Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: TryHackMe: AI/ML Security Threats (Short)
════════════════════════
𐀪 Author: Pavneet_Singh_
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 09:54:10 GMT
════════════════════════
⌗ Tags: #genai #ai #chatgpt #cybersecurity #machine_learning
Medium
TryHackMe: AI/ML Security Threats (Short)
By Pavneet Singh Bhatia
18 views
Daily Writeups
⤷ Title: Operationalizing MITRE ATLAS: A Guide to AI Threat Modeling, SIEM Integration, and Incident…
════════════════════════
𐀪 Author: Arsh Riz
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 21:46:38 GMT
════════════════════════
⌗ Tags: #genai_security #cybersecurity #ai_governance #ai_security #mitre_attack_framework
Medium
Operationalizing MITRE ATLAS: A Guide to AI Threat Modeling, SIEM Integration, and Incident Response Playbooks
The introduction of Generative AI has permanently changed the cybersecurity landscape. We know attacks are accelerating, vulnerabilities…
31 views
Daily Writeups
⤷ Title: Kling 2.6 Just Cracked Motion Control… And It’s Scary Accurate
════════════════════════
𐀪 Author: Ayushi Srivastava
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 15:32:24 GMT
════════════════════════
⌗ Tags: #kling #kling_ai #xs #kling_ai_video #genai
Medium
Kling 2.6 Just Cracked Motion Control… And It’s Scary Accurate
Kling 2.6 motion control is making movement transferable: from real faces to still images. These two demos from X feel like motion capture
76 views
Daily Writeups
⤷ Title: Agentic Convenience Is Winning. Security Has to Adapt.
════════════════════════
𐀪 Author: C D
════════════════════════
ⴵ Time: Sun, 01 Feb 2026 05:19:38 GMT
════════════════════════
⌗ Tags: #genai_security #agentic_ai #application_security
Medium
Agentic Convenience Is Winning. Security Has to Adapt.
You have probably heard the phrase “AI lethal trifecta.” It refers to systems that combine autonomy, access to tools or actions, and access…
29 views
Daily Writeups
⤷ Title: Watch Me Poison Your MCP
════════════════════════
𐀪 Author: ToxSec
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 16:22:00 GMT
════════════════════════
⌗ Tags: #infosec #ai #llm #cybersecurity #genai
Medium
Watch Me Poison Your MCP
How MCP tool poisoning hijacks agent inference through description metadata, conversation-formatted JSON spoofs safety training.
16 views
Daily Writeups
⤷ Title: Stored XSS in Gen AI Chat via Phonetic Obfuscation: Tricking Language Models into Writing Malicious…
════════════════════════
𐀪 Author: SJ_Offsec
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #genai #xss_attack #application_security #ai_security
Medium
Stored XSS in Gen AI Chat via Phonetic Obfuscation: Tricking Language Models into Writing Malicious…
When an AI assistant renders its own output as unsanitized HTML, a creative attacker can teach it to speak in code — literally.
36 views
Daily Writeups
⤷ Title: Pakistan-Linked APT36 Floods Indian Govt Networks With AI-Made ‘Vibeware’
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 20:35:12 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Cyber Attacks #AI #APT36 #Cyber Attack #Cyber Crime #Cybersecurity #GenAI #India #Pakistan #Transparent Tribe #Vibeware
Hackread
Pakistan-Linked APT36 Floods Indian Govt Networks With AI-Made ‘Vibeware’
Bitdefender research reveals Pakistani group APT36 is using AI-generated vibeware and trusted cloud services like Google Sheets to target Indian officials.
38 views
Daily Writeups
⤷ Title: PostMessage Misconfiguration + AI Prompt Injection + Sandbox Escape = XSS & Data Exfiltration
════════════════════════
𐀪 Author: SJ_Source_Sink
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 04:40:29 GMT
════════════════════════
⌗ Tags: #penetration_testing #prompt_injection_attack #bug_bounty #genai #bug_bounty_tips
Medium
PostMessage Misconfiguration + AI Prompt Injection + Sandbox Escape = XSS & Data Exfiltration
When three individually medium-severity issues chain together to compromise an AI assistant platform.
16 views
Daily Writeups
⤷ Title: PostMessage Misconfiguration + AI Prompt Injection + Sandbox Escape = XSS & Data Exfiltration
════════════════════════
𐀪 Author: SJ_Source_Sink
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 04:40:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #prompt_injection_attack #bug_bounty #genai #bug_bounty_tips
Medium
PostMessage Misconfiguration + AI Prompt Injection + Sandbox Escape = XSS & Data Exfiltration
When three individually medium-severity issues chain together to compromise an AI assistant platform.
10 views
Daily Writeups
⤷ Title: The Two-Hour Takeover: How a CodeWall AI Agent Hijacked McKinsey’s “Lilli” and Exposed 46M Chats
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 07:16:51 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Security 2026 #Autonomous AI Agent #CodeWall #Cyber Security #data breach #GenAI #Lilli AI #McKinsey #Paul Price #red teaming #SQL injection #System Prompt Poisoning
Penetration Testing Tools
The Two-Hour Takeover: How a CodeWall AI Agent Hijacked McKinsey’s "Lilli" and Exposed 46M Chats
An autonomous artificial intelligence agent breached the internal AI platform of the consulting leviathan McKinsey & Company in
21 views