Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: WebTransport: What’s Really Going Over the Wire?
════════════════════════
𐀪 Author: Divyansh Jain
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 12:31:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #websocket #legilimens #webtransport
Medium
WebTransport: What’s Really Going Over the Wire?
What it is, how it differs from WebSockets, and why apps still need security. Part 1 of 7.
21 views
Daily Writeups
⤷ Title: The asset is dead! Long live the asset!
════════════════════════
𐀪 Author: Security Consulting Blogspot
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:55:54 GMT
════════════════════════
⌗ Tags: #application_security #risk_assessment #security_architecture #cybersecurity #threat_modeling
Medium
The asset is dead! Long live the asset!
Author: Andrew Lee-Thorp [1]
20 views
Daily Writeups
⤷ Title: Separating the Wire from the Test: AXIOM’s Transport Abstraction
════════════════════════
𐀪 Author: Nisarg Patel
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:00:17 GMT
════════════════════════
⌗ Tags: #software_engineering #application_security #cybersecurity #artificial_intelligence #ai_security
Medium
Separating the Wire from the Test: AXIOM’s Transport Abstraction
How I separated transport mechanics from AI security testing without redesigning the attack engine.
25 views
Daily Writeups
⤷ Title: Your Next.js OG Image Pipeline Has a Critical RCE Vulnerability
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 20:31:01 GMT
════════════════════════
⌗ Tags: #javascript #appsec #javascript_frameworks #application_security
Medium
Your Next.js OG Image Pipeline Has a Critical RCE Vulnerability
A dependency you never call directly just became a remote code execution vector in your image generation pipeline. That’s the shape of the…
38 views
Daily Writeups
⤷ Title: Is Traditional DAST Dead? AI Pentesting Is Changing the Security Testing Model
════════════════════════
𐀪 Author: Amr Ayoub
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 18:59:56 GMT
════════════════════════
⌗ Tags: #ai #devsecops #application_security #information_security #cybersecurity
Medium
Is Traditional DAST Dead? AI Pentesting Is Changing the Security Testing Model
I recently listened to a discussion between James Berthoty and Chris Romeo about AI pentesting and whether traditional DAST is basically…
26 views
Daily Writeups
⤷ Title: The Backup Tool Became the Backdoor: Inside the ConnectWise Application Identity Compromise
════════════════════════
𐀪 Author: GraySentinel- Cyber Defence Lab
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 05:15:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #threat_intelligence #application_security #microsoft
Medium
The Backup Tool Became the Backdoor: Inside the ConnectWise Application Identity Compromise
The October 2026 ConnectWise incident shows a fundamental flaw in the way the managed service provider ecosystem assigns trust to vendor…
22 views
Daily Writeups
⤷ Title: When an AI Sandbox’s Security Boundaries Fail
════════════════════════
𐀪 Author: Saad Sayed
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 08:46:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #ai_security #application_security #cybersecurity #previlege_escalation
Medium
When an AI Sandbox’s Security Boundaries Fail
How excessive privileges, exposed credentials, and prompt injection risks in an AI-powered SaaS platform led to remediation and a $XXXX bug…
14 views
Daily Writeups
⤷ Title: When a UI API Becomes a Security Boundary
════════════════════════
𐀪 Author: Marcus Rivera
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_engineering #javascript #web_development #application_security
Medium
When a UI API Becomes a Security Boundary
Somewhere in your Next.js app there’s probably a function call that looks harmless. You pass it a JSX element — a title, a background…
12 views
Daily Writeups
⤷ Title: OWASP Top 10:2025: What Security Teams Should Operationalize
════════════════════════
𐀪 Author: Arthur Steel | Contra Average
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 13:51:51 GMT
════════════════════════
⌗ Tags: #application_security #software_security #devsecops #risk_management #cybersecurity
Medium
OWASP Top 10:2025: What Security Teams Should Operationalize
Ten risks. Clear owners. Verifiable controls. A practical 90-day plan for making application security part of software delivery.
9 views
Daily Writeups
⤷ Title: When the Security Shield Becomes the Attack Path: Hackers Exploit Critical SiteGuard WAF…
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 18:20:45 GMT
════════════════════════
⌗ Tags: #incident_response #cybersecurity #application_security #privilege_escalation #threat_detection
Medium
When the Security Shield Becomes the Attack Path: Hackers Exploit Critical SiteGuard WAF Vulnerability
A Web Application Firewall (WAF) is designed to protect applications from malicious traffic, block attacks, and strengthen an…
10 views