Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2025-41646: Critical Authentication Bypass in RevPi Webstatus Threatens Industrial Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:21:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_41646 #cybersecurity #ICS #industrial automation #industrial control systems #KUNBUS #RevPi Webstatus #Vulnerability
Daily CyberSecurity
CVE-2025-41646: Critical Authentication Bypass in RevPi Webstatus Threatens Industrial Systems
A critical authentication bypass (CVE-2025-41646) affects KUNBUS RevPi Webstatus. Exploiting implicit type conversion allows attackers full access.
22 views
Daily Writeups
⤷ Title: APT41 Unleashes Stealthy Malware Using Google Calendar for Covert C2!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:19:30 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT41 #C2 #Command and Control #Cyberespionage #cybersecurity #Google Calendar #malware #Resecurity #spear_phishing #Taiwan
Daily CyberSecurity
APT41 Unleashes Stealthy Malware Using Google Calendar for Covert C2!
APT41 is leveraging Google Calendar as a covert C2 channel in a new multi-stage malware campaign targeting a Taiwanese government website.
24 views
Daily Writeups
⤷ Title: Behind the Followers: Malicious Python Package Harvests Instagram Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:12:30 +0000
════════════════════════
⌗ Tags: #Malware #Credential Harvesting #cybersecurity #Data Theft #imad213 #Instagram #malware #phishing #scam #social engineering #tech security
Daily CyberSecurity
Behind the Followers: Malicious Python Package Harvests Instagram Credentials
Beware 'imad213,' a fake Instagram booster stealing credentials via social engineering and bot services. Learn how to protect your account.
29 views
Daily Writeups
⤷ Title: BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:08:10 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #BladedFeline #Cyber Threat #Cyberespionage #cybersecurity #ESET #Iran #Iraq #KRG #malware #OilRig #Uzbekistan
Daily CyberSecurity
BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache
ESET uncovers BladedFeline, an Iran-aligned APT group, targeting KRG, Iraq, and Uzbekistan in a sophisticated cyberespionage campaign.
32 views
Daily Writeups
⤷ Title: SoraAI.lnk: Beware of This New Info-Stealer Hiding as OpenAI’s Sora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:02:42 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Threat #cybersecurity #Data Breach #info_stealer #malware #OpenAI #phishing #SoraAI #tech security
Daily CyberSecurity
SoraAI.lnk: Beware of This New Info-Stealer Hiding as OpenAI's Sora
A new info-stealer, SoraAI.lnk, is leveraging OpenAI's Sora popularity to infect users. Learn how this sophisticated malware works and how to protect your data.
21 views
Daily Writeups
⤷ Title: Malware Unmasked
════════════════════════
𐀪 Author: Ed-it Editions
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:49:46 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
Malware Unmasked
Understanding, Preventing, and Removing Malicious Software
24 views
Daily Writeups
⤷ Title: From Command to Collaboration: A Leadership Evolution in Cybersecurity
════════════════════════
𐀪 Author: Yaroslav
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:21:57 GMT
════════════════════════
⌗ Tags: #leadership #cybersecurity
Medium
From Command to Collaboration: A Leadership Evolution in Cybersecurity
When we think of cybersecurity, we often picture high-stakes incidents, red alerts, and critical infrastructure under attack. But beneath…
19 views
Daily Writeups
⤷ Title: How Threat-Savvy Companies Can Defend Against Data Breaches
════════════════════════
𐀪 Author: Financial Poise
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:21:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #business_management #current_events
Medium
How Threat-Savvy Companies Can Defend Against Data Breaches
15 views
Daily Writeups
⤷ Title: We’ve all heard the same privacy advice over and over again:
════════════════════════
𐀪 Author: Lydiah Muigwa
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:05:37 GMT
════════════════════════
⌗ Tags: #digital_privacy #privacy #cybersecurity
Medium
1. The Myth of the “Average User” Is Hurting Privacy
“Use strong passwords.” “Check your app permissions.” “Update your settings.”
16 views
Daily Writeups
⤷ Title: AI Security Posture Management by Palo Alto Networks: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 23:32:11 GMT
════════════════════════
⌗ Tags: #palo_alto_networks #cloud_security #network_security #cybersecurity #ai
Medium
AI Security Posture Management by Palo Alto Networks: A Comprehensive Guide
As organizations increasingly adopt AI and machine learning to enhance operations, a new layer of risk is emerging — security…
17 views
Daily Writeups
⤷ Title: The Secret Code of the Future: ECC, Web3 Cryptography, and Why Hackers Want to Crack It
════════════════════════
𐀪 Author: Galihabraa
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 23:22:24 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
The Secret Code of the Future: ECC, Web3 Cryptography, and Why Hackers Want to Crack It
Imagine you have a magical lock that only you can open, but it’s so clever that even the smartest thief can’t figure out how. That’s kind…
24 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Secret Recipe
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 23:39:59 GMT
════════════════════════
⌗ Tags: #secret_recipe #tryhackme_writeup #tryhackme #tryhackme_walkthrough #soc
Medium
TryHackMe Walkthrough — Secret Recipe
Perform Registry Forensics to Investigate a case.
25 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Disgruntled
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 20:29:24 GMT
════════════════════════
⌗ Tags: #soc #tryhackme #tryhackme_walkthrough #disgruntled #tryhackme_writeup
Medium
Disgruntled
Use your Linux forensics knowledge to investigate an incident.
27 views
Daily Writeups
⤷ Title: CVSS 9.9: Critical XXE Flaw in GeoTools Exposes Geospatial Data Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:34:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Data Breach #geospatial #GeoTools #java #Remote Code Execution #XML External Entity #xxe
Daily CyberSecurity
CVSS 9.9: Critical XXE Flaw in GeoTools Exposes Geospatial Data Systems
A critical XXE vulnerability (CVSS 9.9) in GeoTools llows data disclosure and RCE. Update immediately to patched versions!
19 views
Daily Writeups
⤷ Title: CVE-2025-4601: Flaw Exposes 33,000+ RealHomes WordPress Sites to Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:10:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Administrator #CVE_2025_4601 #cybersecurity #privilege escalation #RealHomes #ThemeForest #Vulnerability #Website Security #Wordfence #wordpress
Daily CyberSecurity
CVE-2025-4601: Flaw Exposes 33,000+ RealHomes WordPress Sites to Admin Takeover
A critical privilege escalation flaw (CVE-2025-4601) in RealHomes WordPress theme allows low-privilege users to become admins. Update now!
18 views
Daily Writeups
⤷ Title: CISA Flags Active Exploits in Erlang/OTP SSH and Roundcube Webmail: Critical RCE and XSS Flaws Under Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:01:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CVE_2024_42009 #CVE_2025_32433 #cybersecurity #Erlang/OTP #Exploit #KEV Catalog #rce #Roundcube #spear_phishing #Vulnerability #XSS
Daily CyberSecurity
CISA Flags Active Exploits in Erlang/OTP SSH and Roundcube Webmail: Critical RCE and XSS Flaws Under Attack
CISA adds two critical vulnerabilities to KEV: Erlang/OTP (RCE) and Roundcube (XSS). Actively exploited, these flaws pose severe risks to systems and email accounts.
20 views
Daily Writeups
⤷ Title: Crypto Agility: Why it Matters in a Post-Quantum World
════════════════════════
𐀪 Author: Syeda Chowdhury
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:26:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #risk_management #encryption #software_architecture #post_quantum_cryptography
Medium
Crypto Agility: Why it Matters in a Post-Quantum World
What is Crpyto Agility?
30 views
Daily Writeups
⤷ Title: Mengenal ECC dan Kriptografi Web3 — Kekuatan, Ancaman, dan Realita
════════════════════════
𐀪 Author: Honeylemondrink
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:25:45 GMT
════════════════════════
⌗ Tags: #web3 #ecc #cybersecurity
Medium
Mengenal ECC dan Kriptografi Web3 — Kekuatan, Ancaman, dan Realita
Di zaman sekarang, hampir semua hal dilakukan lewat internet — mulai dari kirim pesan, belanja, sampai simpan uang digital. Tapi, pernah…
23 views
Daily Writeups
⤷ Title: CyberGym: Evaluating AI Agents’ Cybersecurity Capabilities with Real-World Vulnerabilities at Scale
════════════════════════
𐀪 Author: YouShin kim
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 02:21:30 GMT
════════════════════════
⌗ Tags: #cybergems #zero_day #ai_agents_review #llm_security #cybersecurity
Medium
CyberGym: Evaluating AI Agents’ Cybersecurity Capabilities with Real-World Vulnerabilities at Scale
배경 및 개요
15 views
Daily Writeups
⤷ Title: Credit Card Scams in 2025: The Dark Web’s Open Secret
════════════════════════
𐀪 Author: Internet Exposed
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 01:54:31 GMT
════════════════════════
⌗ Tags: #scam #fraud #darkweb #carding #cybersecurity
Medium
Credit Card Scams in 2025: The Dark Web’s Open Secret
In 2025, one of the simplest ways to commit theft isn’t through brute force or clever hacking — it’s through buying stolen credit card…
16 views
Daily Writeups
⤷ Title: Threat Intelligence 101: Bukan Sekadar Data, Tapi Peta Perang Melawan Serangan Siber
════════════════════════
𐀪 Author: Dzulfiqar Ali Rasyid
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 01:52:16 GMT
════════════════════════
⌗ Tags: #threat_intelligence #cybersecurity
Medium
Threat Intelligence 101: Bukan Sekadar Data, Tapi Peta Perang Melawan Serangan Siber
Halo semuanya!
13 views