Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Thu, 23 Mar 2023 19:45:03 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: The Importance of Cybersecurity for Everyone: Why You Need to Get Involved
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/55eea6513b9a
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #digital_literacy #cybersecurity #shared_responsibility #personal_data_protection #cyber_threat
Medium
The Importance of Cybersecurity for Everyone: Why You Need to Get Involved
In today’s digital age, cybersecurity has become one of our most critical issues. With the increase in digital connectivity, cyber threats…
5 views
Daily Writeups
β€· Title: The Hidden Risk of Shared Admin Emails in Small Teams
════════════════════════
π€ͺ Author: Bl@ckC!pH3r
════════════════════════
β΄΅ Time: Fri, 16 May 2025 14:06:23 GMT
════════════════════════
βŒ— Tags: #hacking #credential_stuffing #hidden_risk #emails_security #shared_admin
Medium
The Hidden Risk of Shared Admin Emails in Small Teams
Alright, let’s talk about something that’s super common in small teams but often overlooked when it comes to security: Shared admin emails.
16 views
Daily Writeups
β€· Title: CVE-2025-41672 (CVSS 10): Critical JWT Certificate Flaw in WAGO Device Sphere Allows Full Remote Takeover
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 08 Jul 2025 00:00:09 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Authentication Bypass #CVSS 10.0 #cybersecurity #Device Sphere #ICS #industrial automation #JWT #Remote Control #SCADA #Shared Credentials #Vulnerability #WAGO
Daily CyberSecurity
CVE-2025-41672 (CVSS 10): Critical JWT Certificate Flaw in WAGO Device Sphere Allows Full Remote Takeover
A critical flaw (CVE-2025-41672, CVSS 10.0) in WAGO Device Sphere allows unauthenticated attackers full admin control via shared default JWT certificates. Update to v1.0.1 immediately!
22 views
Daily Writeups
β€· Title: Windows 11 Gets β€œShared Audio”: Play Sound Through Multiple Devices Simultaneously
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 21 Jul 2025 06:33:24 +0000
════════════════════════
βŒ— Tags: #Windows #Bluetooth #Multiple Audio Output #Shared Audio #Sound Settings #Tech Update #Windows 11 #Windows Insider
Daily CyberSecurity
Windows 11 Gets "Shared Audio": Play Sound Through Multiple Devices Simultaneously
Windows 11 is testing a new "shared audio" feature in Insider builds, allowing users to play sound through multiple connected audio output devices simultaneously.
13 views
Daily Writeups
β€· Title: Finally: Windows 11 Tests Shared Bluetooth Audio on Two Devices, Starting with Copilot+ PCs
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 03 Nov 2025 03:58:45 +0000
════════════════════════
βŒ— Tags: #Windows #Bluetooth #Copilot #LE Audio #Microsoft #Shared Audio #Snapdragon #Surface #Windows 11
Penetration Testing Tools
Finally: Windows 11 Tests Shared Bluetooth Audio on Two Devices, Starting with Copilot+ PCs
Microsoft began testing Shared Audio for Windows 11 (Build 26220.7051), enabling simultaneous playback on two Bluetooth devices. Feature is currently limited to Copilot+ PCs.
17 views
Daily Writeups
β€· Title: Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 03 Dec 2025 04:29:58 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CPanel #Critical Vulnerability #Directory Traversal #LPE #privilege escalation #Shared Hosting #Team Manager API
Daily CyberSecurity
Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover
A Critical (CVSS 9.3) LPE flaw in cPanel's Team Manager API allows a standard user to break out of their directory via path traversal and compromise the shared hosting server. Update immediately.
35 views
Daily Writeups
β€· Title: From $180 to $82,000 in 48 Hours: The Gemini API Key Leak Bankrupting Small Dev Teams
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 04 Mar 2026 04:26:40 +0000
════════════════════════
βŒ— Tags: #Data Leak #API Key Leak #billing alert #Cloud Security #Cybersecurity 2026 #developer cautionary tale #Gemini API #Google AI Studio #Google Cloud #Shared Responsibility Model #tech bankruptcy
Daily CyberSecurity
From $180 to $82,000 in 48 Hours: The Gemini API Key Leak Bankrupting Small Dev Teams
A Mexican dev team faces bankruptcy after a leaked Gemini API key racked up an $82,314 bill in 48 hours. Is Google Cloud's billing model to blame?
19 views
Daily Writeups
β€· Title: OceanLotus Hijacks PyPI to Deploy β€œZiChatBot” via Enterprise Chat APIs
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 07 May 2026 09:00:27 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Malware #APT #cybersecurity #infosec #kaspersky #malware #OceanLotus #PyPI #Python Security #Shared Libraries #supply chain attack #ZiChatBot #Zulip API
Daily CyberSecurity
OceanLotus Hijacks PyPI to Deploy "ZiChatBot" via Enterprise Chat APIs
OceanLotus targets Python developers worldwide via PyPI supply chain attacks. New ZiChatBot malware hijacks Zulip APIs for invisible C2 traffic. Patch now!
13 views
Daily Writeups
β€· Title: The Underminr Paradigm: Subverting DNS Filters via CDN Networks
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 27 May 2026 04:46:33 +0000
════════════════════════
βŒ— Tags: #Information Security #ADAMnetworks threat intelligence #cloud command and control traffic #cross tenant CDN routing exploit #Encrypted Client Hello ECH security #legacy domain fronting comparison #outminr network monitoring tool #Protective DNS bypass #Server Name Indication SNI spoofing #shared infrastructure website blacklisting #Underminr DNS evasion technique
Information Security News
Underminr DNS Evasion Technique Bypasses Protective DNS
ADAMnetworks uncovers Underminr, a critical DNS evasion technique impacting 88 million domains by weaponizing cross-tenant routing on shared CDNs.
32 views
Daily Writeups
β€· Title: Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 27 May 2026 04:37:24 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cpanel_jsonapi_func=redisAble log grep #CVE_2026_48172 root access #David Strydom security researcher #LiteSpeed cPanel plugin exploit #LiteSpeed WHM Plugin 5.3.1.0 update #lsws.redisAble logic error #remove LiteSpeed cPanel plugin #shared hosting privilege escalation #shared hosting sandbox escape #WebPros ecosystem defense
Information Security News
Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked global…
12 views
Daily Writeups
β€· Title: The Algorithmic Illusion: Threat Actors Weaponize Generative AI Shared Tunnels for Phishing
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 31 May 2026 10:14:13 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #ad_blocking extension endpoint defense #ChatGPT Canvas phishing campaign #Claude.ai shared conversation exploit #ClickFix terminal command lure #Google Ads malware distribution #MacSync infostealer deployment #malicious browser search redirection #Shared AI chat malvertising #trusted domain signature spoofing #user generated content safety bounds
Information Security News
Shared AI Chat Malvertising: Fraudsters Weaponize ChatGPT & Claude
Hackers are deploying shared AI chat malvertising in Google Ads, exploiting trusted chatgpt.com and claude.ai links to infect users with malware.
21 views
Daily Writeups
β€· Title: LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Tue, 16 Jun 2026 00:00:13 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Active Exploitation #CageFS #CloudLinux #CPanel #CVE_2026_54420 #LiteSpeed #privilege escalation #Shared Hosting
Daily CyberSecurity
LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
CVE-2026-54420, a LiteSpeed cPanel privilege escalation flaw, is exploited in the wild to gain root on shared hosting. Patch to plugin v2.4.8 now.
12 views
Daily Writeups
β€· Title: Claude AI Shared Chats Surfaced in Google Over a Config Error
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Mon, 27 Jul 2026 03:56:17 +0000
════════════════════════
βŒ— Tags: #Data Leak #Anthropic #Claude AI #Data Privacy #Search Indexing #Shared Links
Daily CyberSecurity
Claude AI Shared Chats Surfaced in Google Over a Config Error
Over the weekend, users noticed something unsettling. Claude AI conversation shares were appearing in Google search results. Anthropic had not blocked search engines from crawling those share link…
20 views