Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: New Linuxsys Cryptominer Campaign Exploits Apache HTTP Server & Other Critical Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:12:29 +0000
════════════════════════
⌗ Tags: #Malware #Apache HTTP Server #Cryptominer #CVE_2021_41773 #cybersecurity #h2miner #Linux #Linuxsys #malware #ransomware #windows
Penetration Testing Tools
New Linuxsys Cryptominer Campaign Exploits Apache HTTP Server & Other Critical Flaws
VulnCheck reveals a new Linuxsys cryptominer campaign exploiting Apache HTTP Server CVE-2021-41773 and other critical flaws to deploy malware, including the Lcrypt0rx ransomware.
12 views
Daily Writeups
⤷ Title: Three High-Severity Privilege Escalation Flaws Patched in Sophos Intercept X for Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:41:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2024_13972 #CVE_2025_7433 #CVE_2025_7472 #cybersecurity #endpoint security #LPE #patch #privilege escalation #Sophos Intercept X #Vulnerability
Daily CyberSecurity
Three High-Severity Privilege Escalation Flaws Patched in Sophos Intercept X for Windows
Sophos has patched three high-severity LPE vulnerabilities in Intercept X for Windows (CVE-2024-13972, CVE-2025-7433, CVE-2025-7472), allowing local users to gain SYSTEM privileges.
13 views
Daily Writeups
⤷ Title: Critical Livewire RCE (CVE-2025-54068) Threatens Millions of Laravel Apps – Patch Immediately!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:40:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_54068 #cybersecurity #Laravel #Livewire #php #rce #Remote Code Execution #Vulnerability #web development
Daily CyberSecurity
Critical Livewire RCE (CVE-2025-54068) Threatens Millions of Laravel Apps – Patch Immediately!
A critical RCE (CVE-2025-54068) in Livewire v3.6.3 and earlier allows unauthenticated attackers to execute arbitrary code on millions of Laravel applications. Update now!
18 views
Daily Writeups
⤷ Title: Scanception: Global QR Code Phishing Campaign Bypasses Enterprise Security, Steals Credentials at Scale
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:40:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #Credential Harvesting #cybersecurity #Cyble #mobile security #phishing #QR code phishing #Quishing #Scanception
Daily CyberSecurity
Scanception: Global QR Code Phishing Campaign Bypasses Enterprise Security, Steals Credentials at Scale
Scanception campaign uses QR code-based phishing in PDFs to bypass traditional security, targeting high-value industries globally for credential and 2FA theft.
13 views
Daily Writeups
⤷ Title: Katz Stealer: The $100/Month MaaS Threat Plundering Digital Identities Undetected
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:36:34 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #crypto wallets #cybersecurity #evasion #info_stealer #Katz Stealer #MaaS #Malware_as_a_Service #Process Hollowing
Daily CyberSecurity
Katz Stealer: The $100/Month MaaS Threat Plundering Digital Identities Undetected
Katz Stealer is a dangerous MaaS info-stealer (starting at $100/month) that plunders digital identities, evades detection with stealthy techniques, and targets a vast array of sensitive data.
11 views
Daily Writeups
⤷ Title: Windows Zero-Day Actively Exploited by Ransomware Gangs – PoC Available!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:33:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #CLFS #cybersecurity #Exploit #PoC #privilege escalation #windows #zero_day
Daily CyberSecurity
Windows Zero-Day Actively Exploited by Ransomware Gangs – PoC Available!
A Windows CLFS zero-day (CVE-2025-29824) actively exploited by RansomEXX and Play ransomware gangs for privilege escalation, with a public PoC. Patch now!
11 views
Daily Writeups
⤷ Title: Matanbuchus 3.0 Levels Up: New Stealthy Malware Loader Exploits Microsoft Teams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:31:13 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #EDR evasion #loader #MaaS #malware #Matanbuchus #Microsoft Teams #social engineering #Threat Actors
Daily CyberSecurity
Matanbuchus 3.0 Levels Up: New Stealthy Malware Loader Exploits Microsoft Teams
Matanbuchus 3.0, a new sophisticated malware loader, is using social engineering via Microsoft Teams to infiltrate enterprise systems with advanced evasion tactics.
13 views
Daily Writeups
⤷ Title: Two Vulnerabilities in 7-Zip Could Trigger Denial of Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:24:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #7_Zip #CVE_2025_53816 #CVE_2025_53817 #cybersecurity #Denial of Service #dos #File Archiver #memory corruption #open_source #Vulnerability
Daily CyberSecurity
Two Vulnerabilities in 7-Zip Could Trigger Denial of Service
Two new medium-severity vulnerabilities (CVE-2025-53816, -53817) in 7-Zip versions prior to 25.0.0 risk memory corruption and denial of service. Update immediately.
15 views
Daily Writeups
⤷ Title: UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Cyber Espionage Campaigns Across Asia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:20:56 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #Blister DLL #china #cyber_espionage #Hong Kong #INET RAT #malware #Pakistan #Shadow RAT #South Asia #UNG0002
Daily CyberSecurity
UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Cyber Espionage Campaigns Across Asia
Seqrite Labs uncovers UNG0002, a South Asian APT group using advanced social engineering and new malware like Shadow RAT to target various sectors across Asia.
15 views
Daily Writeups
⤷ Title: ToolShell: New SharePoint RCE Zero-Day Chain Under Active Global Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:20:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_49704 #CVE_2025_49706 #cybersecurity #exploitation #Microsoft #rce #Remote Code Execution #Sharepoint #ToolShell #Vulnerability #zero_day
Daily CyberSecurity
ToolShell: New SharePoint RCE Zero-Day Chain Under Active Global Exploitation
An unauthenticated SharePoint RCE chain dubbed ToolShell (CVE-2025-49704, CVE-2025-49706) is being actively exploited globally, granting attackers full control of on-premise servers.
16 views
Daily Writeups
⤷ Title: China-Aligned APTs Intensify Cyber Espionage on Taiwan’s Semiconductor Industry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:16:56 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #china #Cobalt Strike #cyber_espionage #malware #phishing #semiconductor #Supply Chain #Taiwan #Voldemort
Daily CyberSecurity
China-Aligned APTs Intensify Cyber Espionage on Taiwan's Semiconductor Industry
Proofpoint reveals a surge in China-aligned cyber espionage targeting Taiwan's semiconductor industry with spearphishing, Cobalt Strike, and new malware like Voldemort.
14 views
Daily Writeups
⤷ Title: DuckDuckGo Battles AI Slop: New Filter Lets Users Hide AI-Generated Images from Search Results
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:15:46 +0000
════════════════════════
⌗ Tags: #Technology #AI Filter #AI Images #DuckDuckGo #Image Search #open_source #privacy #Search Engine #Synthetic Content #user control
Daily CyberSecurity
DuckDuckGo Battles AI Slop: New Filter Lets Users Hide AI-Generated Images from Search Results
DuckDuckGo introduces a new feature allowing users to filter AI-generated images from search results, leveraging open-source blocklists to combat misleading content.
11 views
Daily Writeups
⤷ Title: Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Configuration File Manipulation #cybersecurity #Lenovo Commercial Vantage #Lenovo Vantage #privilege escalation #Registry Hijack #sql injection #Vulnerability
Daily CyberSecurity
Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs
Lenovo issued patches for three vulnerabilities in Lenovo Vantage (CVE-2025-6230, CVE-2025-6231, CVE-2025-6232) allowing local privilege escalation on PCs. Update immediately.
17 views
Daily Writeups
⤷ Title: LibreOffice Accuses Microsoft of Deliberate “Lock-in” Through Complex File Formats
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:10:16 +0000
════════════════════════
⌗ Tags: #Technology #Interoperability #LibreOffice #Microsoft 365 #ODF #Office Open XML #OOXML #open_source #OpenDocument Format #Vendor Lock_in
Daily CyberSecurity
LibreOffice Accuses Microsoft of Deliberate "Lock-in" Through Complex File Formats
LibreOffice claims Microsoft uses overly complex OOXML file formats to intentionally lock users into its ecosystem, hindering migration and interoperability with open-source alternatives.
19 views
Daily Writeups
⤷ Title: Fake Receipts, Real Damage: Group-IB Uncovers Fraud-as-a-Service Empire Behind MaisonReceipts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:07:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #cybersecurity #digital fraud #Fake Receipts #Fraud_as_a_Service #Group_IB #MaisonReceipts #Scams #Telegram #TikTok
Daily CyberSecurity
Fake Receipts, Real Damage: Group-IB Uncovers Fraud-as-a-Service Empire Behind MaisonReceipts
Group-IB exposes MaisonReceipts, a subscription service selling fake receipts for major brands via Telegram and TikTok, fueling widespread digital fraud.
18 views
Daily Writeups
⤷ Title: Trump Signs “GENIUS Act”: Landmark Law Reshapes US Stablecoin Market, Boosts Dollar Dominance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:04:33 +0000
════════════════════════
⌗ Tags: #Technology #Blockchain #cryptocurrency #Donald Trump #Financial Technology #FinTech #GENIUS Act #regulation #stablecoin #US Dollar
Daily CyberSecurity
Trump Signs "GENIUS Act": Landmark Law Reshapes US Stablecoin Market, Boosts Dollar Dominance
President Trump signed the bipartisan "GENIUS Act," a landmark law creating a clear regulatory framework for the US stablecoin market, aiming to secure the dollar's digital dominance.
14 views
Daily Writeups
⤷ Title: SilentRoute: Trojanized SonicWall VPN Client Used to Steal Enterprise Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:00:31 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #cybersecurity #eSentire #malware #NetExtender #phishing #SilentRoute #SonicWall #supply chain attack #vpn
Daily CyberSecurity
SilentRoute: Trojanized SonicWall VPN Client Used to Steal Enterprise Credentials
Microsoft and eSentire expose SilentRoute, a backdoored SonicWall SSL VPN NetExtender client distributed via SEO poisoning, stealing credentials and breaching networks.
14 views
Daily Writeups
⤷ Title: HackTheBox - Jarvis
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:48:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox #hacking #linux #penetration_testing
Medium
HackTheBox - Jarvis
Summary
20 views
Daily Writeups
⤷ Title: The Art of the Hack: Why Social Engineering Is the Mother of All Cyber Attacks
════════════════════════
𐀪 Author: SHAMSUDEEN IBRAHIM
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:38:47 GMT
════════════════════════
⌗ Tags: #vulnerability #social_engineering #cybersecurity #infosec #threat_intelligence
Medium
The Art of the Hack: Why Social Engineering Is the Mother of All Cyber Attacks
It goes beyond code — it’s about people. And that’s what makes it terrifyingly effective.
13 views
Daily Writeups
⤷ Title: The Job Seeker’s Dilemma: Are You Learning What Employers Actually Want?
════════════════════════
𐀪 Author: Rajendra Bodda, Founder Srida IT
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:54:02 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
The Job Seeker’s Dilemma: Are You Learning What Employers Actually Want?
Why Your Skills Might Not Match the Job You’re Chasing – And How to Fix It
14 views
Daily Writeups
⤷ Title: smartstp reviews? here’s how I recover my money
════════════════════════
𐀪 Author: Carin
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:29:50 GMT
════════════════════════
⌗ Tags: #bitcoin #blockchain #ethereum #cybersecurity #cryptocurrency
Medium
smartstp reviews? here’s how I recover my money
smartstp reviews? here’s how I recover my money
18 views