Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Critical Blink Router Flaws (CVSS 9.8) Allow Remote Root Code Execution via Unauthenticated Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:48:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BL_AC1900 #BL_WR9000 #Blink Router #Command Injection #CVE_2025_45984 #CVE_2025_45985 #CVE_2025_45986 #CVE_2025_45987 #CVE_2025_45988 #cybersecurity #HTTP request #rce #Remote Code Execution #root access #Vulnerability
Daily CyberSecurity
Critical Blink Router Flaws (CVSS 9.8) Allow Remote Root Code Execution via Unauthenticated Attacks
Five critical flaws (CVSS 9.8) in Blink routers allow unauthenticated remote root code execution via command injection in web server components.
11 views
Daily Writeups
⤷ Title: Predator Spyware Resurges: New Infrastructure, Evasion Tactics, and Mozambique Customer Uncovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:44:32 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #android #Cyber Threat #cybersecurity #Cytrox #Insikt Group #Intellexa #ios #Mozambique #Predator #sanctions #spyware #surveillance
Daily CyberSecurity
Predator Spyware Resurges: New Infrastructure, Evasion Tactics, and Mozambique Customer Uncovered
Insikt Group reveals Predator spyware's resurgence, with new infrastructure, obfuscation, and a previously unreported customer in Mozambique, despite sanctions.
13 views
Daily Writeups
⤷ Title: Anubis Ransomware: New RaaS Combines Encryption with Permanent Data Wiping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:40:53 +0000
════════════════════════
⌗ Tags: #Malware #Anubis #Cybercrime #cybersecurity #Data Wiper #Double Extortion #encryption #RaaS #ransomware #Ransomware_as_a_Service #Sphinx #Trend Micro
Daily CyberSecurity
Anubis Ransomware: New RaaS Combines Encryption with Permanent Data Wiping
Anubis, a new RaaS, combines ECIES encryption with a "wipe mode" that permanently destroys files. It's actively targeting healthcare, construction, and engineering sectors.
14 views
Daily Writeups
⤷ Title: CVE-2025-6029 & CVE-2025-6030: Replay Attacks Expose Vulnerabilities in KIA and Autoeastern Smart Keyless Entry Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:36:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automotive Security #AutoRFKiller #CVE_2025_6029 #CVE_2025_6030 #cybersecurity #KES #Keyless Entry System #Kia #Learning Code #Replay Attack #Rolling Code #Vehicle Security #Vulnerability
Daily CyberSecurity
CVE-2025-6029 & CVE-2025-6030: Replay Attacks Expose Vulnerabilities in KIA and Autoeastern Smart Keyless Entry Systems
Critical flaws (CVE-2025-6029, CVE-2025-6030) in KIA Ecuador key fobs allow remote vehicle unlocking and control via insecure learning code technology.
22 views
Daily Writeups
⤷ Title: Katz Stealer: New Stealthy MaaS Steals Everything, Hides in Images, and Hijacks Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:31:11 +0000
════════════════════════
⌗ Tags: #Malware #crypto wallets #cybersecurity #data exfiltration #Discord Hijack #info_stealer #Katz Stealer #MaaS #malware #Malware_as_a_Service #phishing #powershell #Process Hollowing #steganography #threat intelligence #UAC bypass
Daily CyberSecurity
Katz Stealer: New Stealthy MaaS Steals Everything, Hides in Images, and Hijacks Discord
Katz Stealer, a new stealthy MaaS, is actively stealing data from browsers, crypto wallets, and apps, using advanced evasion tactics like steganography and Discord hijacking.
12 views
Daily Writeups
⤷ Title: Privilege Escalation Flaw in IBM Backup Services Threatens IBM i Environments (CVE-2025-33108)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:25:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup #BRMS #CVE_2025_33108 #cybersecurity #IBM #IBM i #Media Services #privilege escalation #Recovery #Security Bulletin #Vulnerability
Daily CyberSecurity
Privilege Escalation Flaw in IBM Backup Services Threatens IBM i Environments (CVE-2025-33108)
A high-severity flaw (CVE-2025-33108) in IBM BRMS for i allows users with specific capabilities to gain elevated privileges. Update to PTF SJ05907 (7.5) or SJ05906 (7.4).
11 views
Daily Writeups
⤷ Title: New Malware Duo HijackLoader & DeerStealer Surge: Bypassing Defenses for Data Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:22:39 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #cybersecurity #Data Theft #DeerStealer #eSentire #HijackLoader #malware #phishing #ransomware #social engineering #Threat Response Unit #TRU
Daily CyberSecurity
New Malware Duo HijackLoader & DeerStealer Surge: Bypassing Defenses for Data Theft
HijackLoader and DeerStealer are surging, using ClickFix social engineering and sophisticated evasion to bypass defenses and exfiltrate sensitive data.
16 views
Daily Writeups
⤷ Title: Obscure VBScript “sostener.vbs” Unmasked: Fuels Multi-Stage RAT Delivery, Linked to Blind Eagle APT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:18:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT_C_36 #AsyncRAT #Blind Eagle #censys #cybersecurity #DCRat #LimeRAT #malware #Obfuscation #rat #Remcos #Remote Access Trojan #threat intelligence #VBScript
Daily CyberSecurity
Obscure VBScript "sostener.vbs" Unmasked: Fuels Multi-Stage RAT Delivery, Linked to Blind Eagle APT
Censys uncovers "sostener.vbs," an obfuscated VBScript launching a multi-stage RAT delivery pipeline, affecting dozens and potentially linked to Blind Eagle APT.
15 views
Daily Writeups
⤷ Title: SmartAttack: Turning Your Smartwatch into a Spy Tool for Air-Gapped Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:13:18 +0000
════════════════════════
⌗ Tags: #Data Leak #Air_Gapped #Ben_Gurion University #Covert Communication #cybersecurity #data exfiltration #Espionage #Security Research #SmartAttack #Smartwatch #Ultrasonic #Wearable Tech
Daily CyberSecurity
SmartAttack: Turning Your Smartwatch into a Spy Tool for Air-Gapped Networks
"SmartAttack" reveals a new threat: smartwatches can act as covert ultrasonic receivers, exfiltrating data from air-gapped systems via sound waves.
14 views
Daily Writeups
⤷ Title: VexTrio Exposed: Infoblox Uncovers Massive Malicious Adtech Ecosystem Powering Global Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:07:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #cybersecurity #dns #Help TDS #Infoblox #Los Pollos #Malicious AdTech #malware #TDS #traffic distribution system #VexTrio #wordpress
Daily CyberSecurity
VexTrio Exposed: Infoblox Uncovers Massive Malicious Adtech Ecosystem Powering Global Malware
Infoblox unmasks VexTrio, a sprawling malicious adtech ecosystem intertwined with DNS-based malware campaigns and global website compromises, fueled by commercial operators
19 views
Daily Writeups
⤷ Title: libxml2 Flaws Exposed: Memory Corruption, RCE, & DoS Threats Uncovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:02:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Denial of Service #dos #libxml2 #memory corruption #rce #Remote Code Execution #XML parsing
Daily CyberSecurity
libxml2 Flaws Exposed: Memory Corruption, RCE, & DoS Threats Uncovered
Four flaws in libxml2 (CVE-2025-6021, CVE-2025-49794, CVE-2025-49795, CVE-2025-49796) expose systems to memory corruption, RCE, and DoS attacks.
21 views
Daily Writeups
⤷ Title: Hands-On with Termux —  Storage Setup, File Downloads, and File System Exploration.
════════════════════════
𐀪 Author: Alex Grande
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 23:59:43 GMT
════════════════════════
⌗ Tags: #linux #hacking #termux #android #tutorial
Medium
Hands-On with Termux —  Storage Setup, File Downloads, and File System Exploration.
Alright, let’s dive straight into it — no unnecessary chatter. By the end of this, you’ll have set up Termux storage, downloaded a File…
17 views
Daily Writeups
⤷ Title: I’m Back: Why Your Two-Factor Authentication Isn’t Protecting You
════════════════════════
𐀪 Author: Ayas Ismail
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 23:27:13 GMT
════════════════════════
⌗ Tags: #security #digital_security #social_media #hacking #cybersecurity
Medium
I’m Back: Why Your Two-Factor Authentication Isn’t Protecting You
Despite the hype, your accounts may still be wide open to hackers.
16 views
Daily Writeups
⤷ Title: My HackerOne 30/26 CTFs Process
════════════════════════
𐀪 Author: Gabriel Pires
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 23:23:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #hacking #hacker #hackerone
Medium
My HackerOne 30/26 CTFs Process
This is a spoiler-proof walkthrough of my journey with HackerOne’s Hacker101 CTFs. You will read the detailed technical process behind…
16 views
Daily Writeups
⤷ Title: Corrigindo o erro “The cable cannot be connected to that port” na aplicação Cisco Packet Tracer.
════════════════════════
𐀪 Author: Lucas Novaes Antonio Filgueiras
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:48:05 GMT
════════════════════════
⌗ Tags: #cisco_packet_tracer #it_training #cisco #networking #cybersecurity
Medium
Corrigindo o erro “The cable cannot be connected to that port” na aplicação Cisco Packet Tracer.
Recentemente me interessei pela área de cibersegurança. Um dos principais tópicos que os profissionais da área mencionam quando são…
24 views
Daily Writeups
⤷ Title: Mastering Wireshark: A Visual Network Forensics Guide
════════════════════════
𐀪 Author: Kallabharath
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:27:18 GMT
════════════════════════
⌗ Tags: #wireshark #cybersecurity #linux #network_analysis #ethical_hacking
Medium
📊 Mastering Wireshark: A Visual Network Forensics Guide
Part 3 of 3 — Statistics & Deep Analysis
16 views
Daily Writeups
⤷ Title: CyberDefenders — Oski Lab Walkthrough
════════════════════════
𐀪 Author: Drew Arpino
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 23:02:41 GMT
════════════════════════
⌗ Tags: #virustotal #blue_team #cyberdefender #cybersecurity #cyber_threat_intelligence
Medium
CyberDefenders — Oski Lab Walkthrough
A Cyber Threat Intelligence Challenge Using VirusTotal, Tria.ge, Any.Run, & MITRE ATT&CK.
25 views
Daily Writeups
⤷ Title: Testing in Detection Engineering — Part 1
════════════════════════
𐀪 Author: Bill Mahony
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 22:55:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #detection_engineering
Medium
Testing in Detection Engineering — Part 1
If you’re not testing your detections, you should be!
21 views
Daily Writeups
⤷ Title: Die ultimative Roadmap zur digitalen Transformation: Warum 73% der KMU scheitern — und wie Sie…
════════════════════════
𐀪 Author: Philip Hansen
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 22:54:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #digitale_transformation #kritis #kmu
Medium
Die ultimative Roadmap zur digitalen Transformation: Warum 73% der KMU scheitern — und wie Sie erfolgreich werden (Exklusive Strategie…
Executive Summary: Kritische Erfolgserkenntnisse
28 views
Daily Writeups
⤷ Title: Die strategische Revolution der digitalen Wertschöpfungskette: So transformieren Marktführer ihre…
════════════════════════
𐀪 Author: Philip Hansen
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 22:53:10 GMT
════════════════════════
⌗ Tags: #digitale_transformation #wertschöpfungskette #cybersecurity #kmu #kritis
Medium
Die strategische Revolution der digitalen Wertschöpfungskette: So transformieren Marktführer ihre…
Die digitale Wertschöpfungskette revolutioniert fundamentale Geschäftsprinzipien und zwingt Entscheidungsträger zum strategischen Umdenken…
21 views
Daily Writeups
⤷ Title: Die 2025 Roadmap für digitale Geschäftsmodell-Innovation: Der ultimative Leitfaden für den…
════════════════════════
𐀪 Author: Philip Hansen
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 22:52:27 GMT
════════════════════════
⌗ Tags: #kritis #nis2 #cybersecurity #digitale_transformation #kmu
Medium
Die 2025 Roadmap für digitale Geschäftsmodell-Innovation: Der ultimative Leitfaden für den deutschen Mittelstand
Strategische Kernerkenntnisse auf einen Blick
34 views