Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Chinese Cyberespionage Groups Probe SentinelOne in Sophisticated ShadowPad and PurpleHaze Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:45:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT15 #China_nexus #cyber_espionage #cybersecurity #PurpleHaze #SentinelLABS #SentinelOne #ShadowPad #supply chain attack #UNC5174
Daily CyberSecurity
Chinese Cyberespionage Groups Probe SentinelOne in Sophisticated ShadowPad and PurpleHaze Campaigns
SentinelLABS exposes China-nexus APTs (ShadowPad, PurpleHaze) targeting SentinelOne and over 70 organizations in extensive cyber-espionage.
18 views
Daily Writeups
⤷ Title: Librarian Ghouls APT: The Threat Actor Turning Legitimate Tools into a Cybercrime Toolkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:44:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #CIS #Cryptojacking #cyber_espionage #cyberattack #kaspersky #Librarian Ghouls #phishing #russia #XMRig
Daily CyberSecurity
Librarian Ghouls APT: The Threat Actor Turning Legitimate Tools into a Cybercrime Toolkit
Librarian Ghouls APT launches a new cyber-espionage and cryptojacking campaign targeting Russia and CIS, using legitimate tools for stealth.
25 views
Daily Writeups
⤷ Title: CVE-2025-48757: Lovable’s Row-Level Security Breakdown Exposes Sensitive Data Across Hundreds of Projects
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:38:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_48757 #cybersecurity #Data Breach #Linkable #Lovable #low_code #RLS #Row_Level Security #Supabase #Vulnerability #Web Security
Daily CyberSecurity
CVE-2025-48757: Lovable’s Row-Level Security Breakdown Exposes Sensitive Data Across Hundreds of Projects
A critical RLS vulnerability (CVSS 9.3) in the Lovable low-code platform exposes sensitive user data and allows unauthorized modification.
28 views
Daily Writeups
⤷ Title: Kimsuky’s AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:32:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #AppleSeed #APT #cyberattack #Cyberespionage #cybersecurity #facebook #Genians #Kimsuky #malware #North Korea #social engineering #Telegram
Daily CyberSecurity
Kimsuky's AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media
Kimsuky's AppleSeed campaign targets Korean Facebook, email, and Telegram users with evolved social engineering and stealthy malware.
31 views
Daily Writeups
⤷ Title: Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:27:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #China Mobile Tietong #China_aligned threat actors #Cyberespionage #cybersecurity #DLL Sideloading #Earth Lamia #UNC5174 #VELETRIX #VShell
Daily CyberSecurity
Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack
Seqrite Labs uncovers Operation DRAGONCLONE, a sophisticated APT campaign targeting China Mobile Tietong with VELETRIX and VShell malware.
18 views
Daily Writeups
⤷ Title: CVE-2025-41646: Critical Authentication Bypass in RevPi Webstatus Threatens Industrial Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:21:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_41646 #cybersecurity #ICS #industrial automation #industrial control systems #KUNBUS #RevPi Webstatus #Vulnerability
Daily CyberSecurity
CVE-2025-41646: Critical Authentication Bypass in RevPi Webstatus Threatens Industrial Systems
A critical authentication bypass (CVE-2025-41646) affects KUNBUS RevPi Webstatus. Exploiting implicit type conversion allows attackers full access.
22 views
Daily Writeups
⤷ Title: APT41 Unleashes Stealthy Malware Using Google Calendar for Covert C2!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:19:30 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT41 #C2 #Command and Control #Cyberespionage #cybersecurity #Google Calendar #malware #Resecurity #spear_phishing #Taiwan
Daily CyberSecurity
APT41 Unleashes Stealthy Malware Using Google Calendar for Covert C2!
APT41 is leveraging Google Calendar as a covert C2 channel in a new multi-stage malware campaign targeting a Taiwanese government website.
24 views
Daily Writeups
⤷ Title: Behind the Followers: Malicious Python Package Harvests Instagram Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:12:30 +0000
════════════════════════
⌗ Tags: #Malware #Credential Harvesting #cybersecurity #Data Theft #imad213 #Instagram #malware #phishing #scam #social engineering #tech security
Daily CyberSecurity
Behind the Followers: Malicious Python Package Harvests Instagram Credentials
Beware 'imad213,' a fake Instagram booster stealing credentials via social engineering and bot services. Learn how to protect your account.
29 views
Daily Writeups
⤷ Title: BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:08:10 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #BladedFeline #Cyber Threat #Cyberespionage #cybersecurity #ESET #Iran #Iraq #KRG #malware #OilRig #Uzbekistan
Daily CyberSecurity
BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache
ESET uncovers BladedFeline, an Iran-aligned APT group, targeting KRG, Iraq, and Uzbekistan in a sophisticated cyberespionage campaign.
32 views
Daily Writeups
⤷ Title: SoraAI.lnk: Beware of This New Info-Stealer Hiding as OpenAI’s Sora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:02:42 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Threat #cybersecurity #Data Breach #info_stealer #malware #OpenAI #phishing #SoraAI #tech security
Daily CyberSecurity
SoraAI.lnk: Beware of This New Info-Stealer Hiding as OpenAI's Sora
A new info-stealer, SoraAI.lnk, is leveraging OpenAI's Sora popularity to infect users. Learn how this sophisticated malware works and how to protect your data.
21 views
Daily Writeups
⤷ Title: Malware Unmasked
════════════════════════
𐀪 Author: Ed-it Editions
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:49:46 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
Malware Unmasked
Understanding, Preventing, and Removing Malicious Software
24 views
Daily Writeups
⤷ Title: From Command to Collaboration: A Leadership Evolution in Cybersecurity
════════════════════════
𐀪 Author: Yaroslav
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:21:57 GMT
════════════════════════
⌗ Tags: #leadership #cybersecurity
Medium
From Command to Collaboration: A Leadership Evolution in Cybersecurity
When we think of cybersecurity, we often picture high-stakes incidents, red alerts, and critical infrastructure under attack. But beneath…
19 views
Daily Writeups
⤷ Title: How Threat-Savvy Companies Can Defend Against Data Breaches
════════════════════════
𐀪 Author: Financial Poise
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:21:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #business_management #current_events
Medium
How Threat-Savvy Companies Can Defend Against Data Breaches
15 views
Daily Writeups
⤷ Title: We’ve all heard the same privacy advice over and over again:
════════════════════════
𐀪 Author: Lydiah Muigwa
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:05:37 GMT
════════════════════════
⌗ Tags: #digital_privacy #privacy #cybersecurity
Medium
1. The Myth of the “Average User” Is Hurting Privacy
“Use strong passwords.” “Check your app permissions.” “Update your settings.”
16 views
Daily Writeups
⤷ Title: AI Security Posture Management by Palo Alto Networks: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 23:32:11 GMT
════════════════════════
⌗ Tags: #palo_alto_networks #cloud_security #network_security #cybersecurity #ai
Medium
AI Security Posture Management by Palo Alto Networks: A Comprehensive Guide
As organizations increasingly adopt AI and machine learning to enhance operations, a new layer of risk is emerging — security…
17 views
Daily Writeups
⤷ Title: The Secret Code of the Future: ECC, Web3 Cryptography, and Why Hackers Want to Crack It
════════════════════════
𐀪 Author: Galihabraa
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 23:22:24 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
The Secret Code of the Future: ECC, Web3 Cryptography, and Why Hackers Want to Crack It
Imagine you have a magical lock that only you can open, but it’s so clever that even the smartest thief can’t figure out how. That’s kind…
24 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Secret Recipe
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 23:39:59 GMT
════════════════════════
⌗ Tags: #secret_recipe #tryhackme_writeup #tryhackme #tryhackme_walkthrough #soc
Medium
TryHackMe Walkthrough — Secret Recipe
Perform Registry Forensics to Investigate a case.
25 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Disgruntled
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 20:29:24 GMT
════════════════════════
⌗ Tags: #soc #tryhackme #tryhackme_walkthrough #disgruntled #tryhackme_writeup
Medium
Disgruntled
Use your Linux forensics knowledge to investigate an incident.
27 views
Daily Writeups
⤷ Title: CVSS 9.9: Critical XXE Flaw in GeoTools Exposes Geospatial Data Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:34:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Data Breach #geospatial #GeoTools #java #Remote Code Execution #XML External Entity #xxe
Daily CyberSecurity
CVSS 9.9: Critical XXE Flaw in GeoTools Exposes Geospatial Data Systems
A critical XXE vulnerability (CVSS 9.9) in GeoTools llows data disclosure and RCE. Update immediately to patched versions!
19 views
Daily Writeups
⤷ Title: CVE-2025-4601: Flaw Exposes 33,000+ RealHomes WordPress Sites to Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:10:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Administrator #CVE_2025_4601 #cybersecurity #privilege escalation #RealHomes #ThemeForest #Vulnerability #Website Security #Wordfence #wordpress
Daily CyberSecurity
CVE-2025-4601: Flaw Exposes 33,000+ RealHomes WordPress Sites to Admin Takeover
A critical privilege escalation flaw (CVE-2025-4601) in RealHomes WordPress theme allows low-privilege users to become admins. Update now!
18 views
Daily Writeups
⤷ Title: CISA Flags Active Exploits in Erlang/OTP SSH and Roundcube Webmail: Critical RCE and XSS Flaws Under Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:01:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CVE_2024_42009 #CVE_2025_32433 #cybersecurity #Erlang/OTP #Exploit #KEV Catalog #rce #Roundcube #spear_phishing #Vulnerability #XSS
Daily CyberSecurity
CISA Flags Active Exploits in Erlang/OTP SSH and Roundcube Webmail: Critical RCE and XSS Flaws Under Attack
CISA adds two critical vulnerabilities to KEV: Erlang/OTP (RCE) and Roundcube (XSS). Actively exploited, these flaws pose severe risks to systems and email accounts.
20 views