Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 18:42:00 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: How AI-Enabled Workflow Automation Can Help SOCs Reduce Burnout
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 16:55:00 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 16:16:00 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: ⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 15:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
24 views
Daily Writeups
⤷ Title: Scattered Spider Behind Cyberattacks on M&S and Co-op, Causing Up to $592M in Damages
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 21 Jun 2025 15:14:00 +0530
════════════════════════
⌗ Tags: No_Tags
20 views
Daily Writeups
⤷ Title: Qilin Ransomware Attack on NHS Causes Patient Death in the UK
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 12:00:26 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Cyber Attacks #Cyber Attack #Cybersecurity #London #NHS #Qilin #Ransomware #Russia #Vulnerability
Hackread
Qilin Ransomware Attack on NHS Causes Patient Death in the UK
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
18 views
Daily Writeups
⤷ Title: Malicious AI Models Are Behind a New Wave of Cybercrime, Cisco Talos
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 08:31:51 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Cyber Crime #AI #ChatGPT #Cisco Talos #Cyber Attack #Cybersecurity #Hugging Face #LLM #Vulnerability
Hackread
Malicious AI Models Are Behind a New Wave of Cybercrime, Cisco Talos
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
17 views
Daily Writeups
⤷ Title: New Stealthy Remcos Malware Campaigns Target Businesses and Schools
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 16:07:48 +0000
════════════════════════
⌗ Tags: #Security #Malware #Cyber Attack #Cybersecurity #Forcepoint #Phishing #Remcos
Hackread
New Stealthy Remcos Malware Campaigns Target Businesses and Schools
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
18 views
Daily Writeups
⤷ Title: Researchers Warn Free VPNs Could Leak US Data to China
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 10:31:59 +0000
════════════════════════
⌗ Tags: #Security #Privacy #App Store #Apple #China #Cybersecurity #Google #Play Store #TikTok #VPN
Hackread
Researchers Warn Free VPNs Could Leak US Data to China
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 23:36:40 +0000
════════════════════════
⌗ Tags: #Cyber Crime #BreachForums #Cybersecurity #data breach #FBI #France #IntelBroker #ShinyHunters
Hackread
How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
21 views
Daily Writeups
⤷ Title: Flowable Named in the latest Gartner® Market Guide for BPA Tools
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 14:41:48 +0000
════════════════════════
⌗ Tags: #Press Release #Technology #Flowable #Gartner
Hackread
Flowable Named in the latest Gartner® Market Guide for BPA Tools
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
18 views
Daily Writeups
⤷ Title: BreachForums: ShinyHunters Members Arrested, IntelBroker Identified as Kai West
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 09:28:52 +0000
════════════════════════
⌗ Tags: #Cyber Crime #BreachForums #Cybersecurity #data breach #France #IntelBroker #Kai West #ShinyHunters #United Kingdom
Hackread
BreachForums: ShinyHunters Members Arrested, IntelBroker Identified as Kai West
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
16 views
Daily Writeups
⤷ Title: Protecting Business Data From Unauthorized Encryption Threats
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 07:51:39 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #Encryption
Hackread
Protecting Business Data From Unauthorized Encryption Threats
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: New WordPress Malware Hides on Checkout Pages and Imitates Cloudflare
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 07:15:15 +0000
════════════════════════
⌗ Tags: #Security #Malware #Cyber Attack #Cybersecurity #Plugin #Scam #security #Wordfence #Wordpress
Hackread
New WordPress Malware Hides on Checkout Pages and Imitates Cloudflare
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
19 views
Daily Writeups
⤷ Title: SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 24 Jun 2025 19:57:22 +0000
════════════════════════
⌗ Tags: #Security #Android #Malware #App Store #China #Crypto #Cybersecurity #iOS #Play Store #SparkKitty #Spyware
Hackread
SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
14 views
Daily Writeups
⤷ Title: ZigStrike: New Zig-Based Shellcode Loader Revolutionizes EDR Evasion with Advanced Injection Techniques
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:14:58 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Anti_Sandbox #cybersecurity #EDR Bypass #malware #Offensive Security #Payload Delivery #Process injection #shellcode loader #Zig Language #ZigStrike
Penetration Testing Tools
ZigStrike: New Zig-Based Shellcode Loader Revolutionizes EDR Evasion with Advanced Injection Techniques
ZigStrike, a new shellcode loader in Zig, offers advanced injection techniques and anti-sandbox features to bypass EDR, providing stealthy execution via local/remote thread and memory mapping.
13 views
Daily Writeups
⤷ Title: Loki: Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:59:01 +0000
════════════════════════
⌗ Tags: #Open Source Tool #C2 #Loki #Node.js #Node.js C2
Penetration Testing Tools
Loki: Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
Loki is a stage-1 command and control (C2) framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015.
17 views
Daily Writeups
⤷ Title: CISA Warns: Critical AMI MegaRAC Firmware Flaw (CVE-2024-54085, CVSS 10.0) Actively Exploited for Server Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:48:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #AMI MegaRAC #authentication bypass #Baseboard Management Controller #BMC #CISA #CVE_2024_54085 #cybersecurity #Exploited in Wild #firmware #RCE #remote code execution #vulnerability
Penetration Testing Tools
CISA Warns: Critical AMI MegaRAC Firmware Flaw (CVE-2024-54085, CVSS 10.0) Actively Exploited for Server Takeover
CISA adds critical AMI MegaRAC firmware flaw (CVE-2024-54085, CVSS 10.0) to KEV, confirming active exploitation. Attackers can bypass authentication to gain full server control.
14 views
Daily Writeups
⤷ Title: Windows 11 Retires Blue Screen of Death: New Black Crash Screen Focuses on Faster Diagnostics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:45:33 +0000
════════════════════════
⌗ Tags: #Windows #Black Screen of Death #blue screen of death #BSOD #IT Administration #Microsoft #operating system #System Error #Tech News #UI Redesign #Windows 11
Penetration Testing Tools
Windows 11 Retires Blue Screen of Death: New Black Crash Screen Focuses on Faster Diagnostics
Microsoft is replacing Windows' iconic Blue Screen of Death with a new black-and-white interface this summer, removing the QR code and emoticon for faster IT diagnosis.
17 views
Daily Writeups
⤷ Title: North Korean APT Launches Massive npm Supply Chain Attack: Typosquatting & Fake Jobs Steal Crypto from Devs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:42:52 +0000
════════════════════════
⌗ Tags: #Malware #APT #BeaverTail #Crypto Theft #cybersecurity #developers #HexEval #Infostealer #InvisibleFerret #malware #North Korea #npm #Social Engineering #supply chain attack #Typosquatting
Penetration Testing Tools
North Korean APT Launches Massive npm Supply Chain Attack: Typosquatting & Fake Jobs Steal Crypto from Devs
North Korean APTs are using 35 typosquatted npm packages and fake job offers to spread HexEval, BeaverTail, and InvisibleFerret malware, stealing crypto and data from developers.
17 views
Daily Writeups
⤷ Title: EvilConwi Unmasked: Hackers Weaponize Signed ConnectWise ScreenConnect Installers for Malware Deployment
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:39:14 +0000
════════════════════════
⌗ Tags: #Malware #Authenticode Stuffing #ConnectWise ScreenConnect #cybersecurity #Digital Signature #EvilConwi #G DATA #malware #phishing #Remote Access #Social Engineering
Penetration Testing Tools
EvilConwi Unmasked: Hackers Weaponize Signed ConnectWise ScreenConnect Installers for Malware Deployment
Hackers are weaponizing legitimately signed ConnectWise ScreenConnect installers by using Authenticode stuffing to deploy malware and fake updates, leveraging social engineering.
21 views