Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: FortiAI Generative AI Security: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:02:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #fortinet #fortiai #ai #artificial_intelligence
Medium
FortiAI Generative AI Security: A Comprehensive Guide
As the cyber threat landscape evolves at unprecedented speed, security teams are facing greater pressure to identify and respond to attacks…
16 views
Daily Writeups
⤷ Title: Mobile Forensics part2 | The Crime Lab — CyberDefenders
════════════════════════
𐀪 Author: Anas404
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:02:10 GMT
════════════════════════
⌗ Tags: #cyberdefender #android_forensics #cybersecurity #forensics #digital_forensics
Medium
Mobile Forensics part2 | The Crime Lab — CyberDefenders
1. Introduction
16 views
Daily Writeups
⤷ Title: Uruguay’s Cybersecurity Landscape 2024–2025: A Report on National Threat Trends, Strategic Posture…
════════════════════════
𐀪 Author: ADanielHill
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:55:40 GMT
════════════════════════
⌗ Tags: #uruguay #cybersecurity #cert #agesic #media
Medium
Uruguay’s Cybersecurity Landscape 2024–2025: A Report on National Threat Trends, Strategic Posture, and Governmental Response
Uruguay presents a complex cybersecurity landscape, showcasing a paradoxical situation where its high regional standing in cybersecurity…
19 views
Daily Writeups
⤷ Title: From Reactive to Predictive: Building Tomorrow’s Security Operations Center
════════════════════════
𐀪 Author: Eric Zietlow
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:51:22 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #proactive_defense #cybersecurity
Medium
From Reactive to Predictive: Building Tomorrow’s Security Operations Center
Yesterdays solutions are not good enough to battle tomorrows threats.
20 views
Daily Writeups
⤷ Title: I built a Home Server with a 10-year-old Laptop. Here’s what I learned.
════════════════════════
𐀪 Author: Kevin Andrey Romero Oviedo
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:41:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_computing #linux #computer_science #servers
Medium
I built a Home Server with a 10-year-old Laptop. Here’s what I learned.
Picture this: you’re casually scrolling through your phone when suddenly… storage full. That dreaded notification that strikes at the worst…
27 views
Daily Writeups
⤷ Title: AI/ML Security Threats: TryHackMe Answers
════════════════════════
𐀪 Author: Ansul Kotadia
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:57:53 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ai_ml_security_threats #cybersecurity #tryhackme #tryhackme_writeup
Medium
AI/ML Security Threats: TryHackMe Answers
Learn AI basics, key terms, and how it’s used by both attackers and defenders.
31 views
Daily Writeups
⤷ Title: AI Coding Assistants Under Attack: “Slopsquatting” Malware Exploits AI Hallucinations for Supply Chain Compromise
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:58:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #AI Coding Assistants #Artificial intelligence #cybersecurity #Large Language Model #LLM #npm #PyPI #Slopsquatting #Software Development #supply chain attack #Typosquatting
Penetration Testing Tools
AI Coding Assistants Under Attack: "Slopsquatting" Malware Exploits AI Hallucinations for Supply Chain Compromise
"Slopsquatting" is a new AI supply chain attack where cybercriminals register hallucinated package names from AI coding assistants (like ChatGPT, Claude) to inject malware.
30 views
Daily Writeups
⤷ Title: Shellter Tool Abused by Hackers: Developers Slam Elastic for “Negligent” Disclosure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:55:57 +0000
════════════════════════
⌗ Tags: #Malware #cybercrime #cybersecurity #Elastic Security Labs #Evasion Framework #Infostealer #malware #Red Team Tool #Responsible Disclosure #Shellter
Penetration Testing Tools
Shellter Tool Abused by Hackers: Developers Slam Elastic for "Negligent" Disclosure
Shellter developers confirm their AV/EDR evasion tool is being used by malicious actors, criticizing Elastic for "negligent" disclosure that risked further misuse.
24 views
Daily Writeups
⤷ Title: Brazil Bank Heist: Insider Bribery Leads to $140M Theft from 6 Banks Via C&M Fintech Firm
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:54:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bank Hack #Brazil #Bribery #C&M #Central Bank #cryptocurrency #cybercrime #Financial Fraud #Insider Threat #Money Laundering #ZachXBT
Penetration Testing Tools
Brazil Bank Heist: Insider Bribery Leads to $140M Theft from 6 Banks Via C&M Fintech Firm
Hackers stole nearly $140M from 6 Brazilian banks by bribing a C&M employee for access. Funds were laundered into crypto, but an arrest has been made.
16 views
Daily Writeups
⤷ Title: SEO Poisoning Campaign Targets IT Pros: Fake PuTTY & WinSCP Sites Deliver “Oyster” Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:46:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arctic Wolf #Backdoor #Broomstick #CleanUpLoader #cybersecurity #Fake Installers #IT Professionals #malware #Oyster #PuTTY #SEO Poisoning #WinSCP
Penetration Testing Tools
SEO Poisoning Campaign Targets IT Pros: Fake PuTTY & WinSCP Sites Deliver "Oyster" Backdoor
Arctic Wolf uncovers an SEO poisoning campaign using fake PuTTY and WinSCP sites to deliver the "Oyster" backdoor via trojanized installers, targeting IT professionals.
12 views
Daily Writeups
⤷ Title: Urgent Citrix Bleed 2 (CVE-2025-5777, CVSS 9.3) Actively Exploited: MFA Bypass & Session Hijacking Threaten Enterprises
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:41:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #ADC #Citrix #Citrix Bleed 2 #CVE_2025_5777 #cybersecurity #Gateway #MFA Bypass #NetScaler #Out_of_Bounds Read #ReliaQuest #Session Hijacking #vulnerability
Penetration Testing Tools
Urgent Citrix Bleed 2 (CVE-2025-5777, CVSS 9.3) Actively Exploited: MFA Bypass & Session Hijacking Threaten Enterprises
Citrix Bleed 2 (CVE-2025-5777, CVSS 9.3) is actively exploited to hijack sessions and bypass MFA on NetScaler ADC/Gateway. Patch immediately to prevent covert access and data theft.
17 views
Daily Writeups
⤷ Title: Linux Boot Flaw (CVE-2016-4484): Secure Boot & Disk Encryption Bypassed, Persistent Malware Possible
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:39:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Debug Shell #Fedora #Full Disk Encryption #Initramfs #Linux #malware #privilege escalation #Root Access #Secure Boot #ubuntu #vulnerability
Penetration Testing Tools
Linux Boot Flaw (CVE-2016-4484): Secure Boot & Disk Encryption Bypassed, Persistent Malware Possible
A critical flaw in Linux boot (CVE-2016-4484) bypasses Secure Boot and disk encryption via a debug shell in initramfs, allowing local attackers to implant persistent malware. Patch now!
17 views
Daily Writeups
⤷ Title: Windows Activation Tool TSforge Suspended: Microsoft’s Coding Error Breaks ZeroCID
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:11:33 +0000
════════════════════════
⌗ Tags: #Technology #Activation #Bypass #MAS #Microsoft #Software Protection Platform #SPP #StaticCID #Tech News #TSforge #windows #Windows 10 #Windows 11 #ZeroCID
Daily CyberSecurity
Windows Activation Tool TSforge Suspended: Microsoft's Coding Error Breaks ZeroCID
The MAS team suspended TSforge ZeroCID Windows activation, blaming a Microsoft coding error. While the bug persists, TSforge shifted to StaticCID, and other activation tools remain.
16 views
Daily Writeups
⤷ Title: Android Gets New “System Services” Page: Google Boosts Transparency for Background Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:06:34 +0000
════════════════════════
⌗ Tags: #Android #android #Android 6.0 #Background Apps #google #Google Play Services #Management #Mobile OS #privacy #System Services #transparency
Daily CyberSecurity
Android Gets New "System Services" Page: Google Boosts Transparency for Background Apps
Android 6.0+ is getting a new "System Services" settings page, centralizing visibility and management of Google's essential background apps for enhanced transparency.
12 views
Daily Writeups
⤷ Title: Android Privacy Alert: Google Gemini AI Now Accesses WhatsApp, Texts & Calls by Default
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:02:24 +0000
════════════════════════
⌗ Tags: #Android #Data Leak #AI #android #artificial intelligence #cybersecurity #Data Access #Data Privacy #Google Apps #Google Gemini #Phone #privacy #SMS #WhatsApp
Daily CyberSecurity
Android Privacy Alert: Google Gemini AI Now Accesses WhatsApp, Texts & Calls by Default
Google Gemini AI now accesses your Android phone, messages, and WhatsApp by default, overriding privacy settings. Users must manually disable this intrusive cross-app integration.
14 views
Daily Writeups
⤷ Title: Intel’s Arrow Lake Refresh to Bring Copilot+ AI Powers & Faster Performance to Desktops This Year
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:56:14 +0000
════════════════════════
⌗ Tags: #Technology #AI #Arrow Lake Refresh #artificial intelligence #Copilot+ PC #CPU #Desktop Processors #intel #Neural Processing Unit #NPU #Tech News #Windows 11
Daily CyberSecurity
Intel's Arrow Lake Refresh to Bring Copilot+ AI Powers & Faster Performance to Desktops This Year
Intel's Arrow Lake Refresh desktop CPUs, expected H2 2025, will feature enhanced NPUs to meet Copilot+ PC specs, bringing advanced AI capabilities to more Windows desktops.
14 views
Daily Writeups
⤷ Title: Zoom Patches 6 Flaws: DoS, Info Disclosure & XSS Across All Platforms
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:47:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2025_46788 #CVE_2025_46789 #CVE_2025_49462 #CVE_2025_49463 #CVE_2025_49464 #cybersecurity #Denial of Service #dos #Information Disclosure #Rooms #SDK #Vulnerability #Workplace #XSS #Zoom
Daily CyberSecurity
Zoom Patches 6 Flaws: DoS, Info Disclosure & XSS Across All Platforms
Zoom rolls out security updates for 6 newly disclosed flaws in Workplace, Rooms, and SDK, addressing DoS, info disclosure, and XSS across all platforms. Update now!
16 views
Daily Writeups
⤷ Title: Git Project Patches 3 Flaws: RCE, Arbitrary File Writes & Buffer Overflow
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:37:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #buffer overflow #CVE_2025_48384 #CVE_2025_48385 #CVE_2025_48386 #cybersecurity #git #rce #Remote Code Execution #Version Control #Vulnerability
Daily CyberSecurity
Git Project Patches 3 Flaws: RCE, Arbitrary File Writes & Buffer Overflow
15 views
Daily Writeups
⤷ Title: VS Code ETHcode Extension Hacked: Just 2 Lines of Code Led to Supply Chain Compromise Via GitHub PR
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:46:20 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #ETHcode #Ethereum #Extension #github #malware #Pull Request #ReversingLabs #supply chain attack #Typosquatting #visual studio code #VS Code
Daily CyberSecurity
VS Code ETHcode Extension Hacked: Just 2 Lines of Code Led to Supply Chain Compromise Via GitHub PR
ReversingLabs exposes a supply chain compromise of the VS Code ETHcode extension via two lines of malicious code in a GitHub PR, leading to malware deployment.
14 views
Daily Writeups
⤷ Title: Critical Flaws Found in Siemens SINEC NMS: Privilege Escalation and Remote Code Execution Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:36:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #ICS #industrial control systems #Network Management #Path Traversal #rce #Remote Code Execution #SCADA #Siemens #SINEC NMS #sql injection #Vulnerability
Daily CyberSecurity
Critical Flaws Found in Siemens SINEC NMS: Privilege Escalation and Remote Code Execution Risks
Siemens warns of critical flaws (CVE-2025-40736 CVSS 9.8 Auth Bypass, SQLi, Path Traversal) in SINEC NMS, allowing unauthenticated remote root access and RCE.
16 views
Daily Writeups
⤷ Title: Citrix Warns of Privilege Escalation Vulnerability in Windows Virtual Delivery Agent (CVE-2025-6759)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:31:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Citrix #Citrix DaaS #Citrix Virtual Apps and Desktops #CVAD #CVE_2025_6759 #cybersecurity #privilege escalation #SYSTEM privileges #VDA #Virtual Delivery Agent #Vulnerability
Daily CyberSecurity
Citrix Warns of Privilege Escalation Vulnerability in Windows Virtual Delivery Agent (CVE-2025-6759)
Citrix warns of a high-severity local privilege escalation flaw (CVE-2025-6759, CVSSv4 7.3) in Windows VDA, allowing low-privileged users to gain SYSTEM access.
17 views