Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: SimpleHelp Urgents to Patch Critical Security Vulnerabilities
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 15 Jan 2025 01:35:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #SimpleHelp #SimpleHelp vulnerabilities
Daily CyberSecurity
SimpleHelp Urgents to Patch Critical Security Vulnerabilities
Learn about critical vulnerabilities in SimpleHelp, a remote support software tool. Understand the risks posed to users and the potential for attackers to compromise servers and client machines.
13 views
Daily Writeups
⤷ Title: SimpleHelp RMM Vulnerabilities Exploited in Latest Cyberattack Campaign
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 28 Jan 2025 01:58:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_57726 #CVE_2024_57727 #CVE_2024_57728 #SimpleHelp
Cybersecurity News
SimpleHelp RMM Vulnerabilities Exploited in Latest Cyberattack Campaign
Stay informed about the latest cyberattack targeting SimpleHelp RMM software. Learn about the vulnerabilities and potential damage caused by this campaign.
15 views
Daily Writeups
⤷ Title: Threat Actors Exploit SimpleHelp Vulnerabilities to Deploy Sliver Backdoor
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 10 Feb 2025 01:56:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability #Akira ransomware #AnyDesk #OpenSSH #SimpleHelp #SimpleHelp vulnerabilities #Sliver Backdoor
Cybersecurity News
Threat Actors Exploit SimpleHelp Vulnerabilities to Deploy Sliver Backdoor
Field Effect reveals a cyberattack that used newly discovered SimpleHelp RMM software vulnerabilities to deploy the Sliver backdoor and establish persistence mechanisms.
18 views
Daily Writeups
⤷ Title: Medusa Ransomware Surges: Attacks Jump 42% as Cybercriminals Expand Operations
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 10 Mar 2025 01:48:41 +0000
════════════════════════
⌗ Tags: #Malware #AnyDesk #LockBit #Medusa Ransomware #Medusa ransomware attacks #MedusaLocker ransomware #Mesh Agent #Noberus #SimpleHelp #Spearwing
Daily CyberSecurity
Medusa Ransomware Surges: Attacks Jump 42% as Cybercriminals Expand Operations
Explore the rise of Medusa ransomware attacks, increasing by 42%. Understand the threat and protective measures you can take.
18 views
Daily Writeups
⤷ Title: SimpleHelp: CVE-2024–57727 : TryHackMe
════════════════════════
𐀪 Author: Jai Bhattachhary
════════════════════════
ⴵ Time: Fri, 04 Apr 2025 07:10:31 GMT
════════════════════════
⌗ Tags: #tryhackme #simplehelp #cve #pentesting
Medium
SimpleHelp: CVE-2024–57727 : TryHackMe
Learn how attackers can exploit CVE-2024–57727 and how to detect that.
24 views
Daily Writeups
⤷ Title: Ransomware Attack: MSP’s RMM Tool Abused to Spread DragonForce
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 29 May 2025 00:08:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2024_57726 #CVE_2024_57727 #cyberattack #cybersecurity #DragonForce #MSP #ransomware #RMM #SimpleHelp
Daily CyberSecurity
Ransomware Attack: MSP's RMM Tool Abused to Spread DragonForce
Attackers compromised an MSP's RMM tool (SimpleHelp) to deploy DragonForce ransomware across customer environments.
5 views
Daily Writeups
⤷ Title: Urgent CISA Alert: Ransomware Actors Exploiting SimpleHelp RMM Flaw (CVE-2024-57727)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 02:47:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #CISA #CVE_2024_57727 #cybersecurity #Double Extortion #Path Traversal #ransomware #Remote Monitoring and Management #SimpleHelp RMM #supply chain attack #Vulnerability
Daily CyberSecurity
Urgent CISA Alert: Ransomware Actors Exploiting SimpleHelp RMM Flaw (CVE-2024-57727)
CISA warns of active exploitation of a SimpleHelp RMM flaw (CVE-2024-57727) by ransomware actors, impacting utility billing software providers and their customers.
13 views
Daily Writeups
⤷ Title: Muck Stealer Malware Used Alongside Phishing in New Attack Waves
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 12 Sep 2025 11:11:33 +0000
════════════════════════
⌗ Tags: #Security #Malware #Phishing Scam #ConnectWise RAT #Cyber Attack #Cybersecurity #Fraud #Info Stealer #Muck Stealer #Phishing #SimpleHelp RAT
Hackread
Muck Stealer Malware Used Alongside Phishing in New Attack Waves
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
37 views
Daily Writeups
⤷ Title: MSP Nightmare: Medusa & DragonForce Exploit SimpleHelp RMM Flaws for SYSTEM Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 00:11:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2024_57726 #DragonForce #Medusa #MSP #ransomware #RMM #SimpleHelp #SupplyChain #SystemAccess
Daily CyberSecurity
MSP Nightmare: Medusa & DragonForce Exploit SimpleHelp RMM Flaws for SYSTEM Access
Medusa & DragonForce RaaS groups weaponize SimpleHelp RMM flaws (CVE-2024-57726/7/8) to gain SYSTEM-level access to customer networks. Immediate patch needed.
15 views
Daily Writeups
⤷ Title: Exploited in the Wild: Critical BeyondTrust Flaw (CVSS 9.9) Opens Door to Network Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 03:58:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arctic Wolf #BeyondTrust #CISA KEV #CVE_2026_1731 #lateral movement #Patch Alert #Privileged Remote Access #Remote Support #RMM #SimpleHelp
Daily CyberSecurity
Exploited in the Wild: Critical BeyondTrust Flaw (CVSS 9.9) Opens Door to Network Takeover
Arctic Wolf warns of CVE-2026-1731, a critical BeyondTrust flaw exploited in the wild. Attackers use it to deploy backdoors. Patch self-hosted instances now.
18 views
Daily Writeups
⤷ Title: Hackers Weaponize DocuSign and SimpleHelp in Stealthy New Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:37:02 +0000
════════════════════════
⌗ Tags: #Malware #Cofense PDC #Cyber Security #DocuSign Phishing #infosec #JWrapper #malware #rat #Remote Access Trojan #SimpleHelp #social engineering
Daily CyberSecurity
Hackers Weaponize DocuSign and SimpleHelp in Stealthy New Campaign
Cybercriminals are using fake DocuSign emails and the JWrapper framework to stealthily deploy SimpleHelp remote access tools. Learn how to spot the threat.
18 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 20 – April 26, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 14:37:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CISA KEV #CVSS 10.0 #Cyber Intelligence #infosec #LMDeploy #Paperclip AI #SimpleHelp #TeamCity #Vulnerability Digest #wordpress security
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 20 – April 26, 2026)
Triaging 1,200+ new flaws: AI toolkits and remote support under fire. Get the CISA KEV breakdown and CVSS 10.0 patches for the week of April 20,Triaging 1,200+ new flaws: AI toolkits and remote support under fire. Get the CISA KEV breakdown and CVSS 10.0…
20 views
Daily Writeups
⤷ Title: Under Active Fire: CISA Warns of New Exploits in Samsung, SimpleHelp, and D-Link Hardware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:18:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2025_29635 #Cyber Security 2026 #D_Link DIR_823X #KEV Catalog #Mirai botnet #path traversal #remote code execution #Samsung MagicINFO #SimpleHelp
Penetration Testing Tools
Under Active Fire: CISA Warns of New Exploits in Samsung, SimpleHelp, and D-Link Hardware
The United States Cybersecurity and Infrastructure Security Agency (CISA) has once again augmented its repository of vulnerabilities identified
19 views
Daily Writeups
⤷ Title: Attackers Hijack Trusted RMM Tools to Create Invisible, Permanent Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 08:15:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #infosec #living_off_the_land #persistence #phishing #RMM Hijacking #Safe Mode #ScreenConnect #Securonix #SimpleHelp #social engineering #Threat Hunting
Daily CyberSecurity
Attackers Hijack Trusted RMM Tools to Create Invisible, Permanent Backdoors
Securonix exposes an 80+ organization breach using "self-healing" RMM tools and Safe Mode persistence. Standard antivirus is blind—learn how to hunt it!
11 views
Daily Writeups
⤷ Title: SimpleHelp Authentication Bypass Exploited to Hijack Remote Endpoints
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 03:55:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_48558 #Horizon3.ai #OIDC #SimpleHelp
Daily CyberSecurity
SimpleHelp Authentication Bypass Exploited to Hijack Remote Endpoints
A critical SimpleHelp authentication bypass flaw leaves servers open. Attackers exploit the OIDC authentication flow to gain technician control.
9 views
Daily Writeups
⤷ Title: SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 01:43:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_48558 #Djinn Stealer #information stealer #MSP Security #OIDC #RMM security #SimpleHelp #TaskWeaver
Daily CyberSecurity
SimpleHelp Authentication Bypass Exploited in the Wild to Deploy TaskWeaver and Djinn Stealer
On 29 June 2026, CISA added CVE-2026-48558 to its Known Exploited Vulnerabilities catalog. The flaw is a critical SimpleHelp authentication bypass in the OIDC login flow. Attackers now use it in t…
30 views