Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 01:57:59 +0000
════════════════════════
⌗ Tags: #Cyber Security #Amazon Threat Intelligence #APT44 #Credential Replay #Critical Infrastructure #Curly COMrades #Edge Device #GRU #misconfiguration #SANDWORM
Daily CyberSecurity
Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices
Sandworm (APT44) has shifted tactics, favoring misconfigured edge devices over complex exploits to breach energy and telecom sectors via credential replay.
20 views
Daily Writeups
⤷ Title: “Sliver” in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Bangladesh #Bangladesh Airforce #c0baltstrik3d #CVE_2025_55182 #cyber_espionage #Edge Security #Fast Reverse Proxy #FortiWeb #FRP #Pakistan #React2Shell #Sliver C2
Daily CyberSecurity
"Sliver" in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
Threat actor uses React2Shell to deploy Sliver C2 on FortiWeb devices, using a Bangladesh Airforce decoy to target govt and financial sectors.
32 views
Daily Writeups
⤷ Title: The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:06:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Browser Extensions #chrome #cyber_espionage #DarkSpectre #Edge #firefox #GhostPoster #KOI Security #malware #ShadyPanda #state_sponsored #Zoom Stealer
Daily CyberSecurity
The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
Koi Security unmasks DarkSpectre, a Chinese threat group that used 300+ browser extensions to spy on 8.8M users and steal corporate meeting data.
23 views
Daily Writeups
⤷ Title: The AI-Found Zero-Day: Critical CVE-2025-54322 Leaves 70,000 XSpeeder Devices Exposed
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:08:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_54322 #Edge Computing #Industrial Security #pwn.ai #Python eval() #RCE #Root Exploit #SD_WAN #SXZOS #XSpeeder #zero_day
Penetration Testing Tools
The AI-Found Zero-Day: Critical CVE-2025-54322 Leaves 70,000 XSpeeder Devices Exposed
A critical vulnerability has been discovered in XSpeeder devices that could allow unauthenticated remote execution of arbitrary code.
20 views
Daily Writeups
⤷ Title: The Ubiquitous Brain: Arm Unveils the Era of Physical AI and AI-Defined Platforms
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 04:10:02 +0000
════════════════════════
⌗ Tags: #Technology #ARM #Autonomous Vehicles #CES 2026 #Edge AI #Matter Standard #NVIDIA Jetson Thor #Physical AI #Rivian #Robotics #Smart Home #Tesla AI5 #Windows on Arm
Daily CyberSecurity
The Ubiquitous Brain: Arm Unveils the Era of Physical AI and AI-Defined Platforms
At CES 2026, Arm positioned its “Computing Platform” at the vanguard of technological discourse, offering profound insights into the post-AI epoch. The firm characterized 2025 as a piv…
15 views
Daily Writeups
⤷ Title: Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:32:37 +0000
════════════════════════
⌗ Tags: #Technology #Browser Updates 2026 #Copilot #CSV Export #Data Loss #Edge Collections #microsoft edge #Microsoft Edge Dev #Sunsetting #Tech News #Web Research
Daily CyberSecurity
Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears
Users enrolled in the Microsoft Edge Dev Channel may have recently encountered a disconcerting notification: Microsoft intends to sunset the Collections feature, after which users will be preclude…
14 views
Daily Writeups
⤷ Title: The Silent Listener: How “Reprompt” Hijacks Microsoft Copilot with One Click
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:35:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Data Exfiltration #Edge Browser #Infosec News #Microsoft Copilot #Prompt Injection #Reprompt #Varonis #Vulnerability 2026 #Windows Update
Penetration Testing Tools
The Silent Listener: How "Reprompt" Hijacks Microsoft Copilot with One Click
Security analysts at Varonis have unveiled a sophisticated offensive targeting Microsoft’s AI assistant, designated as Reprompt. This maneuver
19 views
Daily Writeups
⤷ Title: The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:38:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AiTM #Chinese Threat Actors #Cisco Talos #DarkNimbus #DKnife #Edge Devices #Malware Analysis #router security #ShadowPad #Traffic Manipulation #yitiji
Daily CyberSecurity
The "All-in-One" Spy: DKnife Malware Hijacks Routers to Swap Downloads
Cisco Talos exposes DKnife, a router malware that inspects traffic and swaps legitimate downloads for ShadowPad backdoors. Active since 2019.
17 views
Daily Writeups
⤷ Title: Shattering the Edge: Cisco Talos Unmasks “DKnife,” the 7-Module Framework Hijacking Your Router
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 04:19:48 +0000
════════════════════════
⌗ Tags: #Malware #AitM attack #China_nexus APT #Cisco Talos #DarkNimbus #DKnife #edge device security #Linux malware #network infrastructure #router malware #ShadowPad #Tech News 2026 #WizardNet
Penetration Testing Tools
Shattering the Edge: Cisco Talos Unmasks "DKnife," the 7-Module Framework Hijacking Your Router
Security analysts at Cisco Talos have unmasked a clandestine offensive platform that has operated surreptitiously within network infrastructure
23 views
Daily Writeups
⤷ Title: Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:50:32 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT44 #cyber_espionage #Defense Industrial Base #Drone Security #Edge Device Security #Google Threat Intelligence #GTIG #Insider Threat #North Korean IT workers #SANDWORM
Daily CyberSecurity
Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector
GTIG report: Defense Industrial Base faces "constant siege" from Russian drone hackers & North Korean IT insiders. Learn the new threats.
16 views