Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Critical Flaws in Acronis Cyber Protect Expose Sensitive Data: CVSS 10 Vulnerabilities Patched
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:46:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Acronis #critical security #CVEs #cyber protect #cybersecurity #Data Protection #Data Security #patching #security advisory #Vulnerabilities
Daily CyberSecurity
Critical Flaws in Acronis Cyber Protect Expose Sensitive Data: CVSS 10 Vulnerabilities Patched
Urgent Acronis Cyber Protect advisory: Critical flaws (CVSS 10.0) expose data. Patch immediately to prevent unauthorized access and data manipulation.
16 views
Daily Writeups
⤷ Title: Warning: “Sleeper Agent” Chrome Extensions Infect 1.5 Million Users!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:40:13 +0000
════════════════════════
⌗ Tags: #Malware #audio enhancers #botnet #browser security #Chrome extensions #cybersecurity #data exfiltration #ExtStatTracker #LayerX #malware #ReadBee #surveillance
Daily CyberSecurity
Warning: "Sleeper Agent" Chrome Extensions Infect 1.5 Million Users!
LayerX found "sleeper agent" Chrome extensions, installed on 1.5M devices, disguised as audio tools but capable of remote command execution and data theft.
21 views
Daily Writeups
⤷ Title: Critical CVSS 9.8 Flaw Hits Popular LlamaIndex Framework Used by Millions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:37:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #Couchbase #cybersecurity #Data Breach #LlamaIndex #LLM #sql injection #vector store #web application security
Daily CyberSecurity
Critical CVSS 9.8 Flaw Hits Popular LlamaIndex Framework Used by Millions
A critical (CVSS 9.8) SQL injection flaw found in popular LlamaIndex (v0.12.21) allows data manipulation, affecting LLM-powered applications.
20 views
Daily Writeups
⤷ Title: Booking.com Spoofed in ClickFix Malware Surge Targeting Hotels and Travel Sector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:31:55 +0000
════════════════════════
⌗ Tags: #Malware #Booking.com #captcha #ClickFix #ConnectWise RAT #DanaBot #hotel industry #information stealer #phishing #powershell #Pure Logs Stealer #rat #Remote Access Trojan #travel industry #XWorm
Daily CyberSecurity
Booking.com Spoofed in ClickFix Malware Surge Targeting Hotels and Travel Sector
A sophisticated "ClickFix" phishing campaign uses fake Booking.com CAPTCHAs to deliver RATs and info stealers to the hotel and travel industry.
17 views
Daily Writeups
⤷ Title: Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:26:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon #CVE_2025_5688 #cybersecurity #embedded systems #FreeRTOS #FreeRTOS_Plus_TCP #IoT security #out_of_bounds write #real_time operating system #Vulnerability
Daily CyberSecurity
Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch!
Amazon warns of a high-severity (CVSS 8.4) memory corruption flaw (CVE-2025-5688) in FreeRTOS-Plus-TCP. Patch immediately to prevent crashes and RCE in affected devices.
15 views
Daily Writeups
⤷ Title: ViperSoftX Resurfaces: Stealthy Crypto-Stealing Malware Hits Global Users!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:21:22 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #ClipBanker #cryptocurrency #Cybercrime #malware #powershell #PureCrypter #PureHVNC #Quasar RAT #security alert #TesseractStealer #ViperSoftX
Daily CyberSecurity
ViperSoftX Resurfaces: Stealthy Crypto-Stealing Malware Hits Global Users!
ViperSoftX, a stealthy malware, is actively spreading via fake software to steal cryptocurrency and enable remote control, affecting users globally.
20 views
Daily Writeups
⤷ Title: UNC6040 Threat Actor Exploits Salesforce via Vishing and Malicious Data Loader Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:17:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Theft #Cybercrime #data exfiltration #Data Loader #Google Threat Intelligence Group #GTIG #Microsoft 365 #Okta #Salesforce #social engineering #UNC6040 #Vishing
Daily CyberSecurity
UNC6040 Threat Actor Exploits Salesforce via Vishing and Malicious Data Loader Apps
UNC6040 is using sophisticated vishing to breach Salesforce, tricking employees into granting access, exfiltrating data, and then pivoting to other cloud platforms.
13 views
Daily Writeups
⤷ Title: High-Severity Flaw in MIM Medical Imaging Software Allows Code Execution!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:13:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2025_1701 #cybersecurity #healthcare security #medical imaging #MIM Admin service #MIM Software #patch #RMI #Vulnerability
Daily CyberSecurity
High-Severity Flaw in MIM Medical Imaging Software Allows Code Execution!
A high-severity vulnerability (CVE-2025-1701) in MIM Admin service allows local code execution with elevated privileges, impacting medical imaging environments.
16 views
Daily Writeups
⤷ Title: Clickfix Meets macOS: AMOS Variant Targets Spectrum Users in Credential Harvesting Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:08:38 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #CloudSEK #cybersecurity #macOS #malware #social engineering #Spectrum #stealer #Threat Alert #Typosquatting
Daily CyberSecurity
Clickfix Meets macOS: AMOS Variant Targets Spectrum Users in Credential Harvesting Campaign
A new AMOS macOS stealer variant is using typo-squatted Spectrum domains in a clever cross-platform social engineering campaign. Stay vigilant!
17 views
Daily Writeups
⤷ Title: Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:03:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #active directory #blue team #cybersecurity #dll #GPO #persistence #Red Team #Registry #SYSTEM access #Tenable
Daily CyberSecurity
Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory
A new, stealthy AD persistence technique abuses custom Group Policy Client-Side Extensions (CSEs) for SYSTEM-level access. Learn how to detect it!
15 views
Daily Writeups
⤷ Title: From NA to P3: Unlocking a Premium Feature
════════════════════════
𐀪 Author: Mustafa Hatab
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:58:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #infosec #bug_bounty
Medium
From NA to P3: Unlocking a Premium Feature
Hello folks!
20 views
Daily Writeups
⤷ Title: Roadmap to eJPTv2 Success
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:10:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #bug_bounty #ejpt #hacking
Medium
🛠 Roadmap to eJPTv2 Success
1️⃣ Understanding the Exam
15 views
Daily Writeups
⤷ Title: Google Dorking for Hackers: Secrets, Recon, and Digital Power
════════════════════════
𐀪 Author: YooZy
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:10:29 GMT
════════════════════════
⌗ Tags: #osint #infosec #cybersecurity #hacking #bug_bounty
19 views
Daily Writeups
⤷ Title: Living Off The Land: The Stealth Art of Red Team Operations
════════════════════════
𐀪 Author: zerOiQ
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:31:37 GMT
════════════════════════
⌗ Tags: #security #red_team #hacking #cybersecurity #technology
Medium
Living Off The Land: The Stealth Art of Red Team Operations
Master the advanced LOTL techniques that turn PowerShell, WMI, and built-in tools into silent cyber weapons
14 views
Daily Writeups
⤷ Title: Don’t Click That Link!
════════════════════════
𐀪 Author: Munish Mehta
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:35:19 GMT
════════════════════════
⌗ Tags: #online_safety #cybercrime #australia #cybersecurity #scams_to_avoid
Medium
Don’t Click That Link!
Navigating the Sneaky World of Online Scams
13 views
Daily Writeups
⤷ Title: Cyber Crime is Booming in Australia
════════════════════════
𐀪 Author: Munish Mehta
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:11:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #online_safety #australia #cybercrime #scams_to_avoid
Medium
Cyber Crime in Australia: Are You a Target?
Cyber crime is exploding across Australia, affecting everyday individuals — not just large companies or tech newbies. In this post, I…
16 views
Daily Writeups
⤷ Title: Credential Leak Intelligence | Elastic Leak Searcher
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:35:29 GMT
════════════════════════
⌗ Tags: #cyberthreat_intelligence #cyber_security_awareness #offensive_security #cybersecurity #intelligence
Medium
Credential Leak Intelligence | Elastic Leak Searcher
Learn how to build Elastic Search based, a Flask + Elasticsearch tool for querying massive credential leaks efficiently.
18 views
Daily Writeups
⤷ Title: Software Supply Chain Security by Palo Alto Networks: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:32:09 GMT
════════════════════════
⌗ Tags: #network_security #cybersecurity #supply_chain_management #cloud_security #palo_alto_networks
Medium
Software Supply Chain Security by Palo Alto Networks: A Comprehensive Guide
In an era where cyberattacks have become increasingly sophisticated, software supply chain security has emerged as a critical area of…
23 views
Daily Writeups
⤷ Title: Off the Grid: How Ghost Phones Keep Spies Ahead — and What You Can Learn to Protect Your Privacy
════════════════════════
𐀪 Author: Robert Morton
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:23:50 GMT
════════════════════════
⌗ Tags: #espionage #cia #privacy_protection #surveillance #cybersecurity
Medium
Off the Grid: How Ghost Phones Keep Spies Ahead — and What You Can Learn to Protect Your Privacy
They don’t ring. They don’t buzz. They don’t show up on any bill. No name, no contract, no paper trail. The CIA calls them “ghost phones.”…
31 views
Daily Writeups
⤷ Title: New Zero-Click iPhone Exploit “NICKNAME” Targeted High-Profile Individuals Across the US and EU
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 02:42:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #APT group #cybersecurity #iMessage #iOS security #mobile security #NICKNAME vulnerability #state_sponsored attacks #surveillance #zero_click exploit
Daily CyberSecurity
New Zero-Click iPhone Exploit “NICKNAME” Targeted High-Profile Individuals Across the US and EU
iVerify uncovered "NICKNAME," a zero-click iMessage vulnerability linked to state-sponsored surveillance on high-value targets in the US & EU, now patched.
29 views
Daily Writeups
⤷ Title: Apple Intelligence Faces China Hurdle Amid Trade Tensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 02:22:33 +0000
════════════════════════
⌗ Tags: #Technology #AI services #Alibaba #Apple Intelligence #China market #geopolitical uncertainty #iPhone sales #regulatory review #US_China trade war
Daily CyberSecurity
Apple Intelligence Faces China Hurdle Amid Trade Tensions
Apple Intelligence faces delays in China due to regulatory hurdles and escalating US-China trade tensions, impacting its rollout and iPhone sales.
17 views