Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Configuration File Manipulation #cybersecurity #Lenovo Commercial Vantage #Lenovo Vantage #privilege escalation #Registry Hijack #sql injection #Vulnerability
Daily CyberSecurity
Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs
Lenovo issued patches for three vulnerabilities in Lenovo Vantage (CVE-2025-6230, CVE-2025-6231, CVE-2025-6232) allowing local privilege escalation on PCs. Update immediately.
17 views
Daily Writeups
⤷ Title: LibreOffice Accuses Microsoft of Deliberate “Lock-in” Through Complex File Formats
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:10:16 +0000
════════════════════════
⌗ Tags: #Technology #Interoperability #LibreOffice #Microsoft 365 #ODF #Office Open XML #OOXML #open_source #OpenDocument Format #Vendor Lock_in
Daily CyberSecurity
LibreOffice Accuses Microsoft of Deliberate "Lock-in" Through Complex File Formats
LibreOffice claims Microsoft uses overly complex OOXML file formats to intentionally lock users into its ecosystem, hindering migration and interoperability with open-source alternatives.
19 views
Daily Writeups
⤷ Title: Fake Receipts, Real Damage: Group-IB Uncovers Fraud-as-a-Service Empire Behind MaisonReceipts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:07:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #cybersecurity #digital fraud #Fake Receipts #Fraud_as_a_Service #Group_IB #MaisonReceipts #Scams #Telegram #TikTok
Daily CyberSecurity
Fake Receipts, Real Damage: Group-IB Uncovers Fraud-as-a-Service Empire Behind MaisonReceipts
Group-IB exposes MaisonReceipts, a subscription service selling fake receipts for major brands via Telegram and TikTok, fueling widespread digital fraud.
18 views
Daily Writeups
⤷ Title: Trump Signs “GENIUS Act”: Landmark Law Reshapes US Stablecoin Market, Boosts Dollar Dominance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:04:33 +0000
════════════════════════
⌗ Tags: #Technology #Blockchain #cryptocurrency #Donald Trump #Financial Technology #FinTech #GENIUS Act #regulation #stablecoin #US Dollar
Daily CyberSecurity
Trump Signs "GENIUS Act": Landmark Law Reshapes US Stablecoin Market, Boosts Dollar Dominance
President Trump signed the bipartisan "GENIUS Act," a landmark law creating a clear regulatory framework for the US stablecoin market, aiming to secure the dollar's digital dominance.
14 views
Daily Writeups
⤷ Title: SilentRoute: Trojanized SonicWall VPN Client Used to Steal Enterprise Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:00:31 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #cybersecurity #eSentire #malware #NetExtender #phishing #SilentRoute #SonicWall #supply chain attack #vpn
Daily CyberSecurity
SilentRoute: Trojanized SonicWall VPN Client Used to Steal Enterprise Credentials
Microsoft and eSentire expose SilentRoute, a backdoored SonicWall SSL VPN NetExtender client distributed via SEO poisoning, stealing credentials and breaching networks.
14 views
Daily Writeups
⤷ Title: HackTheBox - Jarvis
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:48:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox #hacking #linux #penetration_testing
Medium
HackTheBox - Jarvis
Summary
20 views
Daily Writeups
⤷ Title: The Art of the Hack: Why Social Engineering Is the Mother of All Cyber Attacks
════════════════════════
𐀪 Author: SHAMSUDEEN IBRAHIM
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:38:47 GMT
════════════════════════
⌗ Tags: #vulnerability #social_engineering #cybersecurity #infosec #threat_intelligence
Medium
The Art of the Hack: Why Social Engineering Is the Mother of All Cyber Attacks
It goes beyond code — it’s about people. And that’s what makes it terrifyingly effective.
13 views
Daily Writeups
⤷ Title: The Job Seeker’s Dilemma: Are You Learning What Employers Actually Want?
════════════════════════
𐀪 Author: Rajendra Bodda, Founder Srida IT
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:54:02 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
The Job Seeker’s Dilemma: Are You Learning What Employers Actually Want?
Why Your Skills Might Not Match the Job You’re Chasing – And How to Fix It
14 views
Daily Writeups
⤷ Title: smartstp reviews? here’s how I recover my money
════════════════════════
𐀪 Author: Carin
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:29:50 GMT
════════════════════════
⌗ Tags: #bitcoin #blockchain #ethereum #cybersecurity #cryptocurrency
Medium
smartstp reviews? here’s how I recover my money
smartstp reviews? here’s how I recover my money
18 views
Daily Writeups
⤷ Title: Incident Walkthrough: Unmasking a Fake SysInternals Tool (DFIR Case Study)
════════════════════════
𐀪 Author: Yogi Teza
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:15:12 GMT
════════════════════════
⌗ Tags: #dfir #incident_response #malware_analysis #digital_forensics #cybersecurity
Medium
Incident Walkthrough: Unmasking a Fake SysInternals Tool (DFIR Case Study)
A comprehensive forensic dive into how a trusted Windows utility was hijacked by hidden malware
24 views
Daily Writeups
⤷ Title: Pickle Rick — TryHackMe
════════════════════════
𐀪 Author: Pramod Lakshan
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:50:56 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf_writeup #pickle_rick_walkthrough
Medium
Pickle Rick — TryHackMe
Pickle Rick is one of the easiest machine on TryHackMe. You can complete this challenge within less than an hour.
35 views
Daily Writeups
⤷ Title: The Dark Side of X (Twitter)
════════════════════════
𐀪 Author: James Walker
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:33:00 GMT
════════════════════════
⌗ Tags: #twitter #elon_musk #social_media #the_dark_side_of_twitter #xs
Medium
The Dark Side of X (Twitter)
The Truth That Will Shock You!
45 views
Daily Writeups
⤷ Title: NVIDIAScape: Critical Container Escape (CVE-2025-23266, CVSS 9.0) Threatens 37% of AI Cloud Environments
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 02:28:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #cloud security #Container Escape #Container Toolkit #CVE_2025_23266 #cybersecurity #machine learning #Nvidia #NVIDIAScape
Penetration Testing Tools
NVIDIAScape: Critical Container Escape (CVE-2025-23266, CVSS 9.0) Threatens 37% of AI Cloud Environments
Wiz uncovered "NVIDIAScape," a critical vulnerability (CVE-2025-23266, CVSS 9.0) in NVIDIA Container Toolkit allowing attackers to escape containers and control AI cloud hosts.
39 views
Daily Writeups
⤷ Title: GitHub Weaponized: Cisco Talos Uncovers Massive MaaS Operation Distributing Amadey, Loaders, and Infostealers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:33:35 +0000
════════════════════════
⌗ Tags: #Malware #Amadey #cybersecurity #Emmenhtal #Github #Infostealer #MaaS #Malware_as_a_Service #phishing #ransomware #SmokeLoader
Penetration Testing Tools
GitHub Weaponized: Cisco Talos Uncovers Massive MaaS Operation Distributing Amadey, Loaders, and Infostealers
Cisco Talos reveals a vast MaaS operation exploiting public GitHub repositories to distribute Amadey, SmokeLoader, and infostealers via the Emmenhtal loader, often through phishing campaigns.
22 views
Daily Writeups
⤷ Title: BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:28:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BigONE #blockchain #Crypto Theft #cryptocurrency #cyberattack #Exchange #hack #Lookonchain #security incident #SlowMist
Penetration Testing Tools
BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
Cryptocurrency exchange BigONE suffered a $27 million hot wallet hack. Funds are being laundered into BTC, ETH, SOL, and TRX, but BigONE assures users of full reimbursement.
11 views
Daily Writeups
⤷ Title: Google Sues BadBox 2.0: Battling Multi-Million Dollar Ad Fraud Botnet on 10M+ Android Devices
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:28:30 +0000
════════════════════════
⌗ Tags: #Google #Malware #Ad Fraud #Android #AOSP #BadBox 2.0 #BOTNET #cybersecurity #google #lawsuit #malware #Smart TV
Penetration Testing Tools
Google Sues BadBox 2.0: Battling Multi-Million Dollar Ad Fraud Botnet on 10M+ Android Devices
Google sues the operators of BadBox 2.0, a botnet infecting over 10 million uncertified Android devices (smart TVs, media boxes) for large-scale ad fraud and digital deception.
10 views
Daily Writeups
⤷ Title: Gmail’s New Shielded Email: Google Battles Spam and Boosts Privacy with Disposable Addresses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:19:15 +0000
════════════════════════
⌗ Tags: #Google
Penetration Testing Tools
Gmail's New Shielded Email: Google Battles Spam and Boosts Privacy with Disposable Addresses
Google introduces "Shielded Email," akin to Apple's Hide My Email, enabling users to generate temporary addresses to combat spam and safeguard their true inbox.
9 views
Daily Writeups
⤷ Title: A Product Person’s Guide to the Application Security Market: SCA/SSCS/SBOM, 2025
════════════════════════
𐀪 Author: Emily Patterson
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:46:30 GMT
════════════════════════
⌗ Tags: #market_research_reports #cybersecurity #application_security
Medium
A Product Person’s Guide to the Application Security Market: SCA/SSCS/SBOM, 2025
Welcome to my 2025 series of deep dives on specific submarkets in the Application Security Testing software market! This is the second…
8 views
Daily Writeups
⤷ Title: TryHackMe | Infinity Shell | Write-up
════════════════════════
𐀪 Author: Andrey Dolya
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 02:50:23 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #hacking #tryhackme_walkthrough #ctf_writeup #blue_team
Medium
TryHackMe | Infinity Shell | Write-up
“Cipher’s legion of bots has exploited a known vulnerability in our web application, leaving behind a dangerous web shell implant…
10 views
Daily Writeups
⤷ Title: Hack The Box Starting Point Sequel:A Step-by-Step Walkthrough of HTB’s Basic Database Challenge
════════════════════════
𐀪 Author: Gopal Mohan
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 02:42:15 GMT
════════════════════════
⌗ Tags: #hackthebox #database #hacking #cybersecurity #mysql
Medium
Hack The Box Starting Point Sequel:A Step-by-Step Walkthrough of HTB’s Basic Database Challenge
Most people think hacking into websites means fiddling with web forms or login screens. But sometimes, the real gold is hidden deeper — in…
17 views
Daily Writeups
⤷ Title: Appointment: An SQL Injection Journey
════════════════════════
𐀪 Author: Praharsha Kumar
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 02:37:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #sql_injection #hackthebox
Medium
Appointment: An SQL Injection Journey
Introduction
20 views