Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: The Spy in Your Sidebar: Fake AI Browser Extensions Steal Data from 900,000 Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:11:44 +0000
════════════════════════
⌗ Tags: #Malware #Browser Extensions #Chrome Web Store #Chromium Security #cyber_espionage #cybersecurity #data exfiltration #infosec #Malicious AI Extensions #Microsoft Defender #threat intelligence
Daily CyberSecurity
The Spy in Your Sidebar: Fake AI Browser Extensions Steal Data from 900,000 Users
Microsoft Defender uncovers a massive campaign of malicious Chromium extensions impersonating AI tools to steal data from 900,000 users. Audit browsers now.
11 views
Daily Writeups
⤷ Title: Microsoft Exposes How Hackers Use Generative Models as a Force Multiplier
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 00:26:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Memory Poisoning #Cyber Security #Generative AI #infosec #Malicious AI #Microsoft Threat Intelligence #North Korean APT #Prompt injection #social engineering #threat intelligence
Daily CyberSecurity
Microsoft Exposes How Hackers Use Generative Models as a Force Multiplier
Microsoft Threat Intelligence reveals how cybercriminals and North Korean APTs are weaponizing generative AI to scale attacks and poison AI assistants.
18 views
Daily Writeups
⤷ Title: The 1,700-Package Blitz: North Korea’s “Contagious Interview” Infiltrates Every Major Dev Registry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:12:15 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #cybersecurity #go #infosec #Malicious packages #malware loader #North Korea #npm #php #PyPI #Rust #Socket #supply chain attack
Daily CyberSecurity
The 1,700-Package Blitz: North Korea’s "Contagious Interview" Infiltrates Every Major Dev Registry
North Korea’s "Contagious Interview" campaign expands to 1,700+ malicious packages across npm, PyPI, and more. Learn how to protect your dev environment.
16 views
Daily Writeups
⤷ Title: Navigation Traps: Google’s New June 2026 Penalty Targets Back Button Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:25:56 +0000
════════════════════════
⌗ Tags: #Google #ad tech #Back Button Hijacking #Google Search #Google Spam Policy #June 2026 Update #Malicious Practices #Search Console #SEO Compliance #User Experience #Web Browser Navigation
Penetration Testing Tools
Navigation Traps: Google’s New June 2026 Penalty Targets Back Button Hijacking
Google is intensifying its campaign against predatory web practices by instituting stringent prohibitions on one of the internet’s
15 views
Daily Writeups
⤷ Title: TikTok’s Secret Tracker: The “Featured” Extensions Harvesting Your Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:15:42 +0000
════════════════════════
⌗ Tags: #Data Leak #Browser Extensions #chrome #cybersecurity #Data Privacy #Fingerprinting #infosec #LayerX #Malicious Extensions #malware #microsoft edge #TikTok #TikTok Downloader
Daily CyberSecurity
TikTok’s Secret Tracker: The "Featured" Extensions Harvesting Your Data
LayerX unmasks 12 TikTok downloader extensions tracking 130,000+ users. Even "Featured" tools can be traps. Learn how this resilient malware ecosystem works.
10 views
Daily Writeups
⤷ Title: Checkmarx Falls Victim to Credential Harvesting Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:54:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #breach #Checkmarx #cybersecurity #data exfiltration #GitHub Security #infosec #LAPSUS$ #Malicious code #Software Integrity #supply chain attack #Trivy
Daily CyberSecurity
Checkmarx Falls Victim to Credential Harvesting Attack
Checkmarx discloses a major GitHub breach via a Trivy supply chain flaw. Attackers injected malicious code and exfiltrated data for a month. Get the facts.
28 views
Daily Writeups
⤷ Title: Single Actor Bypassed Open VSX Security with “Disposable” Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 01:01:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 #Cyber Attribution #infosec #Malicious Extensions #malware #Open VSX #String_Fragment Reconstruction #supply chain attack #VS Code Extensions #Yeeth Security
Daily CyberSecurity
Single Actor Bypassed Open VSX Security with "Disposable" Tools
Yeeth Security uncovers a sophisticated Open VSX campaign using string-fragment reconstruction to hide malware. 16 malicious extensions identified.
20 views
Daily Writeups
⤷ Title: The Ghost in the API: Attackers Hijack 700+ Ghost CMS Sites Using AI-Discovered SQL Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 03:58:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin API key exfiltration #Anthropic Claude vulnerability discovery #ClickFix fake CAPTCHA attacks Ghost CMS #Ghost CMS CVE_2026_26980 exploitation #Ghost Content API blind SQLi #malicious JavaScript loader #QiAnXin XLab threat intelligence #web.telegram.ug C2 malware #website poisoning campaign #Windows Run dialog exploit
Information Security News
The Ghost in the API: Attackers Hijack 700+ Ghost CMS Sites Using AI-Discovered SQL Flaw - Information Security News
Hackers are actively exploiting a critical Ghost CMS SQL flaw (CVE-2026-26980) to hijack 700+ websites and serve fake Cloudflare ClickFix malware overlays.
14 views
Daily Writeups
⤷ Title: Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:22:23 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ClickFix #CVE_2026_26980 #cybersecurity news #FakeCaptcha #Ghost CMS #malicious JavaScript #sql injection #XLab
Daily CyberSecurity
Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
XLab uncovers a massive Ghost CMS poisoning campaign utilizing CVE-2026-26980 to launch FakeCaptcha attacks. Learn how to secure your site.
11 views
Daily Writeups
⤷ Title: Architectural Vulnerabilities in Notepad++: Arbitrary Code Execution Risks Unmasked
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
Information Security News
Notepad++ Config.xml Code Execution Flaw Patched: Update Now
Notepad++ patches a critical config.xml code execution flaw (CVE-2026-48778) alongside two other security bugs. Upgrade to version 8.9.6.1 immediately.
8 views