Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Hands-On with Windows Server 2022: Setting Up Active Directory Domain (ADDS), OUs, Groups, and…
════════════════════════
𐀪 Author: Antriksh Saini
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 22:56:27 GMT
════════════════════════
⌗ Tags: #windows_server #system_administration #cybersecurity #cloud_server_management #active_directory
Medium
Hands-On with Windows Server 2022: Setting Up Active Directory Domain (ADDS), OUs, Groups, and…
🔹 Introduction
23 views
Daily Writeups
⤷ Title: PowerDodder: The Stealthy New Tool That Hides Malware in Your Script Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:36:38 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybercrime #cybersecurity #hacking #malware #persistence #post_exploitation #PowerDodder #security
Penetration Testing Tools
PowerDodder: The Stealthy New Tool That Hides Malware in Your Script Files
A new post-exploitation tool called PowerDodder is designed to stealthily embed malicious commands into legitimate script files for persistent, low-detection access.
21 views
Daily Writeups
⤷ Title: Major Electronics Manufacturer Struck by Ransomware, Halting Operations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:16:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber attack #cybersecurity #Data I/O #electronics #Industrial Security #manufacturing #ransomware #SEC
Penetration Testing Tools
Major Electronics Manufacturer Struck by Ransomware, Halting Operations
Data I/O, a major electronics manufacturer for brands like Apple and Google, has been hit by a ransomware attack that continues to disrupt its operations.
14 views
Daily Writeups
⤷ Title: $89 Million Gone: How Social Engineering Stole a Fortune in Bitcoin
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:12:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitcoin #cryptocurrency #cybercrime #data breach #Fraud #phishing #Social Engineering #Wasabi wallet #ZachXBT
Penetration Testing Tools
$89 Million Gone: How Social Engineering Stole a Fortune in Bitcoin
A Bitcoin holder was scammed out of $89 million after falling for a social engineering attack where fraudsters impersonated support staff from a crypto exchange.
12 views
Daily Writeups
⤷ Title: A New macOS Malware Is Using “ClickFix” to Steal Passwords and Crypto Wallets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:09:02 +0000
════════════════════════
⌗ Tags: #Malware #Atomic Stealer #ClickFix #cybercrime #cybersecurity #hacking #macos #malware #Shamos #threat intelligence
Penetration Testing Tools
A New macOS Malware Is Using "ClickFix" to Steal Passwords and Crypto Wallets
A new report reveals a macOS malware campaign deploying Shamos, a variant of Atomic Stealer. The attackers use "ClickFix" to steal passwords and crypto wallets.
9 views
Daily Writeups
⤷ Title: Weaponizing Filenames: Trellix Uncovers Stealthy Linux Malware Delivering VShell Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:07:58 +0000
════════════════════════
⌗ Tags: #Malware #Bash #cyber attack #cybersecurity #Fileless Malware #filenames #Linux #malware #Trellix #VShell
Penetration Testing Tools
Weaponizing Filenames: Trellix Uncovers Stealthy Linux Malware Delivering VShell Backdoor
A new report reveals a dangerous Linux malware campaign that uses malicious filenames to execute a stealthy, fileless attack without the victim's knowledge.
13 views
Daily Writeups
⤷ Title: Windows 11 Update Brings Android App Continuity and New Lock Screen Features
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:04:03 +0000
════════════════════════
⌗ Tags: #Windows #Android apps #cross_device #Insider Preview #Microsoft #Productivity #software update #Technology #Windows 11
Penetration Testing Tools
Windows 11 Update Brings Android App Continuity and New Lock Screen Features
Microsoft's new Windows 11 Insider build introduces the ability to seamlessly continue Android apps on a PC, along with updated battery icons and other refinements.
5 views
Daily Writeups
⤷ Title: Revenge of the Coder: Ex-Employee Jailed for Digital Sabotage and a Malicious “Kill Switch”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:00:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #data breach #disgruntled employee #hacking #Insider Threat #sabotage #U.S. Department of Justice
Penetration Testing Tools
Revenge of the Coder: Ex-Employee Jailed for Digital Sabotage and a Malicious "Kill Switch"
A former programmer was sentenced to four years in prison for digital sabotage, including a "kill switch" that paralyzed his company's network after he was fired.
8 views
Daily Writeups
⤷ Title: Fraudsters Evolve: How Money Mules Are Using Starlink and AI to Launder Funds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:58:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #banking #cybercrime #cybersecurity #Deepfake #Financial Fraud #Group_IB #money mules #Social Engineering #Starlink
Penetration Testing Tools
Fraudsters Evolve: How Money Mules Are Using Starlink and AI to Launder Funds
A new report reveals how criminals in the META region have evolved from simple IP masking to using Starlink, forged GPS, and pre-configured phones to launder money.
8 views
Daily Writeups
⤷ Title: The Marshal Madness: A Decade of Futile Patches for a Ruby Vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:56:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Deserialization #Marshal #RCE #remote code execution #ruby #Software Security #vulnerability
Penetration Testing Tools
The Marshal Madness: A Decade of Futile Patches for a Ruby Vulnerability
A new report chronicles a decade of vulnerabilities in the Ruby Marshal module, showing how insecure deserialization remains a systemic flaw in the language.
9 views
Daily Writeups
⤷ Title: Scoring Insecurity: Study Reveals Chaos in Vulnerability Ranking Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:54:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #cyber defense #cybersecurity #EPSS #Risk Management #security research #SSVC #vulnerability
Penetration Testing Tools
Scoring Insecurity: Study Reveals Chaos in Vulnerability Ranking Systems
A new study finds that popular vulnerability scoring systems are inconsistent and unreliable, leading to chaos in how organizations prioritize and address security flaws.
9 views
Daily Writeups
⤷ Title: Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:50:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #audit logs #Compliance #Copilot #cybersecurity #data breach #enterprise security #M365 #Microsoft #vulnerability
Penetration Testing Tools
Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
A critical flaw in Microsoft 365 Copilot allowed it to access files without a trace in audit logs, leaving organizations with incomplete records for months.
10 views
Daily Writeups
⤷ Title: Fake Bounty on Notorious Ransomware Gang Exposed in Hoax Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:48:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #Disinformation #Europol #hacking #hoax #Qilin #ransomware #threat intelligence
Penetration Testing Tools
Fake Bounty on Notorious Ransomware Gang Exposed in Hoax Campaign
A widely circulated report of a Europol bounty on Qilin ransomware leaders has been exposed as a hoax, part of a disinformation campaign between rival gangs.
14 views
Daily Writeups
⤷ Title: Ex-Programmer Davis Lu Jailed for Triggering Malicious “Kill Switch” at Eaton
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:46:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Corporate Sabotage #Cybercrime #Davis Lu #DOJ #Eaton Energy #Insider Threat #IT security #Kill Switch #Malicious code #Ransomware_style Attack
Daily CyberSecurity
Ex-Programmer Davis Lu Jailed for Triggering Malicious “Kill Switch” at Eaton
Ex-Eaton programmer Davis Lu sentenced for planting a malicious “kill switch” that sabotaged company servers and caused massive financial losses.
15 views
Daily Writeups
⤷ Title: Anthropic’s “Atomic Shield”: A New AI Classifier Blocks Nuclear Weapon Blueprints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:41:14 +0000
════════════════════════
⌗ Tags: #Technology #AI safety #Anthropic #artificial intelligence #Claude AI #NNSA #nuclear security #security
Daily CyberSecurity
Anthropic's "Atomic Shield": A New AI Classifier Blocks Nuclear Weapon Blueprints
Anthropic has partnered with the U.S. government to develop an AI classifier that can block attempts to use its Claude AI model for nuclear weapon construction.
9 views
Daily Writeups
⤷ Title: Beyond the Breach: Coinbase Cracks Down on Remote Work to Stop Hackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:36:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #coinbase #crypto #Cybercrime #cybersecurity #Hacking #Insider Threat #North Korea #Remote Work #security policy
Daily CyberSecurity
Beyond the Breach: Coinbase Cracks Down on Remote Work to Stop Hackers
Following a breach tied to an insider, Coinbase is restricting remote work and requiring U.S. citizenship for key roles to combat infiltration by North Korean hackers.
10 views
Daily Writeups
⤷ Title: Account Verification Bypass through JWT Misuse & CWE-398
════════════════════════
𐀪 Author: Raunak Gupta Aka Biscuit
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:33:32 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #coding #bug_bounty
Medium
Account Verification Bypass through JWT Misuse & CWE-347
My Introduction
7 views
Daily Writeups
⤷ Title: How I Got Hooked on Hacking: My First Successful Exploit
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:37:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #my_first_hack #hacking #ethical_hacking #my_hacking_journey
Medium
How I Got Hooked on Hacking: My First Successful Exploit
It Started With a Book and a Bored Summer
7 views
Daily Writeups
⤷ Title: HackTheBox Walkthrough: Arctic — From Foothold to SYSTEM (OSCP+ Prep)
════════════════════════
𐀪 Author: Kaplanibrahimm
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:12:59 GMT
════════════════════════
⌗ Tags: #hackthebox #hacking #penetration_testing #pentesting #oscp
Medium
HackTheBox Walkthrough: Arctic — From Foothold to SYSTEM (OSCP+ Prep)
In this write-up, I’ll walk you through Arctic, one of the classic HackTheBox machines I tackled while preparing for the OSCP+ exam.
14 views
Daily Writeups
⤷ Title: The convergence of SaaS and why next-gen EDR might not be what you think…
════════════════════════
𐀪 Author: Victor De Luca
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:53:00 GMT
════════════════════════
⌗ Tags: #operating_systems #cybersecurity #saas #product_management #cyberattack
Medium
The convergence of SaaS and why next-gen EDR might not be what you think…
Back when I started my first corporate job out of the Armed Forces in 2017, I was stoked to have the privilege to work with dozens of…
11 views
Daily Writeups
⤷ Title: How to Stop AI Bots from Scraping Your Self-Hosted Git Repos with SafeLine WAF
════════════════════════
𐀪 Author: AerieWhole123
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:52:37 GMT
════════════════════════
⌗ Tags: #safeline_waf #cybersecurity #beginner #ai
Medium
How to Stop AI Bots from Scraping Your Self-Hosted Git Repos with SafeLine WAF
AI-powered crawlers are getting smarter — and they’re not shy about grabbing open code from public and self-hosted Git repositories. If…
10 views