Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.53K subscribers

2 photos

130K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.53K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Wed, 12 Apr 2023 23:43:48 GMT
———————————————
✏️Title: Hacking EV Charging Stations
———————————————
📎Link: https://medium.com/p/2aa7ae8f427c
———————————————
Tags: #hacking #ev

Hacking EV Charging Stations

How the rapid proliferation of EV charging stations is already leading to attacks on the stations and the vehicles themselves.

5 views00:00

🔖New Writeup❗️
———————————————
🗓Date: Wed, 05 Jul 2023 05:25:24 GMT
———————————————
✏️Title: Electric Vehicle Security
———————————————
📎Link: https://medium.com/p/d00c35bfe94d
———————————————
Tags: #electric_car #ev #electric_vehicles #cybersecurity #pentesting

Electric Vehicle Security

Electric vehicles are a trending technology that makes modern cars more connected, safer, more comfortable, more energy efficient, and more…

7 views07:02

🔖New Writeup❗️
———————————————
🗓Date: Mon, 18 Sep 2023 16:50:40 GMT
———————————————
✏️Title: Ransomware Attacks Leveraging Phishing Tactics and EV(Extended Validation)Certificates:-
———————————————
📎Link: https://medium.com/p/3827507d6594
———————————————
Tags: #email_security #ransomware #ev #phishing_attacks #cybersecurity

Ransomware Attacks Leveraging Phishing Tactics and EV(Extended Validation)Certificates:-

20 views17:02

⤷ Title: Critical Flaws in Phoenix Contact EV Charging Controllers Expose Infrastructure to Remote Code Execution and Unauthorized Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:00:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CERT@VDE #Charging Controller #CHARX SEC_3xxx #cybersecurity #Electric Vehicle #EV #Phoenix Contact #privilege escalation #rce #Remote Code Execution #Vulnerability

Daily CyberSecurity

Critical Flaws in Phoenix Contact EV Charging Controllers Expose Infrastructure to Remote Code Execution and Unauthorized Access

Phoenix Contact warns of critical flaws (CVE-2025-25270 CVSS 9.8 RCE, CVE-2025-25268 Auth Bypass, CVE-2025-25271 OCPP Reconfig, CVE-2025-25269 LPE) in CHARX SEC-3xxx EV controllers.

16 views03:05

⤷ Title: Signed Drivers Fueling Kernel Attacks: 620+ Malicious Drivers & 80+ Compromised Certs Target Windows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 03:03:59 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Digital Signatures #EV Certificates #Group_IB #kernel #malware #ransomware #Signed Drivers #WHCP #windows #Windows Hardware Compatibility Program

Penetration Testing Tools

Signed Drivers Fueling Kernel Attacks: 620+ Malicious Drivers & 80+ Compromised Certs Target Windows

Group-IB exposes 620+ malicious digitally signed drivers and 80+ compromised certificates since 2020, fueling stealthy Windows kernel attacks and bypassing security defenses.

38 views05:03

⤷ Title: EV Charging Under Attack: New Vulnerabilities Threaten Vehicles & Grids
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 10:07:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #CitrineOS #CSMS #cyberattack #cybersecurity #Denial of Service #DoS #electric vehicles #EV charging #IoT #man_in_the_middle #PLC #Powerline Communication #security research #ssh #StEVe

Penetration Testing Tools

EV Charging Under Attack: New Vulnerabilities Threaten Vehicles & Grids

A new study reveals critical cybersecurity flaws in EV charging, exposing vehicles and networks to attacks like electricity theft and system shutdowns.

9 views11:04

⤷ Title: Critical Flaw (CVSS 9.8) in Ubiquiti UniFi Connect EV Stations Allows Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 03:45:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Command Injection #cybersecurity #EV Station #rce #Remote Code Execution #Ubiquiti #UniFi Connect

Daily CyberSecurity

Critical Flaw (CVSS 9.8) in Ubiquiti UniFi Connect EV Stations Allows Remote Code Execution

Ubiquiti has issued an advisory for a critical flaw (CVE-2025-24285, CVSS 9.8) in its UniFi Connect EV Stations, allowing remote command injection and unauthenticated RCE.

14 views04:04

⤷ Title: Why Your Electric Vehicle Might Be More Vulnerable Than You Think
════════════════════════
𐀪 Author: Victor Yan
════════════════════════
ⴵ Time: Sun, 10 Aug 2025 19:07:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking_vehicle #ev_charging_station #connected_cars #electric_vehicles

Why Your Electric Vehicle Might Be More Vulnerable Than You Think

Electric vehicles are changing how North America moves. They offer cleaner transport, less reliance on fossil fuels, and the convenience of…

9 views20:04

⤷ Title: Geely Launches World’s Largest Safety Center in Ningbo, Targeting Zero Fatalities & Zero Data Leaks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 03:59:46 +0000
════════════════════════
⌗ Tags: #Information Security #Automotive Safety #Comprehensive Safety 2.0 #Crash Test #Cyberattack Resilience #EV Safety #Geely #Lynk & Co #Ningbo #Zero Fatalities

Penetration Testing Tools

Geely Launches World's Largest Safety Center in Ningbo, Targeting Zero Fatalities & Zero Data Leaks

Ningbo is a major port city on China’s eastern seaboard, a key industrial hub of Zhejiang Province and

24 views04:03

⤷ Title: Shadows Vanish: The “Global Man” Exit Scam Leaves Malware Operators in the Dark
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:34:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #code_signing certificates #cybercrime forums #digital certificates #EV Certificates #Exit Scam #Global Man #kernel_mode drivers #malware obfuscation #security breach 2026 #Shadow Economy #threat intelligence

Penetration Testing Tools

Shadows Vanish: The "Global Man" Exit Scam Leaves Malware Operators in the Dark

In the clandestine digital underworld, a prominent purveyor of code-signing certificates has executed a high-profile disappearance. The Global

18 views04:04

⤷ Title: Critical CISA Advisory Unmasks Severe Flaws in EV2GO Charging Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 03:50:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA advisory #Critical Infrastructure #CVE_2026_24731 #EV Charging Security #EV2GO #ICS #ICSA_26_057_04 #industrial control systems #infosec #OCPP #WebSocket Vulnerability

Daily CyberSecurity

Critical CISA Advisory Unmasks Severe Flaws in EV2GO Charging Networks

CISA issues an urgent ICS advisory (ICSA-26-057-04) for the EV2GO charging platform. Critical 9.4 severity flaws allow for session hijacking and station impersonation.

44 views05:03

⤷ Title: EV Charging Grid Alert: Critical Flaws Exposed in Everon OCPP Backends
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 00:22:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26288 #cybersecurity #EV Charging Security #Everon #infosec #OCPP #Session Hijacking #Smart Grid #threat intelligence #WebSocket Vulnerability

Daily CyberSecurity

EV Charging Grid Alert: Critical Flaws Exposed in Everon OCPP Backends

Critical authentication flaws (CVE-2026-26288) in Everon's OCPP backend allowed hackers to hijack EV chargers, forcing a complete platform shutdown.

19 views01:04

⤷ Title: Signed Malware Masquerading as Workplace Apps Deploys Persistent Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:13:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #EV Certificate Phishing #infosec #malware #MeshAgent #Microsoft Defender #RMM Backdoors #ScreenConnect #Tactical RMM #threat intelligence

Daily CyberSecurity

Signed Malware Masquerading as Workplace Apps Deploys Persistent Backdoors

Microsoft Defender exposes a new phishing campaign using EV certificates and fake Teams invites to silently deploy RMM backdoors on corporate networks.

16 views01:03

⤷ Title: Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:32:06 +0000
════════════════════════
⌗ Tags: #Malware #Browser Error #cyber security 2026 #DigiCert #EV Code Signing #false positive #Microsoft Defender #Root Certificate #SSL/TLS #Trojan:Win32/Cerdigicert.A!dha #Windows 10 #Windows 11 Security

Daily CyberSecurity

Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems

Microsoft Defender erroneously flagged DigiCert root certificates as "Cerdigicert" malware. Discover the fix and how to restore your system's trusted root store.

7 views09:04

⤷ Title: Plugged In, Left Open — How I Found 951 Exposed EV Charging Stations Worldwide Using Modat Magnify
════════════════════════
𐀪 Author: hacker_might
════════════════════════
ⴵ Time: Sat, 16 May 2026 10:32:36 GMT
════════════════════════
⌗ Tags: #osint_investigation #penetration_testing #osint_tool #osint #ev_charging

Plugged In, Left Open — How I Found 951 Exposed EV Charging Stations Worldwide Using Modat Magnify

The World is Going Electric. And Apparently, Going Public Too.

31 views11:04

⤷ Title: Velvet Chollima Leaves Backend Keys Inside Critical GitLab Dead-Drop Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:16:41 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Theft #cyber_espionage #EV Code Signing #GitLab Dead_Drop #infosec #Keylogger #Malware Analysis #OPSEC Failure #threat intelligence #Tralert FX #Velvet Chollima

Daily CyberSecurity

Velvet Chollima Leaves Backend Keys Inside Critical GitLab Dead-Drop Malware

A routine investigation into a low-detection installer has blown the doors off a highly organized, financially motivated cyber-espionage campaign. Orchestrated by a single operator or small team l…

20 views09:04