Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Matanbuchus 3.0 Levels Up: New Stealthy Malware Loader Exploits Microsoft Teams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:31:13 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #EDR evasion #loader #MaaS #malware #Matanbuchus #Microsoft Teams #social engineering #Threat Actors
Daily CyberSecurity
Matanbuchus 3.0 Levels Up: New Stealthy Malware Loader Exploits Microsoft Teams
Matanbuchus 3.0, a new sophisticated malware loader, is using social engineering via Microsoft Teams to infiltrate enterprise systems with advanced evasion tactics.
13 views
Daily Writeups
⤷ Title: Two Vulnerabilities in 7-Zip Could Trigger Denial of Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:24:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #7_Zip #CVE_2025_53816 #CVE_2025_53817 #cybersecurity #Denial of Service #dos #File Archiver #memory corruption #open_source #Vulnerability
Daily CyberSecurity
Two Vulnerabilities in 7-Zip Could Trigger Denial of Service
Two new medium-severity vulnerabilities (CVE-2025-53816, -53817) in 7-Zip versions prior to 25.0.0 risk memory corruption and denial of service. Update immediately.
15 views
Daily Writeups
⤷ Title: UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Cyber Espionage Campaigns Across Asia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:20:56 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #Blister DLL #china #cyber_espionage #Hong Kong #INET RAT #malware #Pakistan #Shadow RAT #South Asia #UNG0002
Daily CyberSecurity
UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Cyber Espionage Campaigns Across Asia
Seqrite Labs uncovers UNG0002, a South Asian APT group using advanced social engineering and new malware like Shadow RAT to target various sectors across Asia.
15 views
Daily Writeups
⤷ Title: ToolShell: New SharePoint RCE Zero-Day Chain Under Active Global Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:20:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_49704 #CVE_2025_49706 #cybersecurity #exploitation #Microsoft #rce #Remote Code Execution #Sharepoint #ToolShell #Vulnerability #zero_day
Daily CyberSecurity
ToolShell: New SharePoint RCE Zero-Day Chain Under Active Global Exploitation
An unauthenticated SharePoint RCE chain dubbed ToolShell (CVE-2025-49704, CVE-2025-49706) is being actively exploited globally, granting attackers full control of on-premise servers.
16 views
Daily Writeups
⤷ Title: China-Aligned APTs Intensify Cyber Espionage on Taiwan’s Semiconductor Industry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:16:56 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #china #Cobalt Strike #cyber_espionage #malware #phishing #semiconductor #Supply Chain #Taiwan #Voldemort
Daily CyberSecurity
China-Aligned APTs Intensify Cyber Espionage on Taiwan's Semiconductor Industry
Proofpoint reveals a surge in China-aligned cyber espionage targeting Taiwan's semiconductor industry with spearphishing, Cobalt Strike, and new malware like Voldemort.
14 views
Daily Writeups
⤷ Title: DuckDuckGo Battles AI Slop: New Filter Lets Users Hide AI-Generated Images from Search Results
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:15:46 +0000
════════════════════════
⌗ Tags: #Technology #AI Filter #AI Images #DuckDuckGo #Image Search #open_source #privacy #Search Engine #Synthetic Content #user control
Daily CyberSecurity
DuckDuckGo Battles AI Slop: New Filter Lets Users Hide AI-Generated Images from Search Results
DuckDuckGo introduces a new feature allowing users to filter AI-generated images from search results, leveraging open-source blocklists to combat misleading content.
11 views
Daily Writeups
⤷ Title: Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Configuration File Manipulation #cybersecurity #Lenovo Commercial Vantage #Lenovo Vantage #privilege escalation #Registry Hijack #sql injection #Vulnerability
Daily CyberSecurity
Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs
Lenovo issued patches for three vulnerabilities in Lenovo Vantage (CVE-2025-6230, CVE-2025-6231, CVE-2025-6232) allowing local privilege escalation on PCs. Update immediately.
17 views
Daily Writeups
⤷ Title: LibreOffice Accuses Microsoft of Deliberate “Lock-in” Through Complex File Formats
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:10:16 +0000
════════════════════════
⌗ Tags: #Technology #Interoperability #LibreOffice #Microsoft 365 #ODF #Office Open XML #OOXML #open_source #OpenDocument Format #Vendor Lock_in
Daily CyberSecurity
LibreOffice Accuses Microsoft of Deliberate "Lock-in" Through Complex File Formats
LibreOffice claims Microsoft uses overly complex OOXML file formats to intentionally lock users into its ecosystem, hindering migration and interoperability with open-source alternatives.
19 views
Daily Writeups
⤷ Title: Fake Receipts, Real Damage: Group-IB Uncovers Fraud-as-a-Service Empire Behind MaisonReceipts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:07:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #cybersecurity #digital fraud #Fake Receipts #Fraud_as_a_Service #Group_IB #MaisonReceipts #Scams #Telegram #TikTok
Daily CyberSecurity
Fake Receipts, Real Damage: Group-IB Uncovers Fraud-as-a-Service Empire Behind MaisonReceipts
Group-IB exposes MaisonReceipts, a subscription service selling fake receipts for major brands via Telegram and TikTok, fueling widespread digital fraud.
18 views
Daily Writeups
⤷ Title: Trump Signs “GENIUS Act”: Landmark Law Reshapes US Stablecoin Market, Boosts Dollar Dominance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:04:33 +0000
════════════════════════
⌗ Tags: #Technology #Blockchain #cryptocurrency #Donald Trump #Financial Technology #FinTech #GENIUS Act #regulation #stablecoin #US Dollar
Daily CyberSecurity
Trump Signs "GENIUS Act": Landmark Law Reshapes US Stablecoin Market, Boosts Dollar Dominance
President Trump signed the bipartisan "GENIUS Act," a landmark law creating a clear regulatory framework for the US stablecoin market, aiming to secure the dollar's digital dominance.
14 views
Daily Writeups
⤷ Title: SilentRoute: Trojanized SonicWall VPN Client Used to Steal Enterprise Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:00:31 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #cybersecurity #eSentire #malware #NetExtender #phishing #SilentRoute #SonicWall #supply chain attack #vpn
Daily CyberSecurity
SilentRoute: Trojanized SonicWall VPN Client Used to Steal Enterprise Credentials
Microsoft and eSentire expose SilentRoute, a backdoored SonicWall SSL VPN NetExtender client distributed via SEO poisoning, stealing credentials and breaching networks.
14 views
Daily Writeups
⤷ Title: HackTheBox - Jarvis
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:48:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox #hacking #linux #penetration_testing
Medium
HackTheBox - Jarvis
Summary
20 views
Daily Writeups
⤷ Title: The Art of the Hack: Why Social Engineering Is the Mother of All Cyber Attacks
════════════════════════
𐀪 Author: SHAMSUDEEN IBRAHIM
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:38:47 GMT
════════════════════════
⌗ Tags: #vulnerability #social_engineering #cybersecurity #infosec #threat_intelligence
Medium
The Art of the Hack: Why Social Engineering Is the Mother of All Cyber Attacks
It goes beyond code — it’s about people. And that’s what makes it terrifyingly effective.
13 views
Daily Writeups
⤷ Title: The Job Seeker’s Dilemma: Are You Learning What Employers Actually Want?
════════════════════════
𐀪 Author: Rajendra Bodda, Founder Srida IT
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:54:02 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
The Job Seeker’s Dilemma: Are You Learning What Employers Actually Want?
Why Your Skills Might Not Match the Job You’re Chasing – And How to Fix It
14 views
Daily Writeups
⤷ Title: smartstp reviews? here’s how I recover my money
════════════════════════
𐀪 Author: Carin
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:29:50 GMT
════════════════════════
⌗ Tags: #bitcoin #blockchain #ethereum #cybersecurity #cryptocurrency
Medium
smartstp reviews? here’s how I recover my money
smartstp reviews? here’s how I recover my money
18 views
Daily Writeups
⤷ Title: Incident Walkthrough: Unmasking a Fake SysInternals Tool (DFIR Case Study)
════════════════════════
𐀪 Author: Yogi Teza
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:15:12 GMT
════════════════════════
⌗ Tags: #dfir #incident_response #malware_analysis #digital_forensics #cybersecurity
Medium
Incident Walkthrough: Unmasking a Fake SysInternals Tool (DFIR Case Study)
A comprehensive forensic dive into how a trusted Windows utility was hijacked by hidden malware
24 views
Daily Writeups
⤷ Title: Pickle Rick — TryHackMe
════════════════════════
𐀪 Author: Pramod Lakshan
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:50:56 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf_writeup #pickle_rick_walkthrough
Medium
Pickle Rick — TryHackMe
Pickle Rick is one of the easiest machine on TryHackMe. You can complete this challenge within less than an hour.
35 views
Daily Writeups
⤷ Title: The Dark Side of X (Twitter)
════════════════════════
𐀪 Author: James Walker
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:33:00 GMT
════════════════════════
⌗ Tags: #twitter #elon_musk #social_media #the_dark_side_of_twitter #xs
Medium
The Dark Side of X (Twitter)
The Truth That Will Shock You!
45 views
Daily Writeups
⤷ Title: NVIDIAScape: Critical Container Escape (CVE-2025-23266, CVSS 9.0) Threatens 37% of AI Cloud Environments
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 02:28:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #cloud security #Container Escape #Container Toolkit #CVE_2025_23266 #cybersecurity #machine learning #Nvidia #NVIDIAScape
Penetration Testing Tools
NVIDIAScape: Critical Container Escape (CVE-2025-23266, CVSS 9.0) Threatens 37% of AI Cloud Environments
Wiz uncovered "NVIDIAScape," a critical vulnerability (CVE-2025-23266, CVSS 9.0) in NVIDIA Container Toolkit allowing attackers to escape containers and control AI cloud hosts.
39 views
Daily Writeups
⤷ Title: GitHub Weaponized: Cisco Talos Uncovers Massive MaaS Operation Distributing Amadey, Loaders, and Infostealers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:33:35 +0000
════════════════════════
⌗ Tags: #Malware #Amadey #cybersecurity #Emmenhtal #Github #Infostealer #MaaS #Malware_as_a_Service #phishing #ransomware #SmokeLoader
Penetration Testing Tools
GitHub Weaponized: Cisco Talos Uncovers Massive MaaS Operation Distributing Amadey, Loaders, and Infostealers
Cisco Talos reveals a vast MaaS operation exploiting public GitHub repositories to distribute Amadey, SmokeLoader, and infostealers via the Emmenhtal loader, often through phishing campaigns.
22 views
Daily Writeups
⤷ Title: BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:28:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BigONE #blockchain #Crypto Theft #cryptocurrency #cyberattack #Exchange #hack #Lookonchain #security incident #SlowMist
Penetration Testing Tools
BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
Cryptocurrency exchange BigONE suffered a $27 million hot wallet hack. Funds are being laundered into BTC, ETH, SOL, and TRX, but BigONE assures users of full reimbursement.
11 views