Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Electron Flaws: ASAR Bypass & Buffer Overflow Threaten Desktop Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:29:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASAR Archive #cybersecurity #Desktop Applications #Electron #Heap Buffer Overflow #Integrity Bypass #rce #Remote Code Execution #visual studio code
Daily CyberSecurity
Electron Flaws: ASAR Bypass & Buffer Overflow Threaten Desktop Apps
Electron has critical flaws: CVE-2024-46993 allows RCE via image buffer overflow, and CVE-2024-46992 is an ASAR integrity bypass on Windows.
15 views
Daily Writeups
⤷ Title: VS Code ETHcode Extension Hacked: Just 2 Lines of Code Led to Supply Chain Compromise Via GitHub PR
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:46:20 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #ETHcode #Ethereum #Extension #github #malware #Pull Request #ReversingLabs #supply chain attack #Typosquatting #visual studio code #VS Code
Daily CyberSecurity
VS Code ETHcode Extension Hacked: Just 2 Lines of Code Led to Supply Chain Compromise Via GitHub PR
ReversingLabs exposes a supply chain compromise of the VS Code ETHcode extension via two lines of malicious code in a GitHub PR, leading to malware deployment.
14 views
Daily Writeups
⤷ Title: Cursor AI IDE Hacked: Fraudulent Extension Steals $500K in Crypto from Russian Developer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:13:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto theft #cryptocurrency #Cursor AI #Extension #Infostealer #kaspersky #malware #Open VSX #PureLogs #ScreenConnect #Solidity #supply chain attack #visual studio code #VS Code
Daily CyberSecurity
Cursor AI IDE Hacked: Fraudulent Extension Steals $500K in Crypto from Russian Developer
A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.
15 views
Daily Writeups
⤷ Title: Crypto Dev Loses $500K to Fake Cursor AI Extension: A New Supply Chain Threat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 16 Jul 2025 03:06:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cryptocurrency #Cursor AI #Info_stealer #malware #Open VSX #PureLogs #Quasar RAT #supply chain attack #Visual Studio Code
Penetration Testing Tools
Crypto Dev Loses $500K to Fake Cursor AI Extension: A New Supply Chain Threat
A Russian crypto developer lost $500K due to a malicious "Solidity Language" extension on Open VSX for Cursor AI, highlighting new supply chain risks.
23 views
Daily Writeups
⤷ Title: Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 00:49:09 +0000
════════════════════════
⌗ Tags: #Malware #AI Assistant #Amazon Q #AWS #code injection #cybersecurity #File Deletion #Pull Request #supply chain attack #Visual Studio Code
Penetration Testing Tools
Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources
Amazon was forced to withdraw a compromised version of its AI assistant, Q, after a malicious pull request instructed it to delete local files and AWS resources.
32 views
Daily Writeups
⤷ Title: ByteDance’s Trae IDE Under Fire: AI Coding Tool Caught Telemetry Spying Even After Opt-Out
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 08:48:09 +0000
════════════════════════
⌗ Tags: #Data Leak #AI #ByteDance #cybersecurity #Data Collection #IDE #privacy #Programming Tool #Telemetry #Trae IDE #visual studio code
Daily CyberSecurity
ByteDance's Trae IDE Under Fire: AI Coding Tool Caught Telemetry Spying Even After Opt-Out
35 views
Daily Writeups
⤷ Title: Coding with GPT-5: Microsoft Integrates New AI Powerhouse into Visual Studio Code
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 09 Aug 2025 07:23:25 +0000
════════════════════════
⌗ Tags: #Technology #AI #developer #GitHub Copilot #GPT_5 #Microsoft #Programming #visual studio code
Daily CyberSecurity
Coding with GPT-5: Microsoft Integrates New AI Powerhouse into Visual Studio Code
Microsoft is rolling out GPT-5 support for Visual Studio Code via GitHub Copilot. The new model promises smarter and faster coding for paid subscribers.
25 views
Daily Writeups
⤷ Title: A New Era for AI Coding: OpenAI’s Codex Gets a Major Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Sep 2025 02:02:19 +0000
════════════════════════
⌗ Tags: #Technology #AI Coding #ChatGPT #Codex #Developers #github #OpenAI #Productivity #software update #visual studio code
Daily CyberSecurity
A New Era for AI Coding: OpenAI’s Codex Gets a Major Update
OpenAI's Codex gets a major update with a new VS Code extension and local-to-cloud handoff. The update allows for seamless, synced coding tasks from anywhere.
10 views
Daily Writeups
⤷ Title: Critical Flaw in Cursor Puts Nearly a Million Developers at Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 12 Sep 2025 07:13:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Code Editor #Cursor #cybersecurity #developer tools #software vulnerability #supply chain attack #Visual Studio Code
Penetration Testing Tools
Critical Flaw in Cursor Puts Nearly a Million Developers at Risk
A critical vulnerability in the Cursor code editor can allow attackers to execute malicious code automatically. Learn how this flaw works and how to protect yourself.
15 views
Daily Writeups
⤷ Title: Microsoft Launches MCP Server for AI to Access Official Documentation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 08:00:10 +0000
════════════════════════
⌗ Tags: #Technology #AI Development #API #Developers #documentation #MCP server #Microsoft Learn #visual studio
Daily CyberSecurity
Microsoft Launches MCP Server for AI to Access Official Documentation
Microsoft's new MCP Server allows AI models to directly access official, real-time documentation from Microsoft Learn for enhanced accuracy and efficiency.
14 views
Daily Writeups
⤷ Title: Security Flaws in VS Extensions Expose Developers to Threats
════════════════════════
𐀪 Author: Valentin Podkamennyi
════════════════════════
ⴵ Time: Sat, 18 Oct 2025 23:05:02 GMT
════════════════════════
⌗ Tags: #visual_studio_code #supply_chain_attack #software_security #developer_security #cybersecurity
Medium
Security Flaws in VS Extensions Expose Developers to Threats
Developers publishing Visual Studio extensions to open marketplaces have inadvertently exposed sensitive access tokens.
14 views
Daily Writeups
⤷ Title: GlassWorm Malware Targets Developers Through OpenVSX Marketplace
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 10:22:48 +0000
════════════════════════
⌗ Tags: #Malware #Security #Blockchain #Cybersecurity #GlassWorm #Marketplace #OpenVSX #Solana #Visual Studio
Hackread
GlassWorm Malware Targets Developers Through OpenVSX Marketplace
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
19 views