Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: SadGuard: Dynamic Code Analysis + Supply Chain Detection Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:16:13 +0000
════════════════════════
⌗ Tags: #Code Assessment #Vulnerability Assessment #AI #CI/CD #code analysis #cybersecurity #Malware Detection #Pull Request Security #SadGuard #Self_Hosted #Software Development #Supply Chain Security
Penetration Testing Tools
SadGuard: Dynamic Code Analysis + Supply Chain Detection Attack
SadGuard leverages AI to secure software supply chains, detecting malicious code in pull requests via diff analysis & runtime monitoring.
23 views
Daily Writeups
⤷ Title: OpenAI Codex Upgrade: Generate Multiple Code Solutions, Monitor Progress & Cancel Tasks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 02:31:36 +0000
════════════════════════
⌗ Tags: #Technology #AI Programming #ChatGPT #code generation #Codex #Developers #github #OpenAI #Pull Requests #software development #Tech Update
Daily CyberSecurity
OpenAI Codex Upgrade: Generate Multiple Code Solutions, Monitor Progress & Cancel Tasks
OpenAI Codex now generates multiple code solutions per task, with enhanced monitoring, task cancellation, and improved handling of network restrictions for developers.
21 views
Daily Writeups
⤷ Title: VS Code ETHcode Extension Hacked: Just 2 Lines of Code Led to Supply Chain Compromise Via GitHub PR
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:46:20 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #ETHcode #Ethereum #Extension #github #malware #Pull Request #ReversingLabs #supply chain attack #Typosquatting #visual studio code #VS Code
Daily CyberSecurity
VS Code ETHcode Extension Hacked: Just 2 Lines of Code Led to Supply Chain Compromise Via GitHub PR
ReversingLabs exposes a supply chain compromise of the VS Code ETHcode extension via two lines of malicious code in a GitHub PR, leading to malware deployment.
14 views
Daily Writeups
⤷ Title: Microsoft’s AI Assistant Now Reviews 90% of All Internal Pull Requests, Powering GitHub Copilot
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Jul 2025 02:04:30 +0000
════════════════════════
⌗ Tags: #Technology #AI #Automation #Code Review #Developer Productivity #engineering #GitHub Copilot #Microsoft #Pull Request #software development
Daily CyberSecurity
Microsoft's AI Assistant Now Reviews 90% of All Internal Pull Requests, Powering GitHub Copilot
Microsoft's internal AI assistant automates 90% of all pull request reviews (600K/month), enhancing code quality and accelerating development, with advancements feeding into GitHub Copilot.
15 views
Daily Writeups
⤷ Title: Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 00:49:09 +0000
════════════════════════
⌗ Tags: #Malware #AI Assistant #Amazon Q #AWS #code injection #cybersecurity #File Deletion #Pull Request #supply chain attack #Visual Studio Code
Penetration Testing Tools
Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources
Amazon was forced to withdraw a compromised version of its AI assistant, Q, after a malicious pull request instructed it to delete local files and AWS resources.
32 views
Daily Writeups
⤷ Title: GitHub Hit by Widespread Outage: Core Services Disrupted Globally
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 01:55:36 +0000
════════════════════════
⌗ Tags: #Technology #API #Git Operations #github #Incident #Issues #outage #Pull Requests #Service Disruption #Tech News
Daily CyberSecurity
GitHub Hit by Widespread Outage: Core Services Disrupted Globally
GitHub is experiencing a widespread service outage, affecting Git operations, API requests, pull requests, and issue tracking. The engineering team is actively working on restoration.
14 views
Daily Writeups
⤷ Title: The “Slop” Tsunami: GitHub Eyes “Kill Switch” for Pull Requests to Save Buried Maintainers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 04:18:08 +0000
════════════════════════
⌗ Tags: #Technology #AI Slop #AI transparency #Copilot #curl #Daniel Stenberg #Github #maintainer burnout #open source #Operation Neusploit #pull request crisis #Tech News 2026 #technical debt
Penetration Testing Tools
The "Slop" Tsunami: GitHub Eyes "Kill Switch" for Pull Requests to Save Buried Maintainers
GitHub is currently grappling with the unforeseen repercussions of the proliferation of AI-driven development instrumentation. The platform, having
20 views
Daily Writeups
⤷ Title: The Rise of the Autonomous Adversary: How “Hackerbot-Claw” Hijacked Major Open-Source Repositories
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 06:53:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aqua Security #autonomous AI bot #CI/CD Security #Datadog #GitHub Actions #GITHUB_TOKEN #hackerbot_claw #Microsoft #pull_request_target #supply chain attack #Tech News 2026 #Trivy
Penetration Testing Tools
The Rise of the Autonomous Adversary: How "Hackerbot-Claw" Hijacked Major Open-Source Repositories
According to a StepSecurity report, over the past week, an unidentified bot with the telling name “hackerbot-claw” launched
12 views