Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Vulnerability Reporting Using Grafana
════════════════════════
𐀪 Author: ANKIT CHANDRA PRASAD
════════════════════════
ⴵ Time: Sun, 05 Jan 2025 11:18:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #trivy_grafana_integration #vulnerability_reporting #trivy_scan_results
Medium
Vulnerability Reporting Using Grafana
Introduction
17 views
Daily Writeups
⤷ Title: Securing Kubernetes with Trivy: AI-Powered Vulnerability Scanning
════════════════════════
𐀪 Author: Prem kumar Akula
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 23:01:32 GMT
════════════════════════
⌗ Tags: #application_security #kubernetes_security #trivy
Medium
Securing Kubernetes with Trivy: AI-Powered Vulnerability Scanning
Kubernetes is the backbone of modern cloud-native applications, but its complexity makes it a prime target for security vulnerabilities…
42 views
Daily Writeups
⤷ Title: Using SBOMs to detect possible Dependency Confusion
════════════════════════
𐀪 Author: Dmitry Protsenko
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 02:34:25 GMT
════════════════════════
⌗ Tags: #devsecops #sbom #cybersecurity #trivy #supply_chain
Medium
Using SBOMs to detect possible Dependency Confusion
Learn how to leverage CycloneDX SBOMs and automated registry checks to detect and prevent dependency confusion attacks by identifying…
11 views
Daily Writeups
⤷ Title: The Rise of the Autonomous Adversary: How “Hackerbot-Claw” Hijacked Major Open-Source Repositories
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 06:53:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aqua Security #autonomous AI bot #CI/CD Security #Datadog #GitHub Actions #GITHUB_TOKEN #hackerbot_claw #Microsoft #pull_request_target #supply chain attack #Tech News 2026 #Trivy
Penetration Testing Tools
The Rise of the Autonomous Adversary: How "Hackerbot-Claw" Hijacked Major Open-Source Repositories
According to a StepSecurity report, over the past week, an unidentified bot with the telling name “hackerbot-claw” launched
12 views
Daily Writeups
⤷ Title: The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:45:06 +0000
════════════════════════
⌗ Tags: #Data Leak #AWS #Checkmarx #Cisco #cloud security #Cybersecurity 2026 #Github #Infosec #LiteLLM #Source Code Leak #supply chain attack #TeamPCP #Trivy
Information Security News
The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
A cyber offensive targeting one of the preeminent information technology conglomerates originated from a seemingly mundane instrument for vulnerability assessment. Consequently, adversaries succes…
6 views
Daily Writeups
⤷ Title: The EU’s AWS “Master Key”: How a Compromised Trivy Update Leaked 340GB of Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 09:40:11 +0000
════════════════════════
⌗ Tags: #Data Leak #API Key Theft #aws security #CERT_EU #CI/CD security #data leak #EU Security #European Commission #infosec #ShinyHunters #supply chain attack #TeamPCP #Trivy
Daily CyberSecurity
The EU’s AWS "Master Key": How a Compromised Trivy Update Leaked 340GB of Data
A massive supply-chain attack hit the European Commission via a compromised Trivy update. 340GB of data was leaked by ShinyHunters. Rotate your AWS keys!
3 views
Daily Writeups
⤷ Title: Shadow Nodes: Deciphering the Rise of Ashab al-Yamin in the European Cyber Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:14:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ashab al_Yamin #BreachForums #ChaCha20_Poly1305 #CI/CD Security #Cyber Propaganda #Cybercrime 2026 #Double Extortion #European Security #Geopolitical Threats #Harakat Ashab al_Yamin al_Islamia #Information Warfare #Iranian Proxy #LiteLLM #RaaS #Sabereen News #supply chain attack #TeamPCP #Tech Against Terrorism #Telegram Security #Trivy #Vect Ransomware
Penetration Testing Tools
Shadow Nodes: Deciphering the Rise of Ashab al-Yamin in the European Cyber Landscape
The emergence of the nascent hacking collective Harakat Ashab al-Yamin al-Islamia has piqued the curiosity of security analysts
18 views
Daily Writeups
⤷ Title: The Assembly Line of Extortion: How Vect and TeamPCP Weaponized the Global Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:11:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BreachForums #ChaCha20_Poly1305 #CI/CD Security #Cybercrime 2026 #Double Extortion #LiteLLM #RaaS #supply chain attack #TeamPCP #Trivy #Vect Ransomware
Penetration Testing Tools
The Assembly Line of Extortion: How Vect and TeamPCP Weaponized the Global Software Supply Chain
Vect ransomware and TeamPCP have joined forces to industrialize cybercrime. Discover how they poisoned Trivy and LiteLLM to hijack 1,000+ corporate networks.
13 views
Daily Writeups
⤷ Title: Checkmarx Falls Victim to Credential Harvesting Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:54:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #breach #Checkmarx #cybersecurity #data exfiltration #GitHub Security #infosec #LAPSUS$ #Malicious code #Software Integrity #supply chain attack #Trivy
Daily CyberSecurity
Checkmarx Falls Victim to Credential Harvesting Attack
Checkmarx discloses a major GitHub breach via a Trivy supply chain flaw. Attackers injected malicious code and exfiltrated data for a month. Get the facts.
28 views
Daily Writeups
⤷ Title: Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:35:39 +0000
════════════════════════
⌗ Tags: #Data Leak #Checkmarx #CVE_2026_33634 #data leak #GitHub Breach #KICS #LAPSUS$ #Mandiant #Open VSX #supply chain attack #TeamPCP #Trivy #VS Code extensions
Penetration Testing Tools
Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
Checkmarx is grappling with a distressing sequel to its March security breach, as data exfiltrated from a private
11 views