Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:07:16 +0000
════════════════════════
⌗ Tags: #Malware #Cloud Security #Credential Theft #Microsoft Defender #npm registry #supply chain attack #Typosquatting #vpmdhaj cluster
Daily CyberSecurity
Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
A critical npm supply chain attack exploits lookalike packages to distribute credential harvesting malware. Learn how to protect your cloud assets.
8 views
Daily Writeups
⤷ Title: The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 04:35:11 +0000
════════════════════════
⌗ Tags: #Malware #credential harvesting malware #GitHub Actions OIDC bypass #Mini Shai_Hulud worm #Red Hat NPM attack #supply chain compromise #trusted publishing vulnerability
Daily CyberSecurity
The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach
Recently, several prominent cybersecurity corporations simultaneously intercepted a series of malicious software repositories. Specifically, an adversary uploaded these corrupted packages directly…
25 views
Daily Writeups
⤷ Title: The Dashlane Lockout: Security Countermeasures and User Disruption
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:41:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #credential stuffing defense #cybersecurity threat intelligence #Dashlane brute force attack #encrypted vault exfiltration #master password security #password manager suspension
Information Security News
Dashlane Brute Force Attack: Account Suspension Guide
Discover the recent Dashlane brute force attack. Learn why user accounts were locked out, how archives were stolen, and best defensive strategies.
23 views
Daily Writeups
⤷ Title: The Protocol Peril: Unpatched Windows Search Handlers Leak Enterprise Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 03:01:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #credential hijack #crumb location parameter #Huntress NTLM theft #SMB blocking #unpatched Explorer flaw #Windows search leak
Information Security News
Windows Search Protocol Leak: Unpatched NTLM Flaw
Discover the unpatched Windows search protocol leak. Learn how Huntress found a way to steal NTLMv2 hashes using the native search scheme.
16 views
Daily Writeups
⤷ Title: Account Takeover Detection's Residential Proxy Blind Spot
════════════════════════
𐀪 Author: ABDULLAH AFZAL
════════════════════════
ⴵ Time: Tue, 09 Jun 2026 11:36:34 GMT
════════════════════════
⌗ Tags: #api_security #fraud_detection #credential_stuffing #account_takeover #cybersecurity
Medium
Account Takeover Detection's Residential Proxy Blind Spot
Why Does Account Takeover Detection Miss Residential Proxies? The IPs behind modern credential stuffing look exactly like your customers. Here is the one signal that tells them apart. Account …
7 views
Daily Writeups
⤷ Title: Credential Stuffing Saldırısı: Kalabalığın İçinde Kaybolan Tehdit
════════════════════════
𐀪 Author: İbrahim Yiğit Çetin
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 15:48:09 GMT
════════════════════════
⌗ Tags: #passkey #ethical_hacking #credential_stuffing #cybersecurity #mfa
Medium
Credential Stuffing Saldırısı: Kalabalığın İçinde Kaybolan Tehdit
Siber saldırıların büyük çoğunluğu karmaşık açıklarla ya da zincirleme exploit tekniklerle gerçekleşmiyor. Asıl hasar çoğu zaman çok daha…
23 views
Daily Writeups
⤷ Title: Three Tornado Security Vulnerabilities Patched in Version 6.5.6
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:31:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Credential Leak #CVE_2026_49853 #CVE_2026_49854 #CVE_2026_49855 #gzip bomb #Python #SimpleAsyncHTTPClient #tornado
Daily CyberSecurity
Three Tornado Security Vulnerabilities Patched in Version 6.5.6
Three Tornado security vulnerabilities (CVE-2026-49853, CVE-2026-49855, CVE-2026-49854) risk credential leaks and DoS. Update to Tornado 6.5.6 now.
16 views
Daily Writeups
⤷ Title: FortiBleed Campaign Exploits Tens of Thousands of Fortinet Firewalls
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:31:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #credential stuffing #data breach #Firewall Security #FortiBleed #Fortinet
Information Security News
FortiBleed Campaign Exploits Thousands of Fortinet Firewalls
The massive FortiBleed campaign has compromised tens of thousands of Fortinet firewalls worldwide, exposing global enterprises to credential theft.
16 views
Daily Writeups
⤷ Title: GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 09:22:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #Financial Sector #GitBait #GitHub Pages #Mexican banks #phishing #SheetBest #Telegram bot
Daily CyberSecurity
GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
The GitBait phishing campaign abuses GitHub Pages and the SheetBest API to steal banking credentials from at least 12 Mexican financial institutions.
24 views
Daily Writeups
⤷ Title: FortiBleed Turns Hacked FortiGate Firewalls Into Credential Collectors
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 04:06:14 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Theft #FortiBleed #FortiGate #FortigateSniffer #Fortinet #Initial Access Broker
Information Security News
FortiBleed Turns Hacked FortiGate Firewalls Into Credential Collectors
FortiBleed began as mass password guessing. Then it grew into an attack chain, where hijacked firewalls gathered fresh credentials for the next breach. A new timeline shows that the published Fort…
7 views