Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Google Confirms Major OS Merger: Android & ChromeOS to Become a Single Unified Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 01:53:48 +0000
════════════════════════
⌗ Tags: #Android #android #chromebooks #ChromeOS #Cross_Platform #google #Operating System #OS Merger #Sameer Samat #tablets #Tech News #Unification
Daily CyberSecurity
Google Confirms Major OS Merger: Android & ChromeOS to Become a Single Unified Platform
Google officially confirmed plans to unify Android and ChromeOS into a single platform, aiming for seamless cross-device experiences and streamlined development for its AI-driven future.
11 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:55:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #Exploited in Wild #FTP Server #Huntress #Lua #Null Byte Injection #rce #Remote Code Execution #Vulnerability #Wing FTP Server
Daily CyberSecurity
CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
CISA adds critical Wing FTP Server RCE flaw (CVE-2025-47812, CVSS 10.0) to KEV. Actively exploited via null byte and Lua code injection; patch to 7.4.4 immediately!
12 views
Daily Writeups
⤷ Title: ImageMagick Flaw (CVE-2025-53101): Stack Buffer Overflow Allows Potential Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:38:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_53101 #cybersecurity #Image Manipulation #ImageMagick #memory corruption #open_source #rce #Remote Code Execution #Stack Buffer Overflow #Vulnerability
Daily CyberSecurity
ImageMagick Flaw (CVE-2025-53101): Stack Buffer Overflow Allows Potential Remote Code Execution
A flaw (CVE-2025-53101) in ImageMagick allows stack buffer overflows via filename templates, risking memory corruption and remote code execution. Patch now!
10 views
Daily Writeups
⤷ Title: XORIndex: North Korea’s Evolving Supply Chain Malware Targets npm Ecosystem Again
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:26:06 +0000
════════════════════════
⌗ Tags: #Malware #APT #BeaverTail #Contagious Interview #cryptocurrency #cybersecurity #HexEval #Infostealer #InvisibleFerret #malware #North Korea #npm #Socket #supply chain attack #XORIndex
Daily CyberSecurity
XORIndex: North Korea’s Evolving Supply Chain Malware Targets npm Ecosystem Again
North Korean APTs are using XORIndex malware in a new npm supply chain attack, infiltrating developers via 67 malicious packages to steal crypto wallets and credentials.
13 views
Daily Writeups
⤷ Title: HazyBeacon: Novel Backdoor Uses AWS Lambda for Stealthy C2, Targets Govts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:12:47 +0000
════════════════════════
⌗ Tags: #Malware #AWS Lambda #backdoor #C2 #Cloud Security #Command and Control #Cyberespionage #cybersecurity #DLL Sideloading #HazyBeacon #Unit 42
Daily CyberSecurity
HazyBeacon: Novel Backdoor Uses AWS Lambda for Stealthy C2, Targets Govts
Unit 42 uncovers HazyBeacon, a novel backdoor using AWS Lambda URLs for stealthy C2. It's deployed via DLL sideloading, targeting Southeast Asian govts for trade documents.
7 views
Daily Writeups
⤷ Title: CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Hijacking #CSRF #CVE_2025_43856 #cybersecurity #Immich #OAuth2 #open_source #Photo Management #Video Management #Vulnerability
Daily CyberSecurity
CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform
A flaw (CVE-2025-43856) in Immich allows account hijacking via a broken OAuth2 implementation (missing state parameter check). Update to v1.132.0 immediately!
15 views
Daily Writeups
⤷ Title: BlackSuit: New Royal/Conti Rebrand Hits With Speed, Stealth, & Data Exfiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:00:30 +0000
════════════════════════
⌗ Tags: #Malware #BlackSuit #Cobalt Strike #Conti #Cybereason #cybersecurity #data exfiltration #PsExec #ransomware #Rclone #Royal Ransomware #threat actor
Daily CyberSecurity
BlackSuit: New Royal/Conti Rebrand Hits With Speed, Stealth, & Data Exfiltration
BlackSuit, a rebranded Royal/Conti ransomware, unleashes destructive multi-stage attacks. It uses Cobalt Strike, rclone for data exfil, and deletes shadow copies for stealth and speed.
24 views
Daily Writeups
⤷ Title: Two-Factor Authentication (2FA) Vulnerabilities: Full Analysis
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:22:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #analysis #technology #vulnerability #bug_bounty
Medium
Two-Factor Authentication (2FA) Vulnerabilities: Full Analysis
Inside the logic flaws, weak sessions, and social engineering tactics defeating multi-factor authentication today.
25 views
Daily Writeups
⤷ Title: Automation in Bug Bounty Hunting: Best Tools and Techniques
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:19:05 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #vulnerability #bug_bounty #technology
Medium
Automation in Bug Bounty Hunting: Best Tools and Techniques
Streamline Your Bug Hunting Workflow with the Best Automation Tools and Strategies
20 views
Daily Writeups
⤷ Title: How a 2FA Bypass Vulnerability in Drugs.com Exposed User Accounts
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:49 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #penetration_testing #hacking #tips_and_tricks
Medium
How a 2FA Bypass Vulnerability in Drugs.com Exposed User Accounts
Exposing a Critical Flaw in Authentication Security
16 views
Daily Writeups
⤷ Title: What the Heck Is an XSS Attack? I Finally Understood It with This Silly Example
════════════════════════
𐀪 Author: Alex Joyel Raj
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:31:59 GMT
════════════════════════
⌗ Tags: #cyber #xss_vulnerability #cybersecurity #hacking #xss_attack
Medium
What the Heck Is an XSS Attack? I Finally Understood It with This Silly Example
If you’ve heard of XSS but still don’t get it, this is for you.
19 views
Daily Writeups
⤷ Title: INSTALLING UBUNTU IN A VIRTUAL BOX
════════════════════════
𐀪 Author: Roland Nii Ayi Aryee
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 01:43:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #homelab #hacking #ubuntu #information_technology
Medium
INSTALLING UBUNTU IN A VIRTUAL BOX
Running Ubuntu in VirtualBox is a safe and flexible way to explore Linux without altering your main system. This guide walks you through…
15 views
Daily Writeups
⤷ Title: RCE + ROOT-LEVEL ACCESS (CVSS 10.0):
════════════════════════
𐀪 Author: RABIU
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 12:15:28 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #web_security #bug_hunting #infosec
Medium
🚨 RCE + ROOT-LEVEL ACCESS (CVSS 10.0):
Today, I explain how I discovered a critical root-level RCE (CVSS 10.0) in a Fortune 500 company’s infrastructure using only Chrome and…
11 views
Daily Writeups
⤷ Title: New Cyber Threat: AI-Powered Phishing Scams-How to Stay Safe in 2025
════════════════════════
𐀪 Author: The News English India
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:48:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #alerts #students #scam #india
Medium
New Cyber Threat: AI-Powered Phishing Scams-How to Stay Safe in 2025
New Cyber Threat
13 views
Daily Writeups
⤷ Title: Zero to Trusted
════════════════════════
𐀪 Author: Suzette Becraft
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:44:34 GMT
════════════════════════
⌗ Tags: #tls_configuration #nginx #certificate_management #cybersecurity
Medium
Zero to Trusted
A Hands-On Guide to X.509 Certificates  and Nginx Web Server TLS Configuration
10 views
Daily Writeups
⤷ Title: TRiSM for Agentic AI
════════════════════════
𐀪 Author: Tal Eliyahu
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:42:34 GMT
════════════════════════
⌗ Tags: #agentic_ai #llm #cybersecurity #artificial_intelligence #security
Medium
TRiSM for Agentic AI
Agentic AI isn’t just about autonomy — it’s about coordination at scale. But when LLM-based agents share memory, call APIs, and reason…
11 views
Daily Writeups
⤷ Title: 7 Free WAF Solutions Compared: Which One Should You Use in 2025?
════════════════════════
𐀪 Author: AerieWhole123
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:37:14 GMT
════════════════════════
⌗ Tags: #beginners_guide #safeline_waf #cybersecurity #waf
Medium
7 Free WAF Solutions Compared: Which One Should You Use in 2025?
A Web Application Firewall (WAF) sits between your users and your app, analyzing HTTP/HTTPS traffic and blocking malicious activity. Unlike…
10 views
Daily Writeups
⤷ Title: The Growing Need for Proxy Services in Cybersecurity
════════════════════════
𐀪 Author: Mason Johnson
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:30:44 GMT
════════════════════════
⌗ Tags: #residential_proxies #cybersecurity #tips
Medium
The Growing Need for Proxy Services in Cybersecurity
👉 Enhance Your Security with 9Proxy
17 views
Daily Writeups
⤷ Title: The SOC Is a Hub, Not a Silo: Rethinking the Role of Security Operations
════════════════════════
𐀪 Author: Rob Egan
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:24:51 GMT
════════════════════════
⌗ Tags: #digital_defense #cybersecurity #security_operation_center #incident_response
Medium
The SOC Is a Hub, Not a Silo: Rethinking the Role of Security Operations
Security Operations Centers (SOCs) have evolved well beyond their origins as alert triage teams. In today’s dynamic threat landscape, the…
12 views
Daily Writeups
⤷ Title: The Invisible Watchers: How Your Digital Life Is Exposed
════════════════════════
𐀪 Author: Visir
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:56 GMT
════════════════════════
⌗ Tags: #social_media_safety #cybersecurity #data_protection #influencer_safety #telecom_privacy
Medium
📡The Invisible Watchers: How Your Digital Life Is Exposed
From telecom networks to social media oversharing, your digital footprint is bigger than you think
16 views
Daily Writeups
⤷ Title: كيمي كيه 2: أقوى نموذج ذكاء اصطناعي صيني ينافس شات جي بي تي
════════════════════════
𐀪 Author: katibatech
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:07:22 GMT
════════════════════════
⌗ Tags: #kimi_k2 #ai #cybersecurity #future #medium
Medium
كيمي كيه 2: أقوى نموذج ذكاء اصطناعي صيني ينافس شات جي بي تي
كيمي كيه 2اقوي نموذج ذكاء اصطناعي صيني ينافس جى بى تى
31 views