Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Your PT1 Guide
════════════════════════
𐀪 Author: Mehdi Ben Fredj
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 00:39:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme_walkthrough #tryhackme #bug_bounty #certification
Medium
No One Tells You that About the PT1 Certification
A day ago, I officially passed the PT1 certification. Honestly, I still can’t believe it! I was lucky enough to get a free voucher for the…
18 views
Daily Writeups
⤷ Title: Malicious Uses of OSINT by Cybercriminals and Hackers
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 00:08:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #cybercrime #hacking #shodan #osint
Medium
Malicious Uses of OSINT by Cybercriminals and Hackers
Open Source Intelligence (OSINT) is often described as a double-edged sword in cybersecurity. It refers to gathering and analyzing publicly…
11 views
Daily Writeups
⤷ Title: Why Cybersecurity Is Non-Negotiable for Small Businesses in 2025
════════════════════════
𐀪 Author: CloudVanguard IT
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 00:44:51 GMT
════════════════════════
⌗ Tags: #computer_security #cybersecurity
Medium
Why Cybersecurity Is Non-Negotiable for Small Businesses in 2025
In 2025, cybersecurity is no longer a “nice to have” — it’s a survival tool. Small businesses, especially in Toronto and across Canada…
9 views
Daily Writeups
⤷ Title: Why IT Compliance Is Critical for Accounting Firms in 2025
════════════════════════
𐀪 Author: CloudVanguard IT
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 00:35:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #microsoft
Medium
Why IT Compliance Is Critical for Accounting Firms in 2025
In today’s digital-first world, accounting firms manage far more than spreadsheets and tax returns — they hold vast amounts of sensitive…
11 views
Daily Writeups
⤷ Title: Exportacion de logs de Google Workspace Alert Center a un SIEM
════════════════════════
𐀪 Author: Emir Ataide
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 00:08:27 GMT
════════════════════════
⌗ Tags: #siem #wazuh #cybersecurity #google_workspace #splunk
Medium
Exportacion de logs de Google Workspace Alert Center a un SIEM
¿Por qué es importante exportar los logs del Alert Center?
13 views
Daily Writeups
⤷ Title: Exporting Google Workspace Alert Center logs to SIEM
════════════════════════
𐀪 Author: Emir Ataide
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 23:53:21 GMT
════════════════════════
⌗ Tags: #google_workspace #cybersecurity #wazuh #splunk #siem
Medium
Exporting Google Workspace Alert Center logs to SIEM
📌 Note: Although this guide is specifically designed to integrate Google Workspace Alert Center with Wazuh, the general approach — using…
16 views
Daily Writeups
⤷ Title: AI project ideas for 2026 you’ll actually feel in real life
════════════════════════
𐀪 Author: Jameel Starnes
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 23:29:32 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #smart_cities #digital_health #cybersecurity #machine_learning
Medium
AI project ideas for 2026 you’ll actually feel in real life
If your Ai isn't changing lives IRL... why bother?
12 views
Daily Writeups
⤷ Title: Hardening LLMs with MCP Context Protector
════════════════════════
𐀪 Author: KrishKuchroo
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 23:18:51 GMT
════════════════════════
⌗ Tags: #trail_of_bits #cybersecurity #llm #mcp_server #ai_security
Medium
Hardening LLMs with MCP Context Protector
Over the past few days, I have been exploring how to secure large language model (LLM) applications by working with the MCP Context…
11 views
Daily Writeups
⤷ Title: 5 Security Headers Every CyberSecurity Candidate Should Know for Job Interview
════════════════════════
𐀪 Author: Mudassir Syed
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 23:18:01 GMT
════════════════════════
⌗ Tags: #job_interview #http_headers #appsec #cyber_jobs #cybersecurity
Medium
5 Security Headers Every CyberSecurity Candidate Should Know for Job Interview
These Simple Headers can help you get that dream cybersecurity job.
16 views
Daily Writeups
⤷ Title: Hands-On with Windows Server 2022: Setting Up Active Directory Domain (ADDS), OUs, Groups, and…
════════════════════════
𐀪 Author: Antriksh Saini
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 22:56:27 GMT
════════════════════════
⌗ Tags: #windows_server #system_administration #cybersecurity #cloud_server_management #active_directory
Medium
Hands-On with Windows Server 2022: Setting Up Active Directory Domain (ADDS), OUs, Groups, and…
🔹 Introduction
24 views
Daily Writeups
⤷ Title: PowerDodder: The Stealthy New Tool That Hides Malware in Your Script Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:36:38 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybercrime #cybersecurity #hacking #malware #persistence #post_exploitation #PowerDodder #security
Penetration Testing Tools
PowerDodder: The Stealthy New Tool That Hides Malware in Your Script Files
A new post-exploitation tool called PowerDodder is designed to stealthily embed malicious commands into legitimate script files for persistent, low-detection access.
21 views
Daily Writeups
⤷ Title: Major Electronics Manufacturer Struck by Ransomware, Halting Operations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:16:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber attack #cybersecurity #Data I/O #electronics #Industrial Security #manufacturing #ransomware #SEC
Penetration Testing Tools
Major Electronics Manufacturer Struck by Ransomware, Halting Operations
Data I/O, a major electronics manufacturer for brands like Apple and Google, has been hit by a ransomware attack that continues to disrupt its operations.
14 views
Daily Writeups
⤷ Title: $89 Million Gone: How Social Engineering Stole a Fortune in Bitcoin
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:12:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitcoin #cryptocurrency #cybercrime #data breach #Fraud #phishing #Social Engineering #Wasabi wallet #ZachXBT
Penetration Testing Tools
$89 Million Gone: How Social Engineering Stole a Fortune in Bitcoin
A Bitcoin holder was scammed out of $89 million after falling for a social engineering attack where fraudsters impersonated support staff from a crypto exchange.
12 views
Daily Writeups
⤷ Title: A New macOS Malware Is Using “ClickFix” to Steal Passwords and Crypto Wallets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:09:02 +0000
════════════════════════
⌗ Tags: #Malware #Atomic Stealer #ClickFix #cybercrime #cybersecurity #hacking #macos #malware #Shamos #threat intelligence
Penetration Testing Tools
A New macOS Malware Is Using "ClickFix" to Steal Passwords and Crypto Wallets
A new report reveals a macOS malware campaign deploying Shamos, a variant of Atomic Stealer. The attackers use "ClickFix" to steal passwords and crypto wallets.
9 views
Daily Writeups
⤷ Title: Weaponizing Filenames: Trellix Uncovers Stealthy Linux Malware Delivering VShell Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:07:58 +0000
════════════════════════
⌗ Tags: #Malware #Bash #cyber attack #cybersecurity #Fileless Malware #filenames #Linux #malware #Trellix #VShell
Penetration Testing Tools
Weaponizing Filenames: Trellix Uncovers Stealthy Linux Malware Delivering VShell Backdoor
A new report reveals a dangerous Linux malware campaign that uses malicious filenames to execute a stealthy, fileless attack without the victim's knowledge.
13 views
Daily Writeups
⤷ Title: Windows 11 Update Brings Android App Continuity and New Lock Screen Features
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:04:03 +0000
════════════════════════
⌗ Tags: #Windows #Android apps #cross_device #Insider Preview #Microsoft #Productivity #software update #Technology #Windows 11
Penetration Testing Tools
Windows 11 Update Brings Android App Continuity and New Lock Screen Features
Microsoft's new Windows 11 Insider build introduces the ability to seamlessly continue Android apps on a PC, along with updated battery icons and other refinements.
5 views
Daily Writeups
⤷ Title: Revenge of the Coder: Ex-Employee Jailed for Digital Sabotage and a Malicious “Kill Switch”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:00:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #data breach #disgruntled employee #hacking #Insider Threat #sabotage #U.S. Department of Justice
Penetration Testing Tools
Revenge of the Coder: Ex-Employee Jailed for Digital Sabotage and a Malicious "Kill Switch"
A former programmer was sentenced to four years in prison for digital sabotage, including a "kill switch" that paralyzed his company's network after he was fired.
8 views
Daily Writeups
⤷ Title: Fraudsters Evolve: How Money Mules Are Using Starlink and AI to Launder Funds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:58:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #banking #cybercrime #cybersecurity #Deepfake #Financial Fraud #Group_IB #money mules #Social Engineering #Starlink
Penetration Testing Tools
Fraudsters Evolve: How Money Mules Are Using Starlink and AI to Launder Funds
A new report reveals how criminals in the META region have evolved from simple IP masking to using Starlink, forged GPS, and pre-configured phones to launder money.
8 views
Daily Writeups
⤷ Title: The Marshal Madness: A Decade of Futile Patches for a Ruby Vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:56:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Deserialization #Marshal #RCE #remote code execution #ruby #Software Security #vulnerability
Penetration Testing Tools
The Marshal Madness: A Decade of Futile Patches for a Ruby Vulnerability
A new report chronicles a decade of vulnerabilities in the Ruby Marshal module, showing how insecure deserialization remains a systemic flaw in the language.
9 views
Daily Writeups
⤷ Title: Scoring Insecurity: Study Reveals Chaos in Vulnerability Ranking Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:54:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #cyber defense #cybersecurity #EPSS #Risk Management #security research #SSVC #vulnerability
Penetration Testing Tools
Scoring Insecurity: Study Reveals Chaos in Vulnerability Ranking Systems
A new study finds that popular vulnerability scoring systems are inconsistent and unreliable, leading to chaos in how organizations prioritize and address security flaws.
9 views
Daily Writeups
⤷ Title: Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:50:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #audit logs #Compliance #Copilot #cybersecurity #data breach #enterprise security #M365 #Microsoft #vulnerability
Penetration Testing Tools
Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
A critical flaw in Microsoft 365 Copilot allowed it to access files without a trace in audit logs, leaving organizations with incomplete records for months.
10 views