Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.52K subscribers

2 photos

129K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.52K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Sun, 13 Aug 2023 07:11:36 GMT
———————————————
✏️Title: Dead Man’s PLC (DM-PLC)
———————————————
📎Link: https://medium.com/p/b1c5f314f3ef
———————————————
Tags: #cybersecurity #plc #ransomware

Dead Man’s PLC (DM-PLC)

You can just image the trailer …

16 views08:02

⤷ Title: OT Lab: Hacking OpenPLC
════════════════════════
𐀪 Author: Sulaiman Alhasawi
════════════════════════
ⴵ Time: Fri, 28 Feb 2025 15:45:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #plc #open_plc #ot_security

OT Lab: Hacking OpenPLC

Having an OT lab is crucial for any OT security practitioner or learner. It’s where you gain practical, hands-on skills that can’t be…

30 views17:04

⤷ Title: Industrial Systems at Risk: Critical Mitsubishi MELSEC Flaw (CVSS 9.1), No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 29 May 2025 11:03:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #cybersecurity #dos #industrial control systems #information leak #MELSEC iQ_F #Mitsubishi Electric #no patch #PLC

Daily CyberSecurity

Industrial Systems at Risk: Critical Mitsubishi MELSEC Flaw (CVSS 9.1), No Patch

A critical Mitsubishi MELSEC iQ-F Series CPU module flaw allows remote DoS and info leak. No software patch available.

44 views12:03

⤷ Title: Industrial Control Systems (ICS) and SCADA: Operations, Vulnerabilities, and Cyber Defense…
════════════════════════
𐀪 Author: Steven Juliano
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 06:18:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #industrial #scada #automation #plc

Industrial Control Systems (ICS) and SCADA: Operations, Vulnerabilities, and Cyber Defense Strategies

Welcome back to the chronicles of my IDN Bootcamp Cyber Security Series. After exploring the malware analysis & investigation in the…

14 views07:06

⤷ Title: WAGO Device Manager Vulnerabilities Expose Critical Industrial Infrastructure to Remote Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:08:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_25264 #CVE_2025_25265 #cybersecurity #ICS #Industrial Security #PLC #security update #Vulnerabilities #WAGO

Daily CyberSecurity

WAGO Device Manager Vulnerabilities Expose Critical Industrial Infrastructure to Remote Exploits

WAGO Device Manager security updates address two vulnerabilities allowing unauthenticated remote access to sensitive system files.

17 views01:04

⤷ Title: EV Charging Under Attack: New Vulnerabilities Threaten Vehicles & Grids
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 10:07:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #CitrineOS #CSMS #cyberattack #cybersecurity #Denial of Service #DoS #electric vehicles #EV charging #IoT #man_in_the_middle #PLC #Powerline Communication #security research #ssh #StEVe

Penetration Testing Tools

EV Charging Under Attack: New Vulnerabilities Threaten Vehicles & Grids

A new study reveals critical cybersecurity flaws in EV charging, exposing vehicles and networks to attacks like electricity theft and system shutdowns.

9 views11:04

⤷ Title: Industrial Intrusion CTF (THM) — OT Challenge “Kaboom” Write-up
════════════════════════
𐀪 Author: 0xZeus
════════════════════════
ⴵ Time: Mon, 28 Jul 2025 11:13:18 GMT
════════════════════════
⌗ Tags: #plc #hacking #tryhackme_writeup #ics_security #scada

Industrial Intrusion CTF (THM) — OT Challenge “Kaboom” Write-up

Hi it me Baddi Mohammed aka (0xZeus)

11 views13:04

⤷ Title: CISA Emergency Alert: Critical RCE Flaw (CVSS 10.0) Exposes AutomationDirect PLCs to Unauthenticated Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 26 Oct 2025 08:51:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AutomationDirect #CISA #Critical Vulnerability #CVE_2025_61934 #CVSS 10.0 #ICS security #PLC #rce

Daily CyberSecurity

CISA Emergency Alert: Critical RCE Flaw (CVSS 10.0) Exposes AutomationDirect PLCs to Unauthenticated Takeover

CISA warned of 9 flaws in AutomationDirect PLCs. The Critical RCE (CVE-2025-61934, CVSS 10.0) allows unauthenticated file manipulation on a simulator service. Patch to v4.5.0.x immediately.

19 views10:04

⤷ Title: NuGet Sabotage: Time-Delayed Logic in 9 Packages Risks Total App Destruction on Hardcoded Dates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 00:35:37 +0000
════════════════════════
⌗ Tags: #Malware #Destructive Payload #NuGet #PLC #Ransomware_as_a_Service #Shanhai666 #Sharp7Extend #supply chain attack #Time_Delayed Logic

Daily CyberSecurity

NuGet Sabotage: Time-Delayed Logic in 9 Packages Risks Total App Destruction on Hardcoded Dates

A NuGet supply chain attack injected time-delayed destructive logic into 9 packages. The malware triggers random crashes and silent data corruption on hardcoded future dates, targeting database/PLC applications.

7 views02:04

⤷ Title: 2027 Time Bomb: Covert NuGet Packages Target SQL and PLCs with Scheduled Sabotage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 02:53:09 +0000
════════════════════════
⌗ Tags: #Malware #.NET #cybersecurity #IndustrialControl #NuGet #PLC #PostgreSQL #sabotage #SQLServer #SupplyChainAttack

Penetration Testing Tools

2027 Time Bomb: Covert NuGet Packages Target SQL and PLCs with Scheduled Sabotage

Nine NuGet packages were found with covert code scheduled to activate in 2027-2028, targeting SQL databases and Siemens PLCs with sudden process terminations.

16 views04:04

⤷ Title: How SSenStone Hardens IoT and PLC Edge Security With Server-Side Secretless Authentication
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 11:03:15 GMT
════════════════════════
⌗ Tags: #plc #cybersecurity #iot #hacking #cyberattack

How SSenStone Hardens IoT and PLC Edge Security With Server-Side Secretless Authentication

How SSenStone Hardens IoT and PLC Edge Security With Server-Side Secretless Authentication Solving the IoT Paradox The Internet of Things has become one of the most consequential security …

19 views13:04

⤷ Title: Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 06:21:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #CISA #Critical Infrastructure #CyberAv3ngers #fbi #HMI #ICS security #industrial cybersecurity #Iranian APT #OT Security #PLC Security #Rockwell Automation #SCADA

Daily CyberSecurity

Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems

FBI and CISA warn of Iranian APTs hijacking internet-facing PLCs to disrupt U.S. energy and water systems. Learn the 2026 TTPs and how to defend your OT.

16 views07:06

⤷ Title: Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:36:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #Allen_Bradley #Critical Infrastructure #cybersecurity #EtherNet/IP #ICS Security #Iranian APT #OT Security #PLC Security #Rockwell Automation #SCADA

Penetration Testing Tools

Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers

State-sponsored Iranian hacking collectives have, in recent months, pivoted toward a singular and highly strategic objective within the

8 views09:04

⤷ Title: Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:05:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #brute force attack #Cscape #CVE_2026_6284 #Horner Automation #ICS security #industrial control systems #PLC #SCADA Security #XL4 #XL7

Daily CyberSecurity

Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers

Critical 9.1 CVSS flaw in Horner Automation PLCs allows unauthenticated brute force attacks. Secure your industrial systems—patch XL4, XL7, and Cscape now!

22 views15:04

⤷ Title: The Global Surge in Modbus/TCP Probes Targeting Our Physical World
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:18:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Reconnaissance #ICS security #industrial control systems #infosec #Manufacturing Security #Modbus #OT Security #PLC #SCADA

Daily CyberSecurity

The Global Surge in Modbus/TCP Probes Targeting Our Physical World

Cato Networks reveals 235,500+ Modbus probes on PLCs across 70 countries. Learn how attackers fingerprint and hijack industrial control systems. Patch now.

18 views11:04

⤷ Title: Invisible Hands in the Machine: The Calculated Global Assault on Exposed Industrial Controllers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:37:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Security 2026 #Function 0x03 #ICS Exploitation #Industrial Control Systems #Manufacturing Security #Modbus #OT Security #PLC

Penetration Testing Tools

Invisible Hands in the Machine: The Calculated Global Assault on Exposed Industrial Controllers

Researchers have unearthed a pervasive offensive targeting industrial controllers that had been inadvertently exposed to the public internet.

16 views09:03