Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 31 Mar 2023 00:38:26 GMT
———————————————
✏️Title: Exposed Docker Registries Server as Critical Reminder on Container Security
———————————————
📎Link: https://medium.com/p/a9bba13b403d
———————————————
Tags: #docker #bug_bounty #exposed_docker_registry #docker_exploit #cybersecurity

Medium

Exposed Docker Registries Server as Critical Reminder on Container Security

What is Docker?

2 views02:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sat, 29 Apr 2023 01:13:55 GMT
———————————————
✏️Title: Exposed: Supreme Court Chief Justice’s Wife Earned Millions in Secret Commissions
———————————————
📎Link: https://medium.com/p/aac8ca50949b
———————————————
Tags: #hacking #ai #justice #supreme_court #ethical_hacking

Medium

#Exposed: #SupremeCourt Chief Justice’s Wife Earned #Millions in Secret Commissions

rolodexter’s abilities went beyond its initial purpose. Not only could it predict legal trends and identify potential candidates for law…

3 views02:00

Daily Writeups

⤷ Title: The NPM Token That Stayed Alive for Two Years
════════════════════════
𐀪 Author: Arshad Kazmi
════════════════════════
ⴵ Time: Fri, 30 May 2025 15:29:14 GMT
════════════════════════
⌗ Tags: #hackerone_report #bug_bounty #npm_token #dockerhub #exposed_credential

Medium

The NPM Token That Stayed Alive for Two Years

About two years ago, while testing an early, unreleased version of iScan.today, I picked up something odd during a routine scan.

39 views16:03

Daily Writeups

⤷ Title: Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:44:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #APT_C_36 #AsyncRAT #Blind Eagle #Colombia #Cybercrime #Exposed C2 #Latin America #phishing #rat #Remcos #Remote Access Trojan #Trustwave #VBS Malware

Daily CyberSecurity

Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM

Trustwave exposes Blind Eagle (APT-C-36) leveraging exposed infrastructure and VBS malware in phishing campaigns, targeting Colombian banks with blatant disregard for concealment.

17 views01:04

Daily Writeups

⤷ Title: Power Grid ICS Are Exposed — What Does This Mean for Critical Infrastructure?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 03:14:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Infrastructure #cyberattack #cybersecurity #Exposed Devices #ICS #industrial control systems #Operation Sindoor #OT Security #Power Grid #Vulnerability #zoomeye

Daily CyberSecurity

Power Grid ICS Are Exposed — What Does This Mean for Critical Infrastructure?

Over 143,000 ICS devices in the power sector are publicly exposed to the internet, facing high/critical vulnerabilities. Urgent action is needed to secure global energy infrastructure.

14 views07:04

Daily Writeups

⤷ Title: Penetration Testing Exposed: A Day in the Life of a Professional Hacker (For Good)
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 15:23:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #exposed #professional_hackers #penetration_testing

Medium

Penetration Testing Exposed: A Day in the Life of a Professional Hacker (For Good)

Breaking Into Offices, Bypassing Security, and Getting Paid to Do It—All With Permission

6 views16:05

Daily Writeups

⤷ Title: Beyond Cryptominers: A New Malware Strain Is Hijacking Exposed Docker APIs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 10 Sep 2025 00:05:45 +0000
════════════════════════
⌗ Tags: #Malware #Akamai #botnet #cryptomining #cybersecurity #Docker malware #exposed APIs #malware evolution #Remote Access

Daily CyberSecurity

Beyond Cryptominers: A New Malware Strain Is Hijacking Exposed Docker APIs

A new malware strain is targeting exposed Docker APIs, evolving from a cryptominer into a stealthy botnet that blocks ports to "own" a victim's system for exclusive use.

9 views02:04

Daily Writeups

⤷ Title: 48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:07:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #Cisco ASA #Exposed Devices #Firepower #NCSC #network security #RCE #Shadowserver #zero_day

Penetration Testing Tools

48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds

A Shadowserver scan found over 48,000 Cisco ASA/FTD firewalls remain unpatched against two critical zero-day RCE/Unauthorized Access flaws, despite CISA’s emergency directive.

6 views04:04

Daily Writeups

⤷ Title: MuddyWater’s Latest Malware Suite Exposed: A Global Espionage Campaign
════════════════════════
𐀪 Author: Himanshu Bhatt
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 11:28:01 GMT
════════════════════════
⌗ Tags: #campaign #cybersecurity #malware #exposed #hacking

Medium

MuddyWater’s Latest Malware Suite Exposed: A Global Espionage Campaign

Group-IB Threat Intelligence has uncovered a sophisticated phishing campaign, attributed with high confidence to the Advanced Persistent…

14 views12:04

Daily Writeups

⤷ Title: The Shai-Hulud Attack: Exposing Weak Links in Modern Software Supply Chains
════════════════════════
𐀪 Author: Himanshu Bhatt
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 15:17:18 GMT
════════════════════════
⌗ Tags: #attack #software #cybersecurity #hacking #exposed

Medium

The Shai-Hulud Attack: Exposing Weak Links in Modern Software Supply Chains

The recent “Shai-Hulud” worm that hit the NPM ecosystem shows just how fragile our software supply chains really are. This malware — named…

21 views16:04

Daily Writeups

⤷ Title: CyberHeroes THM Writeup
════════════════════════
𐀪 Author: Death Esther
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 14:31:28 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cyberheros_thm #exposed_javascript #broken_authentication #tryhackme

Medium

CyberHeroes THM Writeup

Understanding Broken Authentication Through Exposed JavaScript Logic

25 views16:04

Daily Writeups

⤷ Title: 240,000 OpenClaw AI Instances Exposed to the Public Web
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 04:18:02 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Agents #AI security #Clawdbot #cloud server security #Cybersecurity 2026 #Data Privacy #exposed instances #Information Leakage #Moltbot #OpenClaw

Daily CyberSecurity

240,000 OpenClaw AI Instances Exposed to the Public Web

240,000 OpenClaw AI instances are currently exposed to the public internet. Learn how to secure your personal assistant before it becomes a portal for hackers.

14 views05:03

Daily Writeups

⤷ Title: OWASP Top 10 #5 — Security Misconfiguration ⚙️
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Wed, 13 May 2026 10:48:14 GMT
════════════════════════
⌗ Tags: #vapt #exposed #bug_bounty #owasp_top_10 #security_misconfiguration

Medium

OWASP Top 10 #5 — Security Misconfiguration ⚙️

The Vulnerability That Happens When Systems Are Left Carelessly Exposed

41 views11:04

Daily Writeups

⤷ Title: Bug Bounty — Bypassing Access Controls: How a Single Boolean Flag Exposed KYC Government IDs
════════════════════════
𐀪 Author: Kenjisubagja
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 08:16:01 GMT
════════════════════════
⌗ Tags: #exposed_kyc #bug_bounty_hunter #bug_bounty #bug_bounty_writeup

Medium

Bug Bounty — Bypassing Access Controls: How a Single Boolean Flag Exposed KYC Government IDs

Hello, hackers! In this writeup, I want to share a high-severity vulnerability I discovered during a recent bug bounty hunt. The…

13 views10:04

Daily Writeups

⤷ Title: An Exposed API Key Cost Me $4,000. Here Is Exactly What to Do To Avoid It.
════════════════════════
𐀪 Author: Belkin Marketing Team
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 10:01:43 GMT
════════════════════════
⌗ Tags: #hacking #exposed_api_key #iaros_belkin #api_key #credential_containment

Medium

An Exposed API Key Cost Me $4,000. Here Is Exactly What to Do To Avoid It.

The Four-Layer Credential Containment Model, the axios supply chain attack that hit 100 million downloads in under three hours, and the…

9 views12:04

About

Blog

Apps

Platform