Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: The GenAI Security Paradox — Intelligence vs. Determinism
════════════════════════
𐀪 Author: Shiki65536@TechRoamer
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 01:10:38 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #application_security #ai_security #cybersecurity #genai
Medium
The GenAI Security Paradox — Intelligence vs. Determinism
This week, I attended the Melbourne Secure Software & AppSec Summit 2026.
3 views
Daily Writeups
⤷ Title: Your Agent’s Command Allowlist Is a Parser, and It Disagrees With Your Shell
════════════════════════
𐀪 Author: Krishna
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 12:15:50 GMT
════════════════════════
⌗ Tags: #application_security #software_engineering #cybersecurity #ai_agent #devops
Medium
Your Agent’s Command Allowlist Is a Parser, and It Disagrees With Your Shell
Six disclosed findings across Anthropic, Google, and OpenAI CI integrations share one root cause. An explanation of what it is, why each…
3 views
Daily Writeups
⤷ Title: The Request Changed. The Security Rule Didn’t.
════════════════════════
𐀪 Author: Akshit Kakani
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 11:55:32 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #penetration_testing #application_security #cybersecurity
Medium
The Request Changed. The Security Rule Didn’t.
Exploring HTTP Verb Tampering and Broken Access Control
2 views
Daily Writeups
⤷ Title: Your AI Agent Can Use a Computer. Can You Approve Its Authority?
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 11:30:57 GMT
════════════════════════
⌗ Tags: #ai_security #cybersecurity #application_security #ai_agent_security #penetration_testing
Medium
Your AI Agent Can Use a Computer. Can You Approve Its Authority?
Browser-capable agents turn ordinary SaaS permissions into an execution layer. Before launch, leadership needs evidence that identity…
2 views
Daily Writeups
⤷ Title: Testing Authorization Boundaries in Multi-Region, Multi-Tenant Applications
════════════════════════
𐀪 Author: Mdporschaa
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 11:16:01 GMT
════════════════════════
⌗ Tags: #application_security #appsec #cybersecurity #privilege_escalation
Medium
Testing Authorization Boundaries in Multi-Region, Multi-Tenant Applications
How I approach authorization boundary testing when the same application serves multiple accounts and multiple regions from a shared…
2 views
Daily Writeups
⤷ Title: I Built an AI-Assisted Threat Modeling Pipeline. The Hardest Part Wasn’t Finding Threats.
════════════════════════
𐀪 Author: Vinibrisola
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 21:46:53 GMT
════════════════════════
⌗ Tags: #devsecops #application_security #ai_security #threat_modeling #security_engineering
Medium
I Built an AI-Assisted Threat Modeling Pipeline. The Hardest Part Wasn’t Finding Threats.
What I learned while trying to turn architecture diagrams into traceable security decisions and actionable engineering work.
2 views
Daily Writeups
⤷ Title: Your API Is Not Your System
════════════════════════
𐀪 Author: Andrews Ferreira
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #application_security #offensive_security #api_security #threat_modeling #api_security_testing
Medium
Your API Is Not Your System
Why attackers model workflows while engineers secure endpoints
2 views
Daily Writeups
⤷ Title: App Permissions: Why “Allow” Isn’t Always Safe — Sujay Chidurala
════════════════════════
𐀪 Author: KLEAP Institute of Information Security
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 07:25:05 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #information_security
Medium
App Permissions: Why “Allow” Isn’t Always Safe — Sujay Chidurala
( KIIS Intern)
9 views
Daily Writeups
⤷ Title: MVP Security Checklist Before You Scale
════════════════════════
𐀪 Author: Secvura
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 07:01:02 GMT
════════════════════════
⌗ Tags: #software_development #cybersecurity #startup #saas #application_security
Medium
MVP Security Checklist Before You Scale
Securing a minimum viable product before scaling requires shifting your focus from pure functionality to risk reduction. Startups must keep…
11 views
Daily Writeups
⤷ Title: Secure Logging on Android: What Should Never Hit Logcat
════════════════════════
𐀪 Author: Khizar Khan
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 06:12:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #data_privacy #android_development #application_security #mobile_security
Medium
Secure Logging on Android: What Should Never Hit Logcat
Part 4 of our Android security series. Part 3 covered Certificate Pinning — this post covers a much quieter leak: your own log statements.
9 views