Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.52K subscribers

2 photos

129K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.52K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Thu, 30 Mar 2023 17:28:00 GMT
———————————————
✏️Title: Let’s Talk About Privileged Access Management (PAM)
———————————————
📎Link: https://medium.com/p/6ca57f17b3ec
———————————————
Tags: #infosec #iam_security #privileged_access_mgmt #pam_solution

Let’s Talk About Privileged Access Management (PAM)

Privileged Access Management (PAM)

4 views18:00

⤷ Title: Locked Out of the Cloud: Hackers Use AWS Termination Protection to Hijack ECS for Unstoppable Crypto Mining
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:42:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon ECS #Amazon GuardDuty #AWS #AWS Lambda #Cloud Security #Cryptojacking #EC2 #IAM Security #persistence #Termination Protection

Daily CyberSecurity

Locked Out of the Cloud: Hackers Use AWS Termination Protection to Hijack ECS for Unstoppable Crypto Mining

Hackers are weaponizing AWS termination protection to lock defenders out while they mine crypto on hijacked ECS/EC2 resources using a malicious Docker image.

15 views04:04

⤷ Title: Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:41:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Syncope #CVE_2026_23794 #CVE_2026_23795 #IAM Security #Identity Management #Open Source Security #Patch Alert #Session Hijacking #XSS #xxe

Daily CyberSecurity

Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws

Apache patches XSS (CVE-2026-23794) & XXE flaws in Syncope. Vulnerability allows session hijacking via login page. Update to v3.0.16 or v4.0.4 now.

18 views04:04

⤷ Title: Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:43:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #attack path visualization #AWS EKS #cloud_native security #DevSecOps #eks_security_scanner #Go #IAM security #Kubernetes security #RBAC audit #Tech News 2026 #Threat Modeling

Penetration Testing Tools

Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner

Stop guessing your EKS security posture. Use eks-security-scanner to build threat graphs, detect privileged pods, and audit RBAC/IAM access paths instantly.

30 views04:03

⤷ Title: 1-Click to Compromise: Critical 9.3 CVSS Flaw in ZITADEL Exposes Accounts to Full Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:11:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Cross_Site Scripting #CVE_2026_29191 #IAM Security #Identity and Access Management #infosec #Patch Alert #Vulnerability #XSS #ZITADEL

Daily CyberSecurity

1-Click to Compromise: Critical 9.3 CVSS Flaw in ZITADEL Exposes Accounts to Full Takeover

A critical 9.3 CVSS XSS vulnerability (CVE-2026-29191) in ZITADEL's SAML endpoint allows unauthenticated 1-click account takeover. Upgrade immediately.

13 views01:04

⤷ Title: Keycloak Under Siege: Patch Now to Stop Token Theft and Account Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:30:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #CVE_2026_3429 #CVE_2026_4636 #cybersecurity #IAM Security #infosec #Keycloak #MFA Bypass #Open Source Security #Token Theft #UMA #Vert.x

Daily CyberSecurity

Keycloak Under Siege: Patch Now to Stop Token Theft and Account Takeovers

Keycloak 26.5.7 fixes critical flaws including MFA bypass (CVE-2026-3429) and UMA token theft. Protect your IAM infrastructure—upgrade to the latest version.

22 views15:04

⤷ Title: Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:01:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #Casdoor #CERT/CC #CVE_2026_44213 #Cyber Security #IAM Security #infosec #MCP #Model Context Protocol #Path Traversal #Vulnerability Alert

Daily CyberSecurity

Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites

Urgent: Casdoor IAM platform hit by critical file write flaw (CVE-2026-44213). Attackers can bypass sandboxes to overwrite databases and gain host access.

19 views03:04