Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 30 Mar 2023 11:01:39 GMT
———————————————
✏️Title: Microsoft Under Siege: The Application-Level Denial of Service Threat
———————————————
📎Link: https://medium.com/p/52953599e985
———————————————
Tags: #bugbounty_writeup #microsoft #denial_of_service_attack #cyber #msrc

Medium

Microsoft Under Siege: The Application-Level Denial of Service Threat

Hello Everyone hope all are safe and doing good. I am Mohamed Usman from Madurai, Tamilnadu currently I am working security analyst in a…

7 views12:00

Daily Writeups

⤷ Title: Account Verification OTP Bypass in Microsoft Security Response Centre
════════════════════════
𐀪 Author: armanxreza
════════════════════════
ⴵ Time: Sat, 08 Feb 2025 14:49:51 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #security #bug_bounty #microsoft #msrc

Medium

Account Verification OTP Bypass in Microsoft Security Response Centre

It all started in August 2024. My goal was simple — find a meaningful security vulnerability and contribute to making Microsoft’s…

49 views15:04

Daily Writeups

⤷ Title: Microsoft’s Youngest Security Researcher: Dylan, 13, Uncovers Teams Flaw & Prompts Bug Bounty Rule Change
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 07:41:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #bug bounty #Cybersecurity Talent #Microsoft #Microsoft Teams #MSRC #Responsible Disclosure #Security Researcher #Tech News #Vulnerability

Daily CyberSecurity

Microsoft's Youngest Security Researcher: Dylan, 13, Uncovers Teams Flaw & Prompts Bug Bounty Rule Change

Dylan, 13, became Microsoft's youngest security researcher, uncovering a Teams flaw and prompting a Bug Bounty Program rule change. He has since submitted 20 reports.

14 views09:04

Daily Writeups

⤷ Title: Rising Star: Meet Dylan, Microsoft’s Youngest Security Researcher & Bug Bounty Rule Changer at 13
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 04:21:29 +0000
════════════════════════
⌗ Tags: #Microsoft #bug bounty #Cybersecurity Talent #Microsoft Teams #MSRC #Responsible Disclosure #Security Researcher #Tech News #vulnerability

Penetration Testing Tools

Rising Star: Meet Dylan, Microsoft's Youngest Security Researcher & Bug Bounty Rule Changer at 13

Dylan became Microsoft's youngest security researcher at 13, uncovering a Teams flaw that prompted a Bug Bounty program rule change. He's since submitted 20 reports.

41 views05:04

Daily Writeups

⤷ Title: Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:02:19 +0000
════════════════════════
⌗ Tags: #Malware #Eclipse Foundation #MSRC #Open VSX #security incident #Supply Chain #Token Security #Visual Studio Code #Wiz

Penetration Testing Tools

Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks

Eclipse revoked compromised Open VSX tokens found in repositories. New "ovsxp_" prefix and shorter validity periods will strengthen supply chain security.

5 views04:04

Daily Writeups

⤷ Title: [Broken Access Control] Members can pin/unpin any post in a Microsoft Teams community
════════════════════════
𐀪 Author: Rohmad Hidayah
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 13:30:52 GMT
════════════════════════
⌗ Tags: #broken_access_control #microsoft #bug_bounty #msrc #microsoft_teams

Medium

[Broken Access Control] Members can pin/unpin any post in a Microsoft Teams community

The “Member” role can pin/unpin any post in the community via the API, whereas previously only the community owner could do so.

37 views14:04

Daily Writeups

⤷ Title: Denial of service on the “Post” tab in any Microsoft Teams community
════════════════════════
𐀪 Author: Rohmad Hidayah
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:25:25 GMT
════════════════════════
⌗ Tags: #denial_of_service #denial_of_service_attack #bug_bounty #msrc #microsoft

Medium

Denial of service on the “Post” tab in any Microsoft Teams community

A malicious member could cause the “Posts” tab in the victim community to stop functioning. This prevents the community owner or members…

11 views04:04

Daily Writeups

⤷ Title: Zero-Day Alert: The “Red Sun” Vulnerability Turning Microsoft Defender into a Hacker’s Tool
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 03:42:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #Chaotic Eclipse #cybersecurity #Local Privilege Escalation #malware #Microsoft Defender #MSRC #Red Sun #UnDefend #Windows Security #Zero_Day Exploit

Daily CyberSecurity

Zero-Day Alert: The "Red Sun" Vulnerability Turning Microsoft Defender into a Hacker’s Tool

Microsoft Defender faces a critical "Red Sun" vulnerability. Learn how this zero-day exploit bypasses security to grant hackers full administrative control.

12 views05:03

Daily Writeups

⤷ Title: The Pre-Boot Breach: Microsoft Releases Critical Emergency Script to Defend Against “YellowKey” BitLocker Bypass
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 03:45:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #autofstx.exe Registry Patch #BitLocker Bypass Vulnerability #CVE_2026_45585 Windows 11 #FsTx Auto Recovery Utility #MSRC Hotfix Guide #Physical Access Data Theft #Pre_Boot Authentication PIN #TPM Only Exploitation #Windows Recovery Environment #YellowKey WinRE Mitigation Script

Information Security News

The Pre-Boot Breach: Microsoft Releases Critical Emergency Script to Defend Against "YellowKey" BitLocker Bypass

Historically, independent security researchers bypassed standard coordinate disclosure protocols to directly publish an unhedged vulnerability residing within the

15 views05:03

Daily Writeups

⤷ Title: The Vulnerability Rift: Microsoft Realigns Posture Toward Security Researchers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:18:37 +0000
════════════════════════
⌗ Tags: #Microsoft #coordinated vulnerability disclosure #Katie Moussouris infosec #Microsoft zero day dispute #MSRC researcher backlash #Nightmare Eclipse vulnerability #Secure Boot BitLocker bypass

Information Security News

Microsoft Zero Day Dispute: Legal Action Updates

Analyze the ongoing Microsoft zero day dispute. Learn how Microsoft responded to community backlash over research disclosures.

19 views05:03

About

Blog

Apps

Platform