Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: BentoML Vulnerability Allows Remote Code Execution on AI Servers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 17:14:09 +0000
════════════════════════
⌗ Tags: #Security #AI #BentoML #Checkmarx #Cybersecurity #Python #RCE #Vulnerability #WAF
Hackread
BentoML Vulnerability Allows Remote Code Execution on AI Servers
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
38 views
Daily Writeups
⤷ Title: Different Types of Checkmarx Findings and Common Fix Techniques
════════════════════════
𐀪 Author: Samarth Arun Narula
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 18:57:40 GMT
════════════════════════
⌗ Tags: #application_security #checkmarx #cybersecurity
Medium
Different Types of Checkmarx Findings and Common Fix Techniques
Introduction
18 views
Daily Writeups
⤷ Title: Checkmarx : Integration with Github actions
════════════════════════
𐀪 Author: Piyali Das
════════════════════════
ⴵ Time: Sun, 31 Aug 2025 09:41:09 GMT
════════════════════════
⌗ Tags: #github #github_actions #application_security #checkmarx #security
Medium
Checkmarx : Integration with Github actions
Checkmarx is an Application Security Testing (AST) platform that helps organizations secure their software throughout the SDLC (Software…
27 views
Daily Writeups
⤷ Title: Fake Prettier Extension on VSCode Marketplace Dropped Anivia Stealer
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 12:43:57 +0000
════════════════════════
⌗ Tags: #Security #Anivia Stealer #Brandjacking #Checkmarx #Coding #Cybersecurity #Fake Prettier Extension on VSCode Marketplace Dropped Anivia Stealer #Marketplace #Prettier #ZeroTrace
Hackread
Fake Prettier Extension on VSCode Marketplace Dropped Anivia Stealer
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
80 views
Daily Writeups
⤷ Title: The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:45:06 +0000
════════════════════════
⌗ Tags: #Data Leak #AWS #Checkmarx #Cisco #cloud security #Cybersecurity 2026 #Github #Infosec #LiteLLM #Source Code Leak #supply chain attack #TeamPCP #Trivy
Information Security News
The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
A cyber offensive targeting one of the preeminent information technology conglomerates originated from a seemingly mundane instrument for vulnerability assessment. Consequently, adversaries succes…
6 views
Daily Writeups
⤷ Title: TeamPCP Hijacks Checkmarx in Sprawling Supply Chain Strike
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:19:36 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Theft #cybersecurity #docker #GitHub Actions #infosec #Malware Analysis #npm #supply chain attack #TeamPCP #VS Code
Daily CyberSecurity
TeamPCP Hijacks Checkmarx in Sprawling Supply Chain Strike
Checkmarx Docker images and VS Code extensions hijacked by TeamPCP to siphon cloud secrets and spread via npm. Audit your "Dune" repositories today.
27 views
Daily Writeups
⤷ Title: Supply Chain Sabotage: Bitwarden CLI Compromised in Global “Checkmarx” Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 01:41:43 +0000
════════════════════════
⌗ Tags: #Malware #Bitwarden #Bitwarden CLI #bw1.js #Checkmarx Campaign #cybersecurity #Dune Malware #GitHub Actions #infosec #malware #secret management #supply chain attack
Daily CyberSecurity
Supply Chain Sabotage: Bitwarden CLI Compromised in Global "Checkmarx" Campaign
Bitwarden CLI v2026.4.0 compromised in "Dune"-themed supply chain attack. Malware steals cloud secrets and SSH keys. Rotate your credentials immediately.
20 views
Daily Writeups
⤷ Title: Checkmarx Falls Victim to Credential Harvesting Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:54:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #breach #Checkmarx #cybersecurity #data exfiltration #GitHub Security #infosec #LAPSUS$ #Malicious code #Software Integrity #supply chain attack #Trivy
Daily CyberSecurity
Checkmarx Falls Victim to Credential Harvesting Attack
Checkmarx discloses a major GitHub breach via a Trivy supply chain flaw. Attackers injected malicious code and exfiltrated data for a month. Get the facts.
28 views
Daily Writeups
⤷ Title: Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:35:39 +0000
════════════════════════
⌗ Tags: #Data Leak #Checkmarx #CVE_2026_33634 #data leak #GitHub Breach #KICS #LAPSUS$ #Mandiant #Open VSX #supply chain attack #TeamPCP #Trivy #VS Code extensions
Penetration Testing Tools
Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
Checkmarx is grappling with a distressing sequel to its March security breach, as data exfiltrated from a private
11 views
Daily Writeups
⤷ Title: Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:16:40 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Harvesting #Cybersecurity 2026 #DevOps Security #Infosec #jenkins #Jenkins Marketplace #Malware Alert #Shai_Hulud #supply chain attack #TeamPCP
Penetration Testing Tools
Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
Unidentified adversaries have subverted the Checkmarx plugin for Jenkins, embedding deleterious code designed for credential exfiltration. This incursion
15 views