High-Severity Flaws: DoS and 2FA Bypass Fixed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 01:33:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #2FA bypass #authentication #cybersecurity #dos #gitlab #security
Daily CyberSecurity
GitLab Patches High-Severity Flaws: DoS and 2FA Bypass Fixed
GitLab released urgent updates (18.0.1+) fixing high-severity flaws, including a DoS vulnerability (CVE-2025-0993) and a 2FA bypass (CVE-2024-12093).
16 views
Daily Writeups
⤷ Title: Docker Containers Under Attack: New Self-Replicating Dero Cryptominer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 00:36:14 +0000
════════════════════════
⌗ Tags: #Malware #container security #cryptomining #cybersecurity #Dero #docker #malware #worm
Daily CyberSecurity
Docker Containers Under Attack: New Self-Replicating Dero Cryptominer
A new self-replicating Dero cryptominer is infecting exposed Docker containers, spreading as a worm without needing a C2 server.
10 views
Daily Writeups
⤷ Title: NIST Proposes New Metric to Predict “Likely Exploited” Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 00:30:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #EPSS #KEV #LEV #NIST #patch prioritization
Daily CyberSecurity
NIST Proposes New Metric to Predict "Likely Exploited" Vulnerabilities
NIST introduces the Likely Exploited Vulnerability (LEV) metric, a new way to estimate which CVEs have likely been exploited in the wild.
11 views
Daily Writeups
⤷ Title: Langroid Flaws (CVSS 9.8) Expose LLM Apps to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 00:20:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_46724 #CVE_2025_46725 #CVSS #cybersecurity #Langroid #LLM #Python #rce #Remote Code Execution
Daily CyberSecurity
Langroid Flaws (CVSS 9.8) Expose LLM Apps to RCE
Critical vulnerabilities (CVSS 9.8) in the Langroid Python framework allow remote code execution in LLM applications. Update to version 0.53.15 now!
9 views
Daily Writeups
⤷ Title: Beyond Detection: PyBitmessage Protocol Used for Covert Monero Mining Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 00:16:21 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #C2 #CoinMiner #evasion #malware #Monero #p2p #powershell #PyBitmessage
Daily CyberSecurity
Beyond Detection: PyBitmessage Protocol Used for Covert Monero Mining Campaign
Threat actors are using the PyBitmessage protocol as a stealthy C2 channel to hide a Monero coinminer and backdoor, evading detection.
20 views
Daily Writeups
⤷ Title: Critical Flaws in AI Browse Agents: Exposed to Credential Theft and Hijacking
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 22 May 2025 00:12:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #agent hijacking #AI Agents #Credential Theft #CVE_2025_47241 #cybersecurity #domain bypass #LLM #Prompt injection
Daily CyberSecurity
Critical Flaws in AI Browse Agents: Exposed to Credential Theft and Hijacking
Learn about critical vulnerabilities in LLM-powered Browse agents like Browser Use, allowing domain bypass and prompt injection for data theft.
18 views