Daily Writeups
@Daily_Writeups
3.96K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.96K subscribers
Daily Writeups
⤷ Title: Zero-Day Alert: The “Red Sun” Vulnerability Turning Microsoft Defender into a Hacker’s Tool
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 03:42:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #Chaotic Eclipse #cybersecurity #Local Privilege Escalation #malware #Microsoft Defender #MSRC #Red Sun #UnDefend #Windows Security #Zero_Day Exploit
Daily CyberSecurity
Zero-Day Alert: The "Red Sun" Vulnerability Turning Microsoft Defender into a Hacker’s Tool
Microsoft Defender faces a critical "Red Sun" vulnerability. Learn how this zero-day exploit bypasses security to grant hackers full administrative control.
12 views
Daily Writeups
⤷ Title: Microsoft Teams Exploited for Silent Enterprise Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 00:40:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Administrative Protocols #data exfiltration #infosec #lateral movement #Level RMM #Microsoft Defender #Microsoft Teams #Quick Assist #Rclone #social engineering #WinRM
Daily CyberSecurity
Microsoft Teams Exploited for Silent Enterprise Takeovers
Microsoft warns of a Teams campaign using fake IT support to hijack workstations via Quick Assist, move laterally with WinRM, and steal data using Rclone.
31 views
Daily Writeups
⤷ Title: Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:53:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #CISA KEV #CVE_2026_33825 #Huntress Labs #infosec #Local Privilege Escalation #LPE #Microsoft Defender #Microsoft Security #RedSun #SAM Database #TOCTOU #UnDefend
Daily CyberSecurity
Microsoft Defender Zero-Day "BlueHammer" Hits KEV Catalog Following Researcher's Protest
CISA adds BlueHammer (CVE-2026-33825) to the KEV catalog. This Microsoft Defender LPE exploit uses TOCTOU to hijack SAM databases. Patch by May 6, 2026.
16 views
Daily Writeups
⤷ Title: Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:32:06 +0000
════════════════════════
⌗ Tags: #Malware #Browser Error #cyber security 2026 #DigiCert #EV Code Signing #false positive #Microsoft Defender #Root Certificate #SSL/TLS #Trojan:Win32/Cerdigicert.A!dha #Windows 10 #Windows 11 Security
Daily CyberSecurity
Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
Microsoft Defender erroneously flagged DigiCert root certificates as "Cerdigicert" malware. Discover the fix and how to restore your system's trusted root store.
7 views
Daily Writeups
⤷ Title: The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 09:00:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #Cloudflare CAPTCHA #Credential Theft #cybersecurity #FIDO2 #infosec #MFA Bypass #Microsoft Defender #Paubox Hijacking #phishing #threat intelligence
Daily CyberSecurity
The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying
Microsoft warns of a massive AiTM phishing campaign targeting 13,000+ orgs. Using fake disciplinary lures, attackers bypass MFA to hijack active sessions.
23 views
Daily Writeups
⤷ Title: Dragon Breath’s Leaked Driver Shatters Windows Security and Neutralizes EDRs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:13:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT_Q_27 #APT31 #BYOVD #CrowdStrike #Cyber Espionage #Dragon Breath #dragoncore_k.sys #EDR Bypass #Kernel Driver #Malware 2026 #Microsoft Defender #SentinelOne #Zhengzhou 403
Penetration Testing Tools
Dragon Breath’s Leaked Driver Shatters Windows Security and Neutralizes EDRs
The Chinese cyber-espionage collective Dragon Breath, also recognized by the designation APT-Q-27, has purportedly acquired a formidable new
11 views
Daily Writeups
⤷ Title: Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:05:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anti_malware Client Version 4.18.26040.7 #CVE_2026_41091 Update #CVE_2026_45498 Denial of Service #Defender Security Advisory #Microsoft Defender Privilege Escalation #Microsoft Security Updates 2026 #Patch Verification Guide #System Level Privilege Escalation #Windows Endpoint Patch
Information Security News
Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
Microsoft has formally disseminated a security advisory detailing the successful remediation of critical vulnerabilities identified within the Microsoft
25 views
Daily Writeups
⤷ Title: Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:07:16 +0000
════════════════════════
⌗ Tags: #Malware #Cloud Security #Credential Theft #Microsoft Defender #npm registry #supply chain attack #Typosquatting #vpmdhaj cluster
Daily CyberSecurity
Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
A critical npm supply chain attack exploits lookalike packages to distribute credential harvesting malware. Learn how to protect your cloud assets.
8 views
Daily Writeups
⤷ Title: Algorithmic Infiltration: Microsoft Unmasks Generative AI Poisoning in Cryptojacking Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:43:30 +0000
════════════════════════
⌗ Tags: #Malware #autorun.dll sideloading exploit #cryptocurrency harvesting evasion techniques #Dynu dynamic DNS infrastructure #Fake hardware monitoring cryptojacker #HWMonitor FurMark cloned malware #Microsoft Defender registry exclusions #poisoned AI chatbot search results #ScreenConnect remote access trojan #SimpleRunPE.exe process injection #smart GPU throttling miner
Information Security News
Fake Hardware Monitoring Cryptojacker Hijacks High-End GPUs
Microsoft exposes a stealthy fake hardware monitoring cryptojacker mimicking FurMark and HWMonitor. It masks its GPU usage to avoid detection.
34 views
Daily Writeups
⤷ Title: Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 07:11:24 +0000
════════════════════════
⌗ Tags: #Malware #AI Search Poisoning #GPU Cryptojacking #malware #Microsoft Defender #Process Hollowing #ScreenConnect #threat intelligence
Daily CyberSecurity
Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts
A stealthy GPU cryptojacking campaign leverages AI search poisoning and process hollowing injection to hijack high-end rigs. Read the Microsoft report.
36 views