Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Critical 9.6 CVSS RCE: ManageEngine Exchange Reporter Plus Vulnerability Discovered!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 11:24:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Enterprise Security #Exchange Reporter Plus #Exchange Server #ManageEngine #rce #Remote Code Execution
Daily CyberSecurity
Critical 9.6 CVSS RCE: ManageEngine Exchange Reporter Plus Vulnerability Discovered!
A critical RCE flaw (CVE-2025-3835) in ManageEngine Exchange Reporter Plus allows unauthenticated attackers to execute arbitrary commands. Update now!
18 views
Daily Writeups
⤷ Title: Microsoft 365 “Direct Send” Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:11:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Direct Send #Email Security #Exchange Online #Microsoft 365 #phishing #Quishing #Smart Host #spoofing #threat actor #Varonis
Daily CyberSecurity
Microsoft 365 "Direct Send" Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
Varonis uncovers a widespread phishing campaign abusing Microsoft 365's Direct Send, spoofing internal users to bypass email security and harvest credentials.
19 views
Daily Writeups
⤷ Title: Zero Click Mass Account Takeover on Exchange
════════════════════════
𐀪 Author: Erfan Tavakoli
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 22:35:24 GMT
════════════════════════
⌗ Tags: #account_takeover #exchange #bug_bounty_tips #bug_bounty #bug_bounty_writeup
Medium
Zero Click Mass Account Takeover on Exchange
Hey everyone, I’m Erfan (Maverick). In this write-up, I’m going to show you how I discovered a vulnerability that I’ve named “Zero Click…
17 views
Daily Writeups
⤷ Title: Microsoft 365 “Direct Send” Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 07:18:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Direct Send #email security #Exchange Online #Microsoft 365 #phishing #Quishing #Smart Host #Spoofing #Threat Actor #Varonis
Penetration Testing Tools
Microsoft 365 "Direct Send" Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
Varonis uncovers a widespread phishing campaign abusing Microsoft 365's Direct Send, spoofing internal users to bypass email security and harvest credentials.
18 views
Daily Writeups
⤷ Title: Zoomex partners with HackenProof to launch a new Vulnerability Bounty Program!
════════════════════════
𐀪 Author: Zoomex Official
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 05:29:38 GMT
════════════════════════
⌗ Tags: #exchange #zoomex #web3 #hacken #bug_bounty
Medium
Zoomex partners with HackenProof to launch a new Vulnerability Bounty Program!
[June 27] — Global digital asset trading platform Zoomex today announced a strategic partnership with Web3 security collaboration platform…
27 views
Daily Writeups
⤷ Title: Microsoft Hikes On-Premises Server & CAL Prices by Up to 20% Starting July
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 07:34:23 +0000
════════════════════════
⌗ Tags: #Technology #CAL Suite #Cloud Migration #Enterprise CAL Suite #Exchange Server #Microsoft #On_Premises #Price Increase #Pricing #Server #SharePoint Server #Skype for Business Server
Daily CyberSecurity
Microsoft Hikes On-Premises Server & CAL Prices by Up to 20% Starting July
Microsoft is increasing prices for on-premises server products by 10% and CAL Suites by up to 20% starting July/August 2025, pushing enterprises towards cloud subscriptions.
20 views
Daily Writeups
⤷ Title: “NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:12:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #APT_Q_95 #china #chisel #Cyberespionage #cybersecurity #Exchange Zero_Day #Fileless Malware #Microsoft Exchange #NightEagle #QiAnXin
Daily CyberSecurity
“NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
NightEagle APT (APT-Q-95) is exploiting an unknown Exchange zero-day to target China's strategic industries, using fileless malware and exfiltrating machineKey for remote email access.
32 views
Daily Writeups
⤷ Title: NightEagle APT Unleashed: Zero-Day Exchange Exploit Targets China’s Strategic Industries with Fileless Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 02:46:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #APT_Q_95 #China #Chisel #Cyberespionage #cybersecurity #Exchange Zero_Day #Fileless Malware #Microsoft Exchange #NightEagle #QiAnXin
Penetration Testing Tools
NightEagle APT Unleashed: Zero-Day Exchange Exploit Targets China's Strategic Industries with Fileless Malware
NightEagle APT (APT-Q-95) is exploiting an unknown Exchange zero-day to target China's strategic industries, using fileless malware and exfiltrating machineKey for remote email access.
14 views
Daily Writeups
⤷ Title: Did The Crypto Exchange CoinDCX Get Hacked?
════════════════════════
𐀪 Author: Nivedita Baidya
════════════════════════
ⴵ Time: Sun, 20 Jul 2025 18:28:36 GMT
════════════════════════
⌗ Tags: #hacking #bitcoin #cryptocurrency #life #exchange
Medium
Did The Crypto Exchange CoinDCX Get Hacked?
Yes — CoinDCX was hacked recently. Here’s a clear summary:
21 views
Daily Writeups
⤷ Title: BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:28:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BigONE #blockchain #Crypto Theft #cryptocurrency #cyberattack #Exchange #hack #Lookonchain #security incident #SlowMist
Penetration Testing Tools
BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
Cryptocurrency exchange BigONE suffered a $27 million hot wallet hack. Funds are being laundered into BTC, ETH, SOL, and TRX, but BigONE assures users of full reimbursement.
11 views