Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: A Secret Store Is NOT A Substitute For Actually Protecting Your API Keys
════════════════════════
𐀪 Author: Andrew Zuo
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:58:44 GMT
════════════════════════
⌗ Tags: #api_key #secret_store #api_security #secret_management_tools #cybersecurity
Medium
A Secret Store Is NOT A Substitute For Actually Protecting Your API Keys
I was in Cloudflare the other day and I saw this:
21 views
Daily Writeups
⤷ Title: Beyond Passwords: Unmasking the True Face of Hacking
════════════════════════
𐀪 Author: Asjad Butt
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:53:38 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tech #vulnerability #cybersecurity #information_security
Medium
Beyond Passwords: Unmasking the True Face of Hacking
We’ve all seen the movies. The hooded figure hunched over a glowing screen, lines of code scrolling at lightning speed, culminating in the…
24 views
Daily Writeups
⤷ Title: X-Wing: PQC Key Encapsulation, But Better
════════════════════════
𐀪 Author: Prof Bill Buchanan OBE FRSE
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:30:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #cryptography #pqc
Medium
X-Wing: PQC Key Encapsulation, But Better
We are migrating away from ECDH towards a post-quantum method. This involves the usage of key encapsulation, and where we generate a secret…
31 views
Daily Writeups
⤷ Title: Grievance, Greed, Glory: The Triple Motive Behind the Western Sydney University Cyber Hack
════════════════════════
𐀪 Author: Dinesh Dino
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:22:19 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #australia #university #cybersecurity #cybercrime
Medium
Grievance, Greed, Glory: The Triple Motive Behind the Western Sydney University Cyber Hack
In a case that has shaken the Australian higher education sector and sparked debate across cybersecurity circles, a former engineering…
35 views
Daily Writeups
⤷ Title: How I Forged a Facebook JWT to Impersonate Any User on Wit.ai (No Secret Verification)
════════════════════════
𐀪 Author: Ramzy Bouyahya
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 22:50:27 GMT
════════════════════════
⌗ Tags: #facebook_bug_bounty #facebook #meta_bug_bounty #wit #bug_bounty_writeup
Medium
How I Forged a Facebook JWT to Impersonate Any User on Wit.ai (No Secret Verification)
During a routine test of Wit.ai’s Facebook login integration, I discovered a critical vulnerability where the backend fails to verify the…
41 views
Daily Writeups
⤷ Title: FrogPost: postMessage Security Testing Tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:07:02 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Chrome extension #cybersecurity #DOM_based XSS #FrogPost #Fuzzing #Iframes #postMessage #security testing #Vulnerability Analysis #web security
Penetration Testing Tools
FrogPost: postMessage Security Testing Tool
FrogPost is a powerful Chrome extension for security researchers, enabling live monitoring, analysis, and fuzzing of postMessage communications to find iframe vulnerabilities.
56 views
Daily Writeups
⤷ Title: Proofpoint Exposes TA829 & UNK_GreenSec’s Dual-Nature Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:52:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #Cybercriminal Overlap #Espionage #Morpheus ransomware #Proofpoint #RomCom #Russian APT #TA829 #threat intelligence #TransferLoader #UNK_GreenSec
Daily CyberSecurity
Proofpoint Exposes TA829 & UNK_GreenSec's Dual-Nature Campaigns
Proofpoint reveals two Russian threat clusters (TA829 & UNK_GreenSec) blending financial cybercrime with state-aligned espionage, using RomCom and TransferLoader malware.
26 views
Daily Writeups
⤷ Title: Critical RCE in MCP Inspector Exposes AI Devs to Web-Based Exploits (CVE-2025-49596)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0.0.0.0_day #AI Development #AI security #CVE_2025_49596 #cybersecurity #Machine Context Protocol #MCP #MCP Inspector #Oligo Security #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
Critical RCE in MCP Inspector Exposes AI Devs to Web-Based Exploits (CVE-2025-49596)
15 views
Daily Writeups
⤷ Title: From Code to Crypto Theft: DOJ Charges Four North Koreans for Infiltrating U.S. Companies and Laundering $900K in Virtual Currency
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:20:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DOJ #DPRK #fbi #money laundering #national security #North Korea #Remote IT Jobs #Sanctions Evasion #scam #Stolen Identities
Daily CyberSecurity
From Code to Crypto Theft: DOJ Charges Four North Koreans for Infiltrating U.S. Companies and Laundering $900K in Virtual Currency
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
9 views
Daily Writeups
⤷ Title: North Korea’s AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:13:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #artificial intelligence #Cybercrime #cybersecurity #deepfake #identity theft #Jasper Sleet #Microsoft Threat Intelligence #North Korea #Remote IT Workers #Sanctions Evasion #Storm_0287
Daily CyberSecurity
North Korea's AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs
Microsoft exposes North Korea’s Jasper Sleet (Storm-0287) using AI-enhanced deepfakes and fake personas to secure remote IT jobs at 300+ US firms, funding the DPRK regime and stealing data.
14 views
Daily Writeups
⤷ Title: DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:53:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DOJ #DPRK #fbi #money laundering #national security #North Korea #Remote IT Jobs #Sanctions Evasion #scam #Stolen Identities
Daily CyberSecurity
DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
25 views
Daily Writeups
⤷ Title: Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:44:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #APT_C_36 #AsyncRAT #Blind Eagle #Colombia #Cybercrime #Exposed C2 #Latin America #phishing #rat #Remcos #Remote Access Trojan #Trustwave #VBS Malware
Daily CyberSecurity
Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
Trustwave exposes Blind Eagle (APT-C-36) leveraging exposed infrastructure and VBS malware in phishing campaigns, targeting Colombian banks with blatant disregard for concealment.
17 views
Daily Writeups
⤷ Title: Google Patches Actively Exploited Chrome Zero-Day: CVE-2025-6554
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:34:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #chrome #CVE_2025_6554 #cybersecurity #Exploited in Wild #google chrome #JavaScript Engine #rce #Remote Code Execution #Type Confusion #V8 #Vulnerability #zero_day
Daily CyberSecurity
Google Patches Actively Exploited Chrome Zero-Day: CVE-2025-6554
Google has urgently patched a high-severity zero-day (CVE-2025-6554) in Chrome's V8 JavaScript engine. This type confusion flaw is actively exploited in the wild, risking RCE.
24 views
Daily Writeups
⤷ Title: gf: Tu Aliado Indispensable para el Reconocimiento y Detección de Vulnerabilidades en Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:01:29 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #ethical_hacking #cybersecurity #bug_bounty
Medium
gf: Tu Aliado Indispensable para el Reconocimiento y Detección de Vulnerabilidades en Bug Bounty
Descubre gf y sus patrones para filtrar datos sensibles, detectar vulnerabilidades y optimizar tu reconocimiento en pentesting y bug bounty.
19 views
Daily Writeups
⤷ Title: Flash USDT Explained – For Educational Purposes Only
════════════════════════
𐀪 Author: Picaga
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:10:07 GMT
════════════════════════
⌗ Tags: #cryptocurrency #defi #programming #cybersecurity #web3
Medium
Flash USDT Explained – For Educational Purposes Only
Flash USDT is a term used to describe fake USDT wallet reflections that don’t involve real blockchain transactions. These can be created…
13 views
Daily Writeups
⤷ Title: AI Slop will Fuel the Next Wave of Social Engineering Cybercrime Attacks
════════════════════════
𐀪 Author: Matthew.Rosenquist
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:07:30 GMT
════════════════════════
⌗ Tags: #genai #cybercrime #social_engineering #cybersecurity #artificial_intelligence
Medium
AI Slop will Fuel the Next Wave of Social Engineering Cybercrime Attacks
Simple Math:
13 views
Daily Writeups
⤷ Title: What if TikTok were a geopolitical tool?
════════════════════════
𐀪 Author: Alex M. S.
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:04:31 GMT
════════════════════════
⌗ Tags: #techpolitics #tik_tok #cybersecurity #geopolitics #technology
Medium
What if TikTok were a geopolitical tool?
TikTok, controlled by China, is a geopolitical tool shaping data, public opinion, and digital power on a global scale.
11 views
Daily Writeups
⤷ Title: What Is Flash USDT? Know Before You’re Tricked
════════════════════════
𐀪 Author: Picaga
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:04:30 GMT
════════════════════════
⌗ Tags: #cryptocurrency #blockchain #bitcoin #cybersecurity #web3
Medium
What Is Flash USDT? Know Before You’re Tricked
Flash USDT is a simulated version of USDT that appears in a wallet but does not exist on the blockchain. It’s often used in fraudulent…
16 views
Daily Writeups
⤷ Title: Flash USDT – Digital Illusions You Should Understand
════════════════════════
𐀪 Author: Hefixi
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:47:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #blockchain #cryptocurrency #bitcoin #software_development
Medium
Flash USDT – Digital Illusions You Should Understand
Not all USDT transfers are what they seem. Flash USDT can mimic legitimate wallet activity but doesn't leave a real trace on the…
10 views
Daily Writeups
⤷ Title: Flash USDT: What You See Isn’t Always What You Get
════════════════════════
𐀪 Author: Hefixi
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:42:43 GMT
════════════════════════
⌗ Tags: #bitcoin #programming #cryptocurrency #cybersecurity #ethereum
Medium
Flash USDT: What You See Isn’t Always What You Get
Flash USDT is a growing term in the crypto space, often referring to wallet balances that appear real but aren't backed by actual…
14 views
Daily Writeups
⤷ Title: FortiGate Virtual and Cloud-Native Next-Generation Firewalls
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:31:02 GMT
════════════════════════
⌗ Tags: #cloud_security #network_security #fortinet #fortigate #cybersecurity
Medium
FortiGate Virtual and Cloud-Native Next-Generation Firewalls
As businesses continue to accelerate digital transformation, the need for flexible and scalable cybersecurity solutions has never been more…
17 views