Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Zoomex partners with HackenProof to launch a new Vulnerability Bounty Program!
════════════════════════
𐀪 Author: Zoomex Official
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 05:29:38 GMT
════════════════════════
⌗ Tags: #exchange #zoomex #web3 #hacken #bug_bounty
Medium
Zoomex partners with HackenProof to launch a new Vulnerability Bounty Program!
[June 27] — Global digital asset trading platform Zoomex today announced a strategic partnership with Web3 security collaboration platform…
27 views
Daily Writeups
⤷ Title: Microsoft Hikes On-Premises Server & CAL Prices by Up to 20% Starting July
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 07:34:23 +0000
════════════════════════
⌗ Tags: #Technology #CAL Suite #Cloud Migration #Enterprise CAL Suite #Exchange Server #Microsoft #On_Premises #Price Increase #Pricing #Server #SharePoint Server #Skype for Business Server
Daily CyberSecurity
Microsoft Hikes On-Premises Server & CAL Prices by Up to 20% Starting July
Microsoft is increasing prices for on-premises server products by 10% and CAL Suites by up to 20% starting July/August 2025, pushing enterprises towards cloud subscriptions.
20 views
Daily Writeups
⤷ Title: “NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:12:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #APT_Q_95 #china #chisel #Cyberespionage #cybersecurity #Exchange Zero_Day #Fileless Malware #Microsoft Exchange #NightEagle #QiAnXin
Daily CyberSecurity
“NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
NightEagle APT (APT-Q-95) is exploiting an unknown Exchange zero-day to target China's strategic industries, using fileless malware and exfiltrating machineKey for remote email access.
32 views
Daily Writeups
⤷ Title: NightEagle APT Unleashed: Zero-Day Exchange Exploit Targets China’s Strategic Industries with Fileless Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 02:46:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #APT_Q_95 #China #Chisel #Cyberespionage #cybersecurity #Exchange Zero_Day #Fileless Malware #Microsoft Exchange #NightEagle #QiAnXin
Penetration Testing Tools
NightEagle APT Unleashed: Zero-Day Exchange Exploit Targets China's Strategic Industries with Fileless Malware
NightEagle APT (APT-Q-95) is exploiting an unknown Exchange zero-day to target China's strategic industries, using fileless malware and exfiltrating machineKey for remote email access.
14 views
Daily Writeups
⤷ Title: Did The Crypto Exchange CoinDCX Get Hacked?
════════════════════════
𐀪 Author: Nivedita Baidya
════════════════════════
ⴵ Time: Sun, 20 Jul 2025 18:28:36 GMT
════════════════════════
⌗ Tags: #hacking #bitcoin #cryptocurrency #life #exchange
Medium
Did The Crypto Exchange CoinDCX Get Hacked?
Yes — CoinDCX was hacked recently. Here’s a clear summary:
21 views
Daily Writeups
⤷ Title: BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 01:28:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BigONE #blockchain #Crypto Theft #cryptocurrency #cyberattack #Exchange #hack #Lookonchain #security incident #SlowMist
Penetration Testing Tools
BigONE Crypto Exchange Hacked for $27 Million: Funds Being Laundered, Users Reassured
Cryptocurrency exchange BigONE suffered a $27 million hot wallet hack. Funds are being laundered into BTC, ETH, SOL, and TRX, but BigONE assures users of full reimbursement.
11 views
Daily Writeups
⤷ Title: Microsoft Extends Exchange Server 2016/2019 Support with Paid ESU Program (6-Month Lifeline)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 06:49:03 +0000
════════════════════════
⌗ Tags: #Technology #cybersecurity #end_of_life #Enterprise Email #ESU #Exchange Server #Extended Security Updates #Microsoft #migration
Daily CyberSecurity
Microsoft Extends Exchange Server 2016/2019 Support with Paid ESU Program (6-Month Lifeline)
Microsoft announces a paid 6-month ESU program for Exchange Server 2016/2019, offering critical security updates beyond October 2025 EOL to aid migrations.
45 views
Daily Writeups
⤷ Title: CoinDCX Hacked for $44 Million in Crypto: Internal Account Breached, User Funds Safe
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:44:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #blockchain #CoinDCX #Crypto Theft #cryptocurrency #cyberattack #Exchange #hack #India #security incident
Penetration Testing Tools
CoinDCX Hacked for $44 Million in Crypto: Internal Account Breached, User Funds Safe
Indian crypto exchange CoinDCX suffered a $44 million cyberattack on an internal operational account. User funds are confirmed safe, and the company will cover all losses.
25 views
Daily Writeups
⤷ Title: CoinDCX Hack Explained: Hornet’s Role in the Aftermath
════════════════════════
𐀪 Author: Kapil Kathiriya
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 07:28:21 GMT
════════════════════════
⌗ Tags: #exchange #cryptocurrency #security #hacking #blockchain
Medium
CoinDCX Hack Explained: Hornet’s Role in the Aftermath
In mid-July 2025, CoinDCX, one of India’s leading crypto exchanges, became the target of a sophisticated cyberattack. The attacker managed…
9 views
Daily Writeups
⤷ Title: CVE-2025-53786: Microsoft Exchange Hybrid Deployments Expose Cloud Privilege Escalation Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 02:18:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_53786 #cybersecurity #Exchange Online #Hybrid #Microsoft Exchange #privilege escalation #Vulnerability
Daily CyberSecurity
CVE-2025-53786: Microsoft Exchange Hybrid Deployments Expose Cloud Privilege Escalation Risk
Microsoft warns of a critical flaw (CVE-2025-53786) in Exchange hybrid environments, allowing attackers with on-prem admin access to escalate privileges in Exchange Online.
20 views
Daily Writeups
⤷ Title: Stealthy Credential Harvesting via Exchange: A JavaScript Backdoor Scenario
════════════════════════
𐀪 Author: Patek Philippe
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 06:30:23 GMT
════════════════════════
⌗ Tags: #redteam_tool #exchange #javascript #credential_harvesting #penetration_testing
Medium
Stealthy Credential Harvesting via Exchange: A JavaScript Backdoor Scenario
Executive Summary
Attackers continue to exploit overlooked assets inside enterprise environments. In this scenario, we demonstrate how…
25 views
Daily Writeups
⤷ Title: msInvader: New Tool Lets Blue Teams Stress-Test M365 and Azure Defenses with Real-World Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 04:17:43 +0000
════════════════════════
⌗ Tags: #Open Source Tool #adversary simulation #AiTM #Azure #blue team #Detection Engineering #Exchange Online #M365 #msInvader
Penetration Testing Tools
msInvader: New Tool Lets Blue Teams Stress-Test M365 and Azure Defenses with Real-World Attacks
msInvader is a tool for blue teams to simulate realistic post-compromise attacks (like token theft, MFA bypass) within M365 and Azure to test detection rules.Export to Sheets
36 views
Daily Writeups
⤷ Title: Thunderbird 145: Native Microsoft Exchange Support Makes Outlook Migration Easy!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 08:50:30 +0000
════════════════════════
⌗ Tags: #Technology #email client #EWS #Exchange #Microsoft 365 #mozilla #open_source #Outlook #Productivity #Thunderbird #Version 145
Daily CyberSecurity
Thunderbird 145: Native Microsoft Exchange Support Makes Outlook Migration Easy!
Thunderbird 145.0 now includes full, native support for Microsoft Exchange (EWS), eliminating plugins and making migration from Outlook/M365 accounts seamless!
31 views
Daily Writeups
⤷ Title: The $130 Million Fat-Finger: Bithumb’s Accidental Airdrop Turns 635 Users into Millionaires
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 08 Feb 2026 06:11:48 +0000
════════════════════════
⌗ Tags: #Technology #2000 BTC #accidental airdrop #Bitcoin #Bithumb #C2C transactions #crypto flash crash #exchange deficit #fat_finger error #market volatility #South Korea crypto law #Tech News 2026
Daily CyberSecurity
The $130 Million Fat-Finger: Bithumb’s Accidental Airdrop Turns 635 Users into Millionaires
Bithumb loses $130M after accidentally airdropping 2,000 BTC to 635 users. Learn how a "won-to-bitcoin" typo triggered a 20% flash crash and instant fortunes.
19 views
Daily Writeups
⤷ Title: Kraken Exchange Faces Extortion After Insider Recorded System Footage
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 15:58:05 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Crypto #Security #Blockchain #Cyber Attack #Cybersecurity #Exchange #Extortion #Insider Threat #Kraken
Hackread
Kraken Exchange Faces Extortion After Insider Recorded System Footage
Kraken exchange faces extortion after a staff member misused access to record internal systems, about 2,000 accounts affected, no funds or systems breached.
24 views
Daily Writeups
⤷ Title: Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 00:57:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42897 #Cyber Security #Exchange Server 2019 #Exploit in the Wild #infosec #Microsoft Exchange #Outlook Web Access #OWA #Patch Alert #Remote Code Execution #zero_day
Daily CyberSecurity
Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
CVE-2026-42897 exploited in the wild. A 8.1 CVSS OWA flaw allows RCE via malicious emails. Verify your Exchange Emergency Mitigation (EM) status now!
36 views
Daily Writeups
⤷ Title: Ghost Sender: Why Your Email Gateway Isn’t Protecting Exchange Online
════════════════════════
𐀪 Author: Sanaullah Aman Korai
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 17:53:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #email_security #microsoft_365 #bug_bounty #exchange_online
Medium
Ghost Sender: Why Your Email Gateway Isn’t Protecting Exchange Online
Ghost Sender: Why Your Email Gateway Isn’t Protecting Exchange Online Let’s be real: when I first heard about Ghost Sender, I thought, “There’s no way this works. SPF, DKIM, and DMARC would …
15 views
Daily Writeups
⤷ Title: Microsoft Exchange Vulnerability CVE-2026-45504 Gets Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 00:03:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CVE_2026_45504 #Exchange Server 2019 #HawkTrace #Microsoft Exchange #PoC Exploit #ssrf
Daily CyberSecurity
Microsoft Exchange Vulnerability CVE-2026-45504 Gets Public PoC Exploit
TL;DR Researchers at HawkTrace published full technical details and proof-of-concept code for a Microsoft Exchange vulnerability tracked as CVE-2026-45504. The flaw lets a low-privileged user read…
17 views
Daily Writeups
⤷ Title: Hunting Exchange Server 0day like a detective
════════════════════════
𐀪 Author: Jang
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 04:45:43 GMT
════════════════════════
⌗ Tags: #exchange #cve_2026_62911 #servers #rce
Medium
Hunting Exchange Server 0day like a detective
It has been a while since my last blog post, not because I didn’t do anything (or I?), I just don’t have any time/ any motivation to start…
41 views