Daily Writeups
@Daily_Writeups
3.51K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.51K subscribers
Daily Writeups
⤷ Title: Building a Software Inventory System: Technical Blueprint
════════════════════════
𐀪 Author: Ashley Kim
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 21:56:57 GMT
════════════════════════
⌗ Tags: #database_design #data_visualization #software_engineering #enterprise_technology #cybersecurity
Medium
Building a Software Inventory System: Technical Blueprint
Design a tech-stack-agnostic database to manage enterprise software with automation and visualizations.
20 views
Daily Writeups
⤷ Title: Turning Complexity into Insight
════════════════════════
𐀪 Author: Anshul Mathur
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 21:48:02 GMT
════════════════════════
⌗ Tags: #investing #investors #cybersecurity #venture_capital #data_loss_prevention
Medium
Turning Complexity into Insight
A Second Brain Approach to Investing in Cybersecurity
26 views
Daily Writeups
⤷ Title: Agentic AI Is Here: What It Means for Enterprise Risk and Resilience
════════════════════════
𐀪 Author: Annie W
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 21:33:16 GMT
════════════════════════
⌗ Tags: #ai_governance #agentic_ai #cybersecurity #enterprise_technology
Medium
Agentic AI Is Here: What It Means for Enterprise Risk and Resilience
We’re entering a new phase of AI — one where models don’t just generate answers, but plan, act, and coordinate. Agentic AI systems are…
35 views
Daily Writeups
⤷ Title: The MFA Might Be Your Biggest Security Risk
════════════════════════
𐀪 Author: MSc. Adalberto Jr.
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 21:31:41 GMT
════════════════════════
⌗ Tags: #mfa #authentication #cybersecurity
Medium
The MFA Might Be Your Biggest Security Risk
Your Trusted MFA May Be the Weakest Link
25 views
Daily Writeups
⤷ Title: They Thought It Was Zoom. It Was Malware.
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 21:31:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #information_security #malware #chatgpt
Medium
They Thought It Was Zoom. It Was Malware.
Malware disguised as AI tools? Fake websites, poisoned search results, and backdoors into your business? Welcome to the dark side of SEO…
27 views
Daily Writeups
⤷ Title: Encrypting the Encryption
════════════════════════
𐀪 Author: Peter Lablans
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 21:01:50 GMT
════════════════════════
⌗ Tags: #encryption #cybersecurity #advanced_encryption #post_quantum_security #cryptography
Medium
Encrypting the Encryption
How the Finite Lab-Transform(FLT) Creates an Insanely Large Encryption Solution Space
34 views
Daily Writeups
⤷ Title: Harvest Exclusive SX Through SolarSx's Distribution Fiesta
════════════════════════
𐀪 Author: $SX (SolarSx)
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 22:18:46 GMT
════════════════════════
⌗ Tags: #xs #crypto #solarsx #free_token
Medium
Harvest Exclusive SX Through SolarSx's Distribution Fiesta
Discover insider tips to grab additional SX and reach maximum benefits fast.
37 views
Daily Writeups
⤷ Title: Windows Update Flaw: SYSTEM Privilege Escalation Via Arbitrary Folder Deletion, PoC Available!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:50:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #LPE #Microsoft #NT AUTHORITY\SYSTEM #privilege escalation #proof_of_concept #symbolic link #Windows Update
Daily CyberSecurity
Windows Update Flaw: SYSTEM Privilege Escalation Via Arbitrary Folder Deletion, PoC Available!
A Windows Update flaw (CVE-2025-48799) allows SYSTEM privilege escalation via arbitrary folder deletion using symlinks on multi-drive systems. PoC available. Patch now!
30 views
Daily Writeups
⤷ Title: Critical D-Link DIR-825 Router Flaw (CVE-2025-7206, CVSS 9.8): Remote Crash Via Buffer Overflow
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:42:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2025_7206 #cybersecurity #D_Link #Denial of Service #DIR_825 #dos #end_of_life #EOL #rce #Remote Code Execution #router #Vulnerability
Daily CyberSecurity
Critical D-Link DIR-825 Router Flaw (CVE-2025-7206, CVSS 9.8): Remote Crash Via Buffer Overflow
A critical flaw (CVE-2025-7206, CVSS 9.8) in D-Link DIR-825 firmware 2.10 allows unauthenticated remote buffer overflow, crashing the web interface.
21 views
Daily Writeups
⤷ Title: Ruckus Wireless Exposed: 9 Critical Vulnerabilities Leave Wi-Fi Management Systems Wide Open, No Patch!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:38:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #hardcoded credentials #Network Director #rce #Remote Code Execution #RND #Ruckus Wireless #ssh #Virtual SmartZone #vSZ #Vulnerability
Daily CyberSecurity
Ruckus Wireless Exposed: 9 Critical Vulnerabilities Leave Wi-Fi Management Systems Wide Open, No Patch!
Multiple critical flaws (CVE-2025-44954, -44957, -44963, -44955, -6243) in Ruckus vSZ/RND allow unauthenticated RCE, auth bypass via hardcoded SSH keys and JWT.
22 views
Daily Writeups
⤷ Title: From Stealer to Spy: AMOS Malware Evolves into Full-Fledged Backdoor Threat for macOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:32:17 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #Apple #backdoor #cybersecurity #infosec #macOS #malware #persistence #stealer #threat intelligence
Daily CyberSecurity
From Stealer to Spy: AMOS Malware Evolves into Full-Fledged Backdoor Threat for macOS
AMOS malware just leveled up—now a backdoor, it poses a serious threat to macOS with persistent access and remote command execution.
21 views
Daily Writeups
⤷ Title: Opossum Attack: New Vulnerability Compromises Encrypted TLS Connections, Allowing MitM & Data Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:26:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #Desynchronization #FTP #http #Man in the Middle #mitm #Opossum Attack #Opportunistic TLS #SMTP #tls #Transport Layer Security #Vulnerability
Daily CyberSecurity
Opossum Attack: New Vulnerability Compromises Encrypted TLS Connections, Allowing MitM & Data Injection
The Opossum Attack is a new desynchronization flaw exploiting implicit/opportunistic TLS in protocols like HTTP, allowing MitM to compromise encrypted connections. Over 3M servers affected.
15 views
Daily Writeups
⤷ Title: Critical Vulnerabilities Found in Schneider Electric’s EcoStruxure IT Data Center Expert
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:21:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #cybersecurity #DCE #EcoStruxure IT Data Center Expert #privilege escalation #rce #Remote Code Execution #Schneider Electric #ssrf #Vulnerability #xxe
Daily CyberSecurity
Critical Vulnerabilities Found in Schneider Electric’s EcoStruxure IT Data Center Expert
Schneider Electric warns of critical flaws (CVSS 10.0 RCE, SSRF, EoP) in EcoStruxure IT Data Center Expert. Patch to v9.0 immediately to prevent data center disruption.
17 views
Daily Writeups
⤷ Title: OFAC Sanctions Key Players in North Korea’s Remote IT Worker Scheme Funding Weapons Programs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:18:37 +0000
════════════════════════
⌗ Tags: #Cyber Security #Andariel #cyber_espionage #Cybercrime #DPRK #Gayk Asatryan #North Korea #OFAC #Remote IT Workers #Revenue Generation #RGB #sanctions #Song Kum Hyok #Treasury
Daily CyberSecurity
OFAC Sanctions Key Players in North Korea's Remote IT Worker Scheme Funding Weapons Programs
OFAC sanctioned Song Kum Hyok (Andariel) and others for orchestrating North Korea's remote IT worker scheme, which used stolen identities to fund DPRK weapons programs.
22 views
Daily Writeups
⤷ Title: Ongoing Attacks Exploit GeoServer RCE Flaw (CVE-2024-36401) to Install NetCat and XMRig CoinMiner
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:11:17 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ASEC #CoinMiner #cybersecurity #Earth Baxia #Fortinet #GeoServer #GIS #netcat #rce #Remote Code Execution #Trend Micro #Vulnerability #XMRig
Daily CyberSecurity
Ongoing Attacks Exploit GeoServer RCE Flaw (CVE-2024-36401) to Install NetCat and XMRig CoinMiner
GeoServer's RCE flaw (CVE-2024-36401) is actively exploited to deploy NetCat reverse shells and XMRig CoinMiners on Windows/Linux, hijacking resources.
29 views
Daily Writeups
⤷ Title: CISA Warns of Critical Flaws in Emerson ValveLink Software: Exploits Could Lead to Code Execution and Data Exposure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:08:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Cleartext Data #Code Execution #CVE_2025_46358 #CVE_2025_48496 #CVE_2025_50109 #CVE_2025_52579 #CVE_2025_53471 #cybersecurity #Emerson #ICS #industrial control systems #SCADA #ValveLink #Vulnerability
Daily CyberSecurity
CISA Warns of Critical Flaws in Emerson ValveLink Software: Exploits Could Lead to Code Execution and Data Exposure
CISA warns of critical flaws in Emerson ValveLink software, exposing cleartext data, allowing code execution, and compromising industrial systems. Update to v14.0 now.
28 views
Daily Writeups
⤷ Title: Gold Melody’s Stealthy Campaign: Leaked ASP.NET Machine Keys Fuel In-Memory RCE & Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:00:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASP.NET #cybersecurity #GodPotato #Gold Melody #IAB #initial access broker #Machine Key #Palo Alto Networks #privilege escalation #rce #Remote Code Execution #UNC961 #View State Deserialization
Daily CyberSecurity
Gold Melody's Stealthy Campaign: Leaked ASP.NET Machine Keys Fuel In-Memory RCE & Privilege Escalation
Unit 42 reveals "Gold Melody" uses leaked ASP.NET Machine Keys to achieve in-memory RCE via View State deserialization and privilege escalation via GodPotato, compromising web servers.
39 views
Daily Writeups
⤷ Title: The 16B records Data Breach that did not exist
════════════════════════
𐀪 Author: Appsec.pt
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 23:19:21 GMT
════════════════════════
⌗ Tags: #company #data_breach #bug_bounty #news #cybersecurity
Medium
The 16B records Data Breach that did not exist
A wave of news recently swept social media and the news, claiming that “Apple, Google, Facebook, Telegram, GitHub passwords leaked in…
30 views
Daily Writeups
⤷ Title: How I Tricked a Fellow Airman, and What It Taught Me About “Authority” in Social Engineering
════════════════════════
𐀪 Author: JD Brooks
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:51:10 GMT
════════════════════════
⌗ Tags: #military #infosec #social_engineering #veterans #cybersecurity_awareness
Medium
How I Tricked a Fellow Airman, and What It Taught Me About “Authority” in Social Engineering
In the military, you pretty much just do what you’re told. With rare exceptions (e.g., an unlawful order), one might snap back at a…
29 views
Daily Writeups
⤷ Title: The Cloud Explained (Like I’m 5)
════════════════════════
𐀪 Author: TechTales
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:09:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_computing #education_technology #technology #cloud
Medium
The Cloud Explained (Like I’m 5)
In an ever-evolving world filled with new ideas and innovations, a common term we often hear is the “cloud.”
29 views
Daily Writeups
⤷ Title: CVE-2025–52367: Stored XSS to RCE via Privilege Escalation in PivotX CMS v3.0.0 RC 3
════════════════════════
𐀪 Author: HayToN
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:07:39 GMT
════════════════════════
⌗ Tags: #researching #cms #xss_attack #cybersecurity #rce_vulnerability
Medium
CVE-2025–52367: Stored XSS to RCE via Privilege Escalation in PivotX CMS v3.0.0 RC 3
Author: HayToN  Date: July 2025  CVE ID: CVE-2025–52367  Vulnerability Type: Stored Cross-Site Scripting (XSS) To RCE (Remote Command…
25 views