Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The Diamond Model: Why Your Threat Analysis is Stuck in the Stone Age
════════════════════════
𐀪 Author: Manish Rawat
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:33:02 GMT
════════════════════════
⌗ Tags: #cybercrime #cybersecurity #threat_intelligence #infosec #cyber
Medium
The Diamond Model: Why Your Threat Analysis is Stuck in the Stone Age
And how to evolve from reactive hunting to predictive intelligence
15 views
Daily Writeups
⤷ Title: A Shortsighted Model for Cybersecurity
════════════════════════
𐀪 Author: Matthew.Rosenquist
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:01:37 GMT
════════════════════════
⌗ Tags: #cyber #cybersecurity #infosec #information_security #technology
Medium
A Shortsighted Model for Cybersecurity
I have an issue with this! No disrespect to the original poster creator, who is the sheer levels of complexity and advocating the need for…
19 views
Daily Writeups
⤷ Title: HTTP: Métodos e Status Codes
════════════════════════
𐀪 Author: Filipe Campos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:36:06 GMT
════════════════════════
⌗ Tags: #python #http_request #cybersecurity #network #português
Medium
HTTP: Métodos e Status Codes
Como os servidores e os clientes se comunicam (de uma maneira mais aprofundada) e o que significam os códigos de status como respostas?
15 views
Daily Writeups
⤷ Title: Reinforcement Learning 20 — Securing Reinforcement Learning Systems: Best Practices in Python
════════════════════════
𐀪 Author: Ayşe Kübra Kuyucu
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:26:02 GMT
════════════════════════
⌗ Tags: #machine_learning #best_practices #python_security #cybersecurity #reinforcement_learning
Medium
Reinforcement Learning 20 — Securing Reinforcement Learning Systems: Best Practices in Python
Reinforcement Learning with Python — Part 20/20
18 views
Daily Writeups
⤷ Title: FortiAI Generative AI Security: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:02:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #fortinet #fortiai #ai #artificial_intelligence
Medium
FortiAI Generative AI Security: A Comprehensive Guide
As the cyber threat landscape evolves at unprecedented speed, security teams are facing greater pressure to identify and respond to attacks…
16 views
Daily Writeups
⤷ Title: Mobile Forensics part2 | The Crime Lab — CyberDefenders
════════════════════════
𐀪 Author: Anas404
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:02:10 GMT
════════════════════════
⌗ Tags: #cyberdefender #android_forensics #cybersecurity #forensics #digital_forensics
Medium
Mobile Forensics part2 | The Crime Lab — CyberDefenders
1. Introduction
16 views
Daily Writeups
⤷ Title: Uruguay’s Cybersecurity Landscape 2024–2025: A Report on National Threat Trends, Strategic Posture…
════════════════════════
𐀪 Author: ADanielHill
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:55:40 GMT
════════════════════════
⌗ Tags: #uruguay #cybersecurity #cert #agesic #media
Medium
Uruguay’s Cybersecurity Landscape 2024–2025: A Report on National Threat Trends, Strategic Posture, and Governmental Response
Uruguay presents a complex cybersecurity landscape, showcasing a paradoxical situation where its high regional standing in cybersecurity…
19 views
Daily Writeups
⤷ Title: From Reactive to Predictive: Building Tomorrow’s Security Operations Center
════════════════════════
𐀪 Author: Eric Zietlow
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:51:22 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #proactive_defense #cybersecurity
Medium
From Reactive to Predictive: Building Tomorrow’s Security Operations Center
Yesterdays solutions are not good enough to battle tomorrows threats.
20 views
Daily Writeups
⤷ Title: I built a Home Server with a 10-year-old Laptop. Here’s what I learned.
════════════════════════
𐀪 Author: Kevin Andrey Romero Oviedo
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:41:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_computing #linux #computer_science #servers
Medium
I built a Home Server with a 10-year-old Laptop. Here’s what I learned.
Picture this: you’re casually scrolling through your phone when suddenly… storage full. That dreaded notification that strikes at the worst…
27 views
Daily Writeups
⤷ Title: AI/ML Security Threats: TryHackMe Answers
════════════════════════
𐀪 Author: Ansul Kotadia
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:57:53 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ai_ml_security_threats #cybersecurity #tryhackme #tryhackme_writeup
Medium
AI/ML Security Threats: TryHackMe Answers
Learn AI basics, key terms, and how it’s used by both attackers and defenders.
31 views
Daily Writeups
⤷ Title: AI Coding Assistants Under Attack: “Slopsquatting” Malware Exploits AI Hallucinations for Supply Chain Compromise
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:58:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #AI Coding Assistants #Artificial intelligence #cybersecurity #Large Language Model #LLM #npm #PyPI #Slopsquatting #Software Development #supply chain attack #Typosquatting
Penetration Testing Tools
AI Coding Assistants Under Attack: "Slopsquatting" Malware Exploits AI Hallucinations for Supply Chain Compromise
"Slopsquatting" is a new AI supply chain attack where cybercriminals register hallucinated package names from AI coding assistants (like ChatGPT, Claude) to inject malware.
30 views
Daily Writeups
⤷ Title: Shellter Tool Abused by Hackers: Developers Slam Elastic for “Negligent” Disclosure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:55:57 +0000
════════════════════════
⌗ Tags: #Malware #cybercrime #cybersecurity #Elastic Security Labs #Evasion Framework #Infostealer #malware #Red Team Tool #Responsible Disclosure #Shellter
Penetration Testing Tools
Shellter Tool Abused by Hackers: Developers Slam Elastic for "Negligent" Disclosure
Shellter developers confirm their AV/EDR evasion tool is being used by malicious actors, criticizing Elastic for "negligent" disclosure that risked further misuse.
24 views
Daily Writeups
⤷ Title: Brazil Bank Heist: Insider Bribery Leads to $140M Theft from 6 Banks Via C&M Fintech Firm
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:54:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bank Hack #Brazil #Bribery #C&M #Central Bank #cryptocurrency #cybercrime #Financial Fraud #Insider Threat #Money Laundering #ZachXBT
Penetration Testing Tools
Brazil Bank Heist: Insider Bribery Leads to $140M Theft from 6 Banks Via C&M Fintech Firm
Hackers stole nearly $140M from 6 Brazilian banks by bribing a C&M employee for access. Funds were laundered into crypto, but an arrest has been made.
16 views
Daily Writeups
⤷ Title: SEO Poisoning Campaign Targets IT Pros: Fake PuTTY & WinSCP Sites Deliver “Oyster” Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:46:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arctic Wolf #Backdoor #Broomstick #CleanUpLoader #cybersecurity #Fake Installers #IT Professionals #malware #Oyster #PuTTY #SEO Poisoning #WinSCP
Penetration Testing Tools
SEO Poisoning Campaign Targets IT Pros: Fake PuTTY & WinSCP Sites Deliver "Oyster" Backdoor
Arctic Wolf uncovers an SEO poisoning campaign using fake PuTTY and WinSCP sites to deliver the "Oyster" backdoor via trojanized installers, targeting IT professionals.
12 views
Daily Writeups
⤷ Title: Urgent Citrix Bleed 2 (CVE-2025-5777, CVSS 9.3) Actively Exploited: MFA Bypass & Session Hijacking Threaten Enterprises
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:41:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #ADC #Citrix #Citrix Bleed 2 #CVE_2025_5777 #cybersecurity #Gateway #MFA Bypass #NetScaler #Out_of_Bounds Read #ReliaQuest #Session Hijacking #vulnerability
Penetration Testing Tools
Urgent Citrix Bleed 2 (CVE-2025-5777, CVSS 9.3) Actively Exploited: MFA Bypass & Session Hijacking Threaten Enterprises
Citrix Bleed 2 (CVE-2025-5777, CVSS 9.3) is actively exploited to hijack sessions and bypass MFA on NetScaler ADC/Gateway. Patch immediately to prevent covert access and data theft.
17 views
Daily Writeups
⤷ Title: Linux Boot Flaw (CVE-2016-4484): Secure Boot & Disk Encryption Bypassed, Persistent Malware Possible
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:39:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Debug Shell #Fedora #Full Disk Encryption #Initramfs #Linux #malware #privilege escalation #Root Access #Secure Boot #ubuntu #vulnerability
Penetration Testing Tools
Linux Boot Flaw (CVE-2016-4484): Secure Boot & Disk Encryption Bypassed, Persistent Malware Possible
A critical flaw in Linux boot (CVE-2016-4484) bypasses Secure Boot and disk encryption via a debug shell in initramfs, allowing local attackers to implant persistent malware. Patch now!
17 views
Daily Writeups
⤷ Title: Windows Activation Tool TSforge Suspended: Microsoft’s Coding Error Breaks ZeroCID
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:11:33 +0000
════════════════════════
⌗ Tags: #Technology #Activation #Bypass #MAS #Microsoft #Software Protection Platform #SPP #StaticCID #Tech News #TSforge #windows #Windows 10 #Windows 11 #ZeroCID
Daily CyberSecurity
Windows Activation Tool TSforge Suspended: Microsoft's Coding Error Breaks ZeroCID
The MAS team suspended TSforge ZeroCID Windows activation, blaming a Microsoft coding error. While the bug persists, TSforge shifted to StaticCID, and other activation tools remain.
16 views
Daily Writeups
⤷ Title: Android Gets New “System Services” Page: Google Boosts Transparency for Background Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:06:34 +0000
════════════════════════
⌗ Tags: #Android #android #Android 6.0 #Background Apps #google #Google Play Services #Management #Mobile OS #privacy #System Services #transparency
Daily CyberSecurity
Android Gets New "System Services" Page: Google Boosts Transparency for Background Apps
Android 6.0+ is getting a new "System Services" settings page, centralizing visibility and management of Google's essential background apps for enhanced transparency.
12 views
Daily Writeups
⤷ Title: Android Privacy Alert: Google Gemini AI Now Accesses WhatsApp, Texts & Calls by Default
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:02:24 +0000
════════════════════════
⌗ Tags: #Android #Data Leak #AI #android #artificial intelligence #cybersecurity #Data Access #Data Privacy #Google Apps #Google Gemini #Phone #privacy #SMS #WhatsApp
Daily CyberSecurity
Android Privacy Alert: Google Gemini AI Now Accesses WhatsApp, Texts & Calls by Default
Google Gemini AI now accesses your Android phone, messages, and WhatsApp by default, overriding privacy settings. Users must manually disable this intrusive cross-app integration.
14 views
Daily Writeups
⤷ Title: Intel’s Arrow Lake Refresh to Bring Copilot+ AI Powers & Faster Performance to Desktops This Year
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:56:14 +0000
════════════════════════
⌗ Tags: #Technology #AI #Arrow Lake Refresh #artificial intelligence #Copilot+ PC #CPU #Desktop Processors #intel #Neural Processing Unit #NPU #Tech News #Windows 11
Daily CyberSecurity
Intel's Arrow Lake Refresh to Bring Copilot+ AI Powers & Faster Performance to Desktops This Year
Intel's Arrow Lake Refresh desktop CPUs, expected H2 2025, will feature enhanced NPUs to meet Copilot+ PC specs, bringing advanced AI capabilities to more Windows desktops.
14 views
Daily Writeups
⤷ Title: Zoom Patches 6 Flaws: DoS, Info Disclosure & XSS Across All Platforms
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:47:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2025_46788 #CVE_2025_46789 #CVE_2025_49462 #CVE_2025_49463 #CVE_2025_49464 #cybersecurity #Denial of Service #dos #Information Disclosure #Rooms #SDK #Vulnerability #Workplace #XSS #Zoom
Daily CyberSecurity
Zoom Patches 6 Flaws: DoS, Info Disclosure & XSS Across All Platforms
Zoom rolls out security updates for 6 newly disclosed flaws in Workplace, Rooms, and SDK, addressing DoS, info disclosure, and XSS across all platforms. Update now!
16 views