Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Microsoft’s July 2025 Patch Tuesday: 140 Flaws Fixed, Including Zero-Day, RCEs & AMD CPU Threats
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:21:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AMD #CPU Vulnerabilities #CVE_2025_47981 #CVE_2025_49719 #CVE_2025_49735 #cybersecurity #Elevation of Privilege #Hyper_V #Information Disclosure #Microsoft #office #Patch Tuesday #rce #sql server #zero_day
Daily CyberSecurity
Microsoft’s July 2025 Patch Tuesday: 140 Flaws Fixed, Including Zero-Day, RCEs & AMD CPU Threats
Microsoft's July 2025 Patch Tuesday fixes 140 flaws, including a SQL Server zero-day (CVE-2025-49719), multiple RCEs, critical Office/Word bugs, and AMD CPU-level threats.
21 views
Daily Writeups
⤷ Title: Philippines Hit by Surge in Chinese Cybercrime: NFC & Smishing Attacks Steal Millions from Mobile Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:17:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese hackers #Cybercrime #cybersecurity #Financial Sector #GCash #GoTyme #Maya #Mobile Wallets #NFC Fraud #Philippines #Resecurity #smishing
Daily CyberSecurity
Philippines Hit by Surge in Chinese Cybercrime: NFC & Smishing Attacks Steal Millions from Mobile Wallets
Chinese cybercriminals are escalating attacks on the Philippine financial sector, exploiting NFC technology and smishing to steal from mobile wallets, with a 230% surge in dark web activity.
19 views
Daily Writeups
⤷ Title: Fortinet Fixes Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257, CVSS 9.6)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:14:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_25257 #cybersecurity #FortiWeb #rce #Remote Code Execution #sql injection #unauthenticated #Vulnerability #waf #Web Application Firewall
Daily CyberSecurity
Fortinet Fixes Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257, CVSS 9.6)
Fortinet released a critical patch for FortiWeb (CVE-2025-25257, CVSS 9.6). This unauthenticated SQL injection flaw allows remote code execution; update immediately!
18 views
Daily Writeups
⤷ Title: Chinese State-Sponsored Hacker Xu Zewei Arrested in Italy for COVID-19 Research & Exchange Server Hacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:11:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #china #COVID_19 Research #Cyberespionage #DOJ #fbi #HAFNIUM #Microsoft Exchange #MSS #Xu Zewei #zero_day #Zhang Yu
Daily CyberSecurity
Chinese State-Sponsored Hacker Xu Zewei Arrested in Italy for COVID-19 Research & Exchange Server Hacks
Chinese national Xu Zewei, linked to HAFNIUM, arrested in Italy for cyberespionage. He targeted US COVID-19 research & exploited Exchange zero-days, compromising 60,000+ US entities for China's MSS.
15 views
Daily Writeups
⤷ Title: Anatsa Resurfaces: Banking Trojan Targets North America via Google Play
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:07:00 +0000
════════════════════════
⌗ Tags: #Malware #Anatsa #android #Banking Trojan #Credential Theft #Cybercrime #Google Play Store #Keylogging #malware #North America #Overlay Attacks #Remote Control Fraud #ThreatFabric
Daily CyberSecurity
Anatsa Resurfaces: Banking Trojan Targets North America via Google Play
Anatsa, an advanced Android banking trojan, is targeting North America via Google Play. It steals credentials and conducts remote fraud through disguised apps and overlay attacks.
17 views
Daily Writeups
⤷ Title: Critical Flaws in Phoenix Contact EV Charging Controllers Expose Infrastructure to Remote Code Execution and Unauthorized Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:00:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CERT@VDE #Charging Controller #CHARX SEC_3xxx #cybersecurity #Electric Vehicle #EV #Phoenix Contact #privilege escalation #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
Critical Flaws in Phoenix Contact EV Charging Controllers Expose Infrastructure to Remote Code Execution and Unauthorized Access
Phoenix Contact warns of critical flaws (CVE-2025-25270 CVSS 9.8 RCE, CVE-2025-25268 Auth Bypass, CVE-2025-25271 OCPP Reconfig, CVE-2025-25269 LPE) in CHARX SEC-3xxx EV controllers.
16 views
Daily Writeups
⤷ Title: Google’s New Android Advanced Protection Supercharges Chrome Security for High-Risk Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 23:38:01 +0000
════════════════════════
⌗ Tags: #Android #Advanced Protection Program #android #APP #chrome #cybersecurity #google #HTTPS_Only Mode #javascript #mobile security #privacy #Site Isolation
Daily CyberSecurity
Google’s New Android Advanced Protection Supercharges Chrome Security for High-Risk Users
Google's Advanced Protection Program now offers device-level security for Android, bringing HTTPS-Only Mode, full Site Isolation, and disabled JS optimizers to Chrome for high-risk users.
13 views
Daily Writeups
⤷ Title: Start with VDPs Before Aiming for Private Bug Bounty Programs
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:02:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability #money #private #vdp
Medium
Start with VDPs Before Aiming for Private Bug Bounty Programs
Loophole how I get more private programs + $$$$
13 views
Daily Writeups
⤷ Title: FortiOS CVE-2025–24477 Exposes Systems to Code Execution
════════════════════════
𐀪 Author: Darshan
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:43:28 GMT
════════════════════════
⌗ Tags: #ai #technology #fortinet #cybersecurity #tech
Medium
FortiOS CVE-2025–24477 Exposes Systems to Code Execution
Fortinet has revealed a notable security flaw in its FortiOS operating system, identified as CVE-2025–24477, which highlights how even…
17 views
Daily Writeups
⤷ Title: ประจำวันพุธที่ 9 กรกฎาคม 2568
════════════════════════
𐀪 Author: ThaiCERT By NCSA
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:36:16 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
ประจำวันพุธที่ 9 กรกฎาคม 2568
ระวังภัย SEO Poisoning แฮกเกอร์หลอกติดตั้งมัลแวร์ กลุ่ม SMB ตกเป็นเหยื่อแล้ว 8,500 ราย
20 views
Daily Writeups
⤷ Title: The Hidden Dangers of AI-Generated Code
════════════════════════
𐀪 Author: Sophia Perez
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:54:31 GMT
════════════════════════
⌗ Tags: #coding #ai #cybersecurity #devops
Medium
The Hidden Dangers of AI-Generated Code
AI-powered coding tools like GitHub Copilot and ChatGPT are transforming the way software is written. They enable faster development and…
16 views
Daily Writeups
⤷ Title: Miscellaneous Series 5 — Level up a Script Kiddie v8 skills Part 1
════════════════════════
𐀪 Author: INTfinity Consulting
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:39:17 GMT
════════════════════════
⌗ Tags: #binary_exploitation #cybersecurity #browsers
Medium
Miscellaneous Series 5 — Level up a Script Kiddie v8 skills Part 1
Going through the first four levels of pwn.college v8 exploitation challenge
33 views
Daily Writeups
⤷ Title: Soul Cyber Tech Brief
════════════════════════
𐀪 Author: Ameer R. Weston-Lee / Soul Cyber
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 01:30:04 GMT
════════════════════════
⌗ Tags: #noir #privacy #network #cybersecurity #technology
Medium
Soul Cyber Tech Brief
Bitchat: A Resilient, Private Messaging System Without the Internet
33 views
Daily Writeups
⤷ Title: Signed Drivers Fueling Kernel Attacks: 620+ Malicious Drivers & 80+ Compromised Certs Target Windows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 03:03:59 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Digital Signatures #EV Certificates #Group_IB #kernel #malware #ransomware #Signed Drivers #WHCP #windows #Windows Hardware Compatibility Program
Penetration Testing Tools
Signed Drivers Fueling Kernel Attacks: 620+ Malicious Drivers & 80+ Compromised Certs Target Windows
Group-IB exposes 620+ malicious digitally signed drivers and 80+ compromised certificates since 2020, fueling stealthy Windows kernel attacks and bypassing security defenses.
38 views
Daily Writeups
⤷ Title: Ransomware War Ignites: DragonForce & RansomHub Clash Threatens Businesses with Re-Extortion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 03:01:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Affiliate Marketing #Cyber Conflict #cybercrime #cybersecurity #DragonForce #Extortion #RaaS #RansomHub #ransomware #Ransomware_as_a_Service
Penetration Testing Tools
Ransomware War Ignites: DragonForce & RansomHub Clash Threatens Businesses with Re-Extortion
A war between DragonForce and RansomHub ransomware groups threatens businesses with re-extortion. DragonForce's cartel model and RansomHub's alleged takedown mark escalating tensions.
18 views
Daily Writeups
⤷ Title: Part 3: The Custom Gate — Building a Custom Authentication Scheme
════════════════════════
𐀪 Author: Rohit Mittel
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 04:32:57 GMT
════════════════════════
⌗ Tags: #custom_authentication #authentication #2_factor_authentication #application_security #oracle_apex
Medium
customPart 3: The Custom Gate — Building a Custom Authentication Scheme
Welcome back, Gatekeeper.
15 views
Daily Writeups
⤷ Title: Same CWE, Different Vector: RCE in Notepad++ Uninstaller
════════════════════════
𐀪 Author: Maverick Doan
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 04:40:01 GMT
════════════════════════
⌗ Tags: #vulnerability #software #software_development #cybersecurity #open_source
Medium
Same CWE, Different Vector: RCE in Notepad++ Uninstaller
“Sometimes it’s darkest under the candle.” — @xomx, review comment
19 views
Daily Writeups
⤷ Title: Cybersecurity: Safeguarding the Digital Frontier
════════════════════════
𐀪 Author: Darkshiner
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 04:36:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_solutions
Medium
Cybersecurity: Safeguarding the Digital Frontier
Introduction
17 views
Daily Writeups
⤷ Title: Hands-on Practice & Labs For SIME
════════════════════════
𐀪 Author: Md. Ahnaf Shahariar
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 04:22:18 GMT
════════════════════════
⌗ Tags: #lab_setup #security_analytics #siem_tools_lab #siem #cybersecurity
Medium
Hands-on Practice & Labs For SIME
🧪 Hands-on Practice & Labs
22 views
Daily Writeups
⤷ Title: CNTRL+A + Delete
════════════════════════
𐀪 Author: Nathan D Daniels
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 04:12:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #government_technology #it_modernization #doge #technology
Medium
CNTRL+A + Delete
How Government Erased Its Own Future
16 views
Daily Writeups
⤷ Title: Career Opportunities After Completing an Ethical Hacking and Cybersecurity Course
════════════════════════
𐀪 Author: Tabitha Matthews
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 04:06:50 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity
Medium
Career Opportunities After Completing an Ethical Hacking and Cybersecurity Course
The rise in cyber threats has made digital security a global priority. As companies and governments invest more in protecting sensitive…
15 views