Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: From Code to Crypto Theft: DOJ Charges Four North Koreans for Infiltrating U.S. Companies and Laundering $900K in Virtual Currency
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:20:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DOJ #DPRK #fbi #money laundering #national security #North Korea #Remote IT Jobs #Sanctions Evasion #scam #Stolen Identities
Daily CyberSecurity
From Code to Crypto Theft: DOJ Charges Four North Koreans for Infiltrating U.S. Companies and Laundering $900K in Virtual Currency
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
9 views
Daily Writeups
⤷ Title: North Korea’s AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:13:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #artificial intelligence #Cybercrime #cybersecurity #deepfake #identity theft #Jasper Sleet #Microsoft Threat Intelligence #North Korea #Remote IT Workers #Sanctions Evasion #Storm_0287
Daily CyberSecurity
North Korea's AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs
Microsoft exposes North Korea’s Jasper Sleet (Storm-0287) using AI-enhanced deepfakes and fake personas to secure remote IT jobs at 300+ US firms, funding the DPRK regime and stealing data.
14 views
Daily Writeups
⤷ Title: DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:53:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DOJ #DPRK #fbi #money laundering #national security #North Korea #Remote IT Jobs #Sanctions Evasion #scam #Stolen Identities
Daily CyberSecurity
DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
25 views
Daily Writeups
⤷ Title: Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:44:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #APT_C_36 #AsyncRAT #Blind Eagle #Colombia #Cybercrime #Exposed C2 #Latin America #phishing #rat #Remcos #Remote Access Trojan #Trustwave #VBS Malware
Daily CyberSecurity
Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
Trustwave exposes Blind Eagle (APT-C-36) leveraging exposed infrastructure and VBS malware in phishing campaigns, targeting Colombian banks with blatant disregard for concealment.
17 views
Daily Writeups
⤷ Title: Google Patches Actively Exploited Chrome Zero-Day: CVE-2025-6554
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:34:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #chrome #CVE_2025_6554 #cybersecurity #Exploited in Wild #google chrome #JavaScript Engine #rce #Remote Code Execution #Type Confusion #V8 #Vulnerability #zero_day
Daily CyberSecurity
Google Patches Actively Exploited Chrome Zero-Day: CVE-2025-6554
Google has urgently patched a high-severity zero-day (CVE-2025-6554) in Chrome's V8 JavaScript engine. This type confusion flaw is actively exploited in the wild, risking RCE.
24 views
Daily Writeups
⤷ Title: gf: Tu Aliado Indispensable para el Reconocimiento y Detección de Vulnerabilidades en Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:01:29 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #ethical_hacking #cybersecurity #bug_bounty
Medium
gf: Tu Aliado Indispensable para el Reconocimiento y Detección de Vulnerabilidades en Bug Bounty
Descubre gf y sus patrones para filtrar datos sensibles, detectar vulnerabilidades y optimizar tu reconocimiento en pentesting y bug bounty.
19 views
Daily Writeups
⤷ Title: Flash USDT Explained – For Educational Purposes Only
════════════════════════
𐀪 Author: Picaga
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:10:07 GMT
════════════════════════
⌗ Tags: #cryptocurrency #defi #programming #cybersecurity #web3
Medium
Flash USDT Explained – For Educational Purposes Only
Flash USDT is a term used to describe fake USDT wallet reflections that don’t involve real blockchain transactions. These can be created…
13 views
Daily Writeups
⤷ Title: AI Slop will Fuel the Next Wave of Social Engineering Cybercrime Attacks
════════════════════════
𐀪 Author: Matthew.Rosenquist
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:07:30 GMT
════════════════════════
⌗ Tags: #genai #cybercrime #social_engineering #cybersecurity #artificial_intelligence
Medium
AI Slop will Fuel the Next Wave of Social Engineering Cybercrime Attacks
Simple Math:
13 views
Daily Writeups
⤷ Title: What if TikTok were a geopolitical tool?
════════════════════════
𐀪 Author: Alex M. S.
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:04:31 GMT
════════════════════════
⌗ Tags: #techpolitics #tik_tok #cybersecurity #geopolitics #technology
Medium
What if TikTok were a geopolitical tool?
TikTok, controlled by China, is a geopolitical tool shaping data, public opinion, and digital power on a global scale.
11 views
Daily Writeups
⤷ Title: What Is Flash USDT? Know Before You’re Tricked
════════════════════════
𐀪 Author: Picaga
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:04:30 GMT
════════════════════════
⌗ Tags: #cryptocurrency #blockchain #bitcoin #cybersecurity #web3
Medium
What Is Flash USDT? Know Before You’re Tricked
Flash USDT is a simulated version of USDT that appears in a wallet but does not exist on the blockchain. It’s often used in fraudulent…
16 views
Daily Writeups
⤷ Title: Flash USDT – Digital Illusions You Should Understand
════════════════════════
𐀪 Author: Hefixi
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:47:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #blockchain #cryptocurrency #bitcoin #software_development
Medium
Flash USDT – Digital Illusions You Should Understand
Not all USDT transfers are what they seem. Flash USDT can mimic legitimate wallet activity but doesn't leave a real trace on the…
10 views
Daily Writeups
⤷ Title: Flash USDT: What You See Isn’t Always What You Get
════════════════════════
𐀪 Author: Hefixi
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:42:43 GMT
════════════════════════
⌗ Tags: #bitcoin #programming #cryptocurrency #cybersecurity #ethereum
Medium
Flash USDT: What You See Isn’t Always What You Get
Flash USDT is a growing term in the crypto space, often referring to wallet balances that appear real but aren't backed by actual…
14 views
Daily Writeups
⤷ Title: FortiGate Virtual and Cloud-Native Next-Generation Firewalls
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:31:02 GMT
════════════════════════
⌗ Tags: #cloud_security #network_security #fortinet #fortigate #cybersecurity
Medium
FortiGate Virtual and Cloud-Native Next-Generation Firewalls
As businesses continue to accelerate digital transformation, the need for flexible and scalable cybersecurity solutions has never been more…
17 views
Daily Writeups
⤷ Title: Security Auditing Terms Explained — Like You’re Playing Chess with Hackers
════════════════════════
𐀪 Author: Mujtaba Shaikeldin
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:17:57 GMT
════════════════════════
⌗ Tags: #security_auditing #cybersecurity #grc
Medium
Security Auditing Terms Explained — Like You’re Playing Chess with Hackers
When I first opened up the Essential Terminology module in my security auditing course (part of my prep for eJPT), I’ll be honest — it…
25 views
Daily Writeups
⤷ Title: VulnNet-Roasted (PT1-Recommended Room)
════════════════════════
𐀪 Author: MR-X.Security
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:15:56 GMT
════════════════════════
⌗ Tags: #ethical_hacking #active_directory #cybersecurity #tryhackme #security
Medium
VulnNet-Roasted (PT1-Recommended Room)
Enumeration :-
43 views
Daily Writeups
⤷ Title: Securing Go APIs: Authentication and Rate Limiting Patterns
════════════════════════
𐀪 Author: Hassanein Sharaf Al Dein
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 07:52:40 GMT
════════════════════════
⌗ Tags: #golang #api_security #web_development #backend #cybersecurity
Medium
Securing Go APIs: Authentication and Rate Limiting Patterns
Implement production-grade security in Go APIs with authentication and rate limiting patterns
35 views
Daily Writeups
⤷ Title: Critical Sudo Flaw (CVE-2025-32463, CVSS 9.3): Root Privilege Escalation & Host Bypass, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 02:51:46 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #CVE_2025_32462 #CVE_2025_32463 #local exploit #PoC #privilege escalation #root access #sudo #SysAdmin #Vulnerability
Daily CyberSecurity
Critical Sudo Flaw (CVE-2025-32463, CVSS 9.3): Root Privilege Escalation & Host Bypass, PoC Available
Two Sudo flaws (CVE-2025-32463 & CVE-2025-32462) allow local users full root via PoC. Critical privilege escalation vulnerabilities revealed by Stratascale CRU.
32 views
Daily Writeups
⤷ Title: ClickFix Unmasked: How North Korea’s Kimsuky Group Turned PowerShell into a Weapon of Psychological Deception
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 02:25:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #ClickFix #cyber_espionage #Genians Security Center #Kimsuky #malware #North Korea #phishing #powershell #social engineering #spear_phishing
Daily CyberSecurity
ClickFix Unmasked: How North Korea’s Kimsuky Group Turned PowerShell into a Weapon of Psychological Deception
North Korean APT Kimsuky is evolving its ClickFix tactics, using deceptive social engineering, fake job portals, and obfuscated PowerShell to compromise targets via spear-phishing campaigns.
18 views
Daily Writeups
⤷ Title: Urgent Citrix NetScaler Alert: Critical Memory Overflow Flaw (CVE-2025-6543, CVSS 9.2) Actively Exploited on 2,100+ Unpatched Appliances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 02:11:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC #Citrix #CVE_2025_6543 #cybersecurity #Denial of Service #dos #Exploited in Wild #Gateway #Memory Overflow #NetScaler #security patch #Vulnerability
Daily CyberSecurity
Urgent Citrix NetScaler Alert: Critical Memory Overflow Flaw (CVE-2025-6543, CVSS 9.2) Actively Exploited on 2,100+ Unpatched Appliances
A critical flaw (CVE-2025-6543, CVSS 9.2) in NetScaler ADC/Gateway is actively exploited for DoS. Over 2,100 unpatched appliances remain susceptible. Update immediately!
13 views
Daily Writeups
⤷ Title: Iranian Cyber Actors May Target U.S. Networks and Critical Infrastructure, Warn U.S. Agencies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 01:57:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #CISA #Critical Infrastructure #cyberattack #cybersecurity #DC3 #fbi #geopolitics #Hacktivism #ICS #Iran #NSA #OT #US #Warning
Daily CyberSecurity
Iranian Cyber Actors May Target U.S. Networks and Critical Infrastructure, Warn U.S. Agencies
CISA, FBI, NSA, and DC3 warn of potential cyberattacks from Iranian-affiliated actors on vulnerable U.S. infrastructure and networks, urging vigilance despite recent ceasefires.
15 views
Daily Writeups
⤷ Title: The HTTP Basics to Advanced: Beginner Friendly Guide to How the Web Works
════════════════════════
𐀪 Author: Shubham Sharma
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 02:51:15 GMT
════════════════════════
⌗ Tags: #web_development #software_development #https #networking #bug_bounty
Medium
The HTTP Basics to Advanced: Beginner Friendly Guide to How the Web Works
So if you’re getting into IT, Networking, Software Development or cybersecurity etc, the first thing you really need to learn is how the…
❤1
11 views