Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:35:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Runner #CVE_2025_65715 #CVE_2025_65717 #data exfiltration #Live Server #Markdown Preview Enhanced #OX Security #rce #Remote Code Execution #Tech News 2026 #Visual Studio Code security #VS Code
Daily CyberSecurity
The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
Critical flaws in Live Server, Code Runner, and more expose 128M+ developers to file theft and remote code execution. Is your VS Code workspace secure?
22 views
Daily Writeups
⤷ Title: The Interview Trap: Malicious Next.js Repositories Weaponize Coding Tests to Hack Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 00:01:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #developer security #infosec #malware #Microsoft Defender #Next.js #npm Security #social engineering #supply chain attack #Technical Interview Scam #VS Code Security
Daily CyberSecurity
The Interview Trap: Malicious Next.js Repositories Weaponize Coding Tests to Hack Developers
Microsoft warns of a new campaign targeting engineers via fake Next.js technical assessments. Malware hides in VS Code tasks and npm scripts to steal secrets.
24 views
Daily Writeups
⤷ Title: The Trojan Prompt: How an Autonomous AI Hijacked Aqua Trivy to Weaponize Developer Copilots
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 00:06:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Prompt Injection #Aqua Trivy #Claude #cybersecurity #DevSecOps #Gemini #GitHub Copilot #infosec #social engineering #Socket #supply chain attack #VS Code
Daily CyberSecurity
The Trojan Prompt: How an Autonomous AI Hijacked Aqua Trivy to Weaponize Developer Copilots
Socket reveals how an AI bot hijacked the Aqua Trivy VS Code extension, using prompt injection to turn developer AI assistants into stealthy data thieves.
15 views
Daily Writeups
⤷ Title: GlassWorm Abuses VS Code Extensions to Fuel Supply Chain Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 09:11:20 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #GlassWorm #malware #Open VSX #Remote Code Execution #Socket Research #Solana Blockchain #supply chain attack #threat intelligence #VS Code Extensions
Daily CyberSecurity
GlassWorm Abuses VS Code Extensions to Fuel Supply Chain Attacks
Socket Research exposes how GlassWorm malware abuses Open VSX dependencies for transitive delivery of an RCE backdoor using Solana blockchain dead drops.
14 views
Daily Writeups
⤷ Title: GitHub Abruptly Terminates All Copilot Pro Trials Amid Massive Abuse
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 08:59:43 +0000
════════════════════════
⌗ Tags: #Technology #AI Coding #Copilot Pro #cybersecurity #Developer Tools #github #GitHub Free Tier #GPT_5 #OpenAI #Software News #Trial Suspension #VS Code
Daily CyberSecurity
GitHub Abruptly Terminates All Copilot Pro Trials Amid Massive Abuse
GitHub has suspended all Copilot Pro trials as of April 13, 2026. Learn how bad-faith exploitation forced a service-wide shutdown and what it means for you.
29 views
Daily Writeups
⤷ Title: The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Malware #DPRK #Git History #github #infosec #Lazarus Group #malware #North Korea #PolinRider #supply chain attack #TasksJacker #VS Code Extensions
Daily CyberSecurity
The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
Security researchers from the OpenSourceMalware (OSM) team have uncovered a massive and rapidly expanding threat campaign targeting the heart of the developer ecosystem. The actor, dubbed PolinRid…
16 views
Daily Writeups
⤷ Title: TeamPCP Hijacks Checkmarx in Sprawling Supply Chain Strike
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:19:36 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Theft #cybersecurity #docker #GitHub Actions #infosec #Malware Analysis #npm #supply chain attack #TeamPCP #VS Code
Daily CyberSecurity
TeamPCP Hijacks Checkmarx in Sprawling Supply Chain Strike
Checkmarx Docker images and VS Code extensions hijacked by TeamPCP to siphon cloud secrets and spread via npm. Audit your "Dune" repositories today.
27 views
Daily Writeups
⤷ Title: Void Dokkaebi Unmasked: The “Worm-Like” Supply Chain Threat Targeting Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 06:24:51 +0000
════════════════════════
⌗ Tags: #Malware #Blockchain Staging #CI/CD security #Famous Chollima #GitHub Security #infosec #North Korea APT #Open Source Security #supply chain attack #TrendMicro #Void Dokkaebi #VS Code Malware
Daily CyberSecurity
Void Dokkaebi Unmasked: The “Worm-Like” Supply Chain Threat Targeting Developers
A new report from researchers at TrendMicro has exposed the evolution of Void Dokkaebi (also known as Famous Chollima), a North Korea-aligned intrusion set that has transitioned from traditional s…
33 views
Daily Writeups
⤷ Title: Tropic Trooper Weaponizes GitHub and VS Code for East Asian Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 06:25:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AdaptixC2 #cybersecurity #Earth Centaur #Espionage #Github C2 #infosec #SumatraPDF #threat intelligence #TOSHIS Loader #Tropic Trooper #VS Code Tunnels #Zscaler
Daily CyberSecurity
Tropic Trooper Weaponizes GitHub and VS Code for East Asian Espionage
Tropic Trooper's 2026 campaign uses trojanized SumatraPDF and VS Code tunnels for stealthy East Asian espionage. Learn how to defend your infrastructure.
31 views
Daily Writeups
⤷ Title: Inside “HexagonalRodent”: The AI-Powered DPRK Syndicate Hauling Millions in Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 01:00:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Cybercrime #BeaverTail #Crypto Malware #DPRK #Expel Research #Fake Job Scam #HexagonalRodent #InvisibleFerret #OtterCookie #VS Code Vulnerability #Web3 security
Daily CyberSecurity
Inside "HexagonalRodent": The AI-Powered DPRK Syndicate Hauling Millions in Crypto
North Korean group HexagonalRodent stole millions in Q1 2026 using AI-generated lures and backdoored VS Code tasks. Protect your Web3 wallet now.
32 views