Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Weaponizing Filenames: Trellix Uncovers Stealthy Linux Malware Delivering VShell Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:07:58 +0000
════════════════════════
⌗ Tags: #Malware #Bash #cyber attack #cybersecurity #Fileless Malware #filenames #Linux #malware #Trellix #VShell
Penetration Testing Tools
Weaponizing Filenames: Trellix Uncovers Stealthy Linux Malware Delivering VShell Backdoor
A new report reveals a dangerous Linux malware campaign that uses malicious filenames to execute a stealthy, fileless attack without the victim's knowledge.
13 views
Daily Writeups
⤷ Title: Windows 11 Update Brings Android App Continuity and New Lock Screen Features
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:04:03 +0000
════════════════════════
⌗ Tags: #Windows #Android apps #cross_device #Insider Preview #Microsoft #Productivity #software update #Technology #Windows 11
Penetration Testing Tools
Windows 11 Update Brings Android App Continuity and New Lock Screen Features
Microsoft's new Windows 11 Insider build introduces the ability to seamlessly continue Android apps on a PC, along with updated battery icons and other refinements.
5 views
Daily Writeups
⤷ Title: Revenge of the Coder: Ex-Employee Jailed for Digital Sabotage and a Malicious “Kill Switch”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:00:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #data breach #disgruntled employee #hacking #Insider Threat #sabotage #U.S. Department of Justice
Penetration Testing Tools
Revenge of the Coder: Ex-Employee Jailed for Digital Sabotage and a Malicious "Kill Switch"
A former programmer was sentenced to four years in prison for digital sabotage, including a "kill switch" that paralyzed his company's network after he was fired.
8 views
Daily Writeups
⤷ Title: Fraudsters Evolve: How Money Mules Are Using Starlink and AI to Launder Funds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:58:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #banking #cybercrime #cybersecurity #Deepfake #Financial Fraud #Group_IB #money mules #Social Engineering #Starlink
Penetration Testing Tools
Fraudsters Evolve: How Money Mules Are Using Starlink and AI to Launder Funds
A new report reveals how criminals in the META region have evolved from simple IP masking to using Starlink, forged GPS, and pre-configured phones to launder money.
8 views
Daily Writeups
⤷ Title: The Marshal Madness: A Decade of Futile Patches for a Ruby Vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:56:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Deserialization #Marshal #RCE #remote code execution #ruby #Software Security #vulnerability
Penetration Testing Tools
The Marshal Madness: A Decade of Futile Patches for a Ruby Vulnerability
A new report chronicles a decade of vulnerabilities in the Ruby Marshal module, showing how insecure deserialization remains a systemic flaw in the language.
9 views
Daily Writeups
⤷ Title: Scoring Insecurity: Study Reveals Chaos in Vulnerability Ranking Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:54:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #cyber defense #cybersecurity #EPSS #Risk Management #security research #SSVC #vulnerability
Penetration Testing Tools
Scoring Insecurity: Study Reveals Chaos in Vulnerability Ranking Systems
A new study finds that popular vulnerability scoring systems are inconsistent and unreliable, leading to chaos in how organizations prioritize and address security flaws.
9 views
Daily Writeups
⤷ Title: Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:50:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #audit logs #Compliance #Copilot #cybersecurity #data breach #enterprise security #M365 #Microsoft #vulnerability
Penetration Testing Tools
Silent Access: Critical Flaw in Microsoft Copilot Bypasses All Audit Logs
A critical flaw in Microsoft 365 Copilot allowed it to access files without a trace in audit logs, leaving organizations with incomplete records for months.
10 views
Daily Writeups
⤷ Title: Fake Bounty on Notorious Ransomware Gang Exposed in Hoax Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:48:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #Disinformation #Europol #hacking #hoax #Qilin #ransomware #threat intelligence
Penetration Testing Tools
Fake Bounty on Notorious Ransomware Gang Exposed in Hoax Campaign
A widely circulated report of a Europol bounty on Qilin ransomware leaders has been exposed as a hoax, part of a disinformation campaign between rival gangs.
14 views
Daily Writeups
⤷ Title: Ex-Programmer Davis Lu Jailed for Triggering Malicious “Kill Switch” at Eaton
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:46:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Corporate Sabotage #Cybercrime #Davis Lu #DOJ #Eaton Energy #Insider Threat #IT security #Kill Switch #Malicious code #Ransomware_style Attack
Daily CyberSecurity
Ex-Programmer Davis Lu Jailed for Triggering Malicious “Kill Switch” at Eaton
Ex-Eaton programmer Davis Lu sentenced for planting a malicious “kill switch” that sabotaged company servers and caused massive financial losses.
15 views
Daily Writeups
⤷ Title: Anthropic’s “Atomic Shield”: A New AI Classifier Blocks Nuclear Weapon Blueprints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:41:14 +0000
════════════════════════
⌗ Tags: #Technology #AI safety #Anthropic #artificial intelligence #Claude AI #NNSA #nuclear security #security
Daily CyberSecurity
Anthropic's "Atomic Shield": A New AI Classifier Blocks Nuclear Weapon Blueprints
Anthropic has partnered with the U.S. government to develop an AI classifier that can block attempts to use its Claude AI model for nuclear weapon construction.
9 views
Daily Writeups
⤷ Title: Beyond the Breach: Coinbase Cracks Down on Remote Work to Stop Hackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:36:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #coinbase #crypto #Cybercrime #cybersecurity #Hacking #Insider Threat #North Korea #Remote Work #security policy
Daily CyberSecurity
Beyond the Breach: Coinbase Cracks Down on Remote Work to Stop Hackers
Following a breach tied to an insider, Coinbase is restricting remote work and requiring U.S. citizenship for key roles to combat infiltration by North Korean hackers.
10 views
Daily Writeups
⤷ Title: Account Verification Bypass through JWT Misuse & CWE-398
════════════════════════
𐀪 Author: Raunak Gupta Aka Biscuit
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:33:32 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #coding #bug_bounty
Medium
Account Verification Bypass through JWT Misuse & CWE-347
My Introduction
7 views
Daily Writeups
⤷ Title: How I Got Hooked on Hacking: My First Successful Exploit
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:37:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #my_first_hack #hacking #ethical_hacking #my_hacking_journey
Medium
How I Got Hooked on Hacking: My First Successful Exploit
It Started With a Book and a Bored Summer
7 views
Daily Writeups
⤷ Title: HackTheBox Walkthrough: Arctic — From Foothold to SYSTEM (OSCP+ Prep)
════════════════════════
𐀪 Author: Kaplanibrahimm
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:12:59 GMT
════════════════════════
⌗ Tags: #hackthebox #hacking #penetration_testing #pentesting #oscp
Medium
HackTheBox Walkthrough: Arctic — From Foothold to SYSTEM (OSCP+ Prep)
In this write-up, I’ll walk you through Arctic, one of the classic HackTheBox machines I tackled while preparing for the OSCP+ exam.
14 views
Daily Writeups
⤷ Title: The convergence of SaaS and why next-gen EDR might not be what you think…
════════════════════════
𐀪 Author: Victor De Luca
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:53:00 GMT
════════════════════════
⌗ Tags: #operating_systems #cybersecurity #saas #product_management #cyberattack
Medium
The convergence of SaaS and why next-gen EDR might not be what you think…
Back when I started my first corporate job out of the Armed Forces in 2017, I was stoked to have the privilege to work with dozens of…
11 views
Daily Writeups
⤷ Title: How to Stop AI Bots from Scraping Your Self-Hosted Git Repos with SafeLine WAF
════════════════════════
𐀪 Author: AerieWhole123
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:52:37 GMT
════════════════════════
⌗ Tags: #safeline_waf #cybersecurity #beginner #ai
Medium
How to Stop AI Bots from Scraping Your Self-Hosted Git Repos with SafeLine WAF
AI-powered crawlers are getting smarter — and they’re not shy about grabbing open code from public and self-hosted Git repositories. If…
10 views
Daily Writeups
⤷ Title: Lost in Translation: Threat Actors Use SEO Poisoning and Fake DeepL Sites to Distribute Gh0st RAT
════════════════════════
𐀪 Author: Defentive
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:24:50 GMT
════════════════════════
⌗ Tags: #threat_hunting #cybersecurity #threat_research #remote_access #malware_analysis
Medium
Lost in Translation: Threat Actors Use SEO Poisoning and Fake DeepL Sites to Distribute Gh0st RAT
The Defensive Threat Research team has uncovered an ongoing malware campaign deploying Gh0st RAT through SEO poisoning and fake DeepL…
10 views
Daily Writeups
⤷ Title: MCP Server with URLhaus
════════════════════════
𐀪 Author: dmdund
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 02:05:03 GMT
════════════════════════
⌗ Tags: #automation #mcp_server #agentic_ai #cybersecurity
Medium
MCP Server with URLhaus
Introduction
8 views
Daily Writeups
⤷ Title: How I Built (and Secured) My First Mini-Network in Cisco Packet Tracer
════════════════════════
𐀪 Author: Mary Isioma
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:47:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #protocol #firewall_security #cisco_packet_tracer
Medium
How I Built (and Secured) My First Mini-Network in Cisco Packet Tracer
When I first opened Cisco Packet Tracer, it felt like staring at a box of Lego for the digital world. Routers, switches, PCs, cables — all…
9 views
Daily Writeups
⤷ Title: The Final Frontier: How AI and Cybersecurity Are Reshaping Space Security Over the Next Decade
════════════════════════
𐀪 Author: CCD-IS
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:41:59 GMT
════════════════════════
⌗ Tags: #cyberdiplomacy #vladimir_tsakanyan #cybersecurity
Medium
The Final Frontier: How AI and Cybersecurity Are Reshaping Space Security Over the Next Decade
Vladimir Tsakanyan
14 views
Daily Writeups
⤷ Title: Honeypot Nedir?
════════════════════════
𐀪 Author: Marvan Alawi
════════════════════════
ⴵ Time: Mon, 25 Aug 2025 01:41:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #web_development #honeypot #iot
Medium
Honeypot Nedir?
Honeypot nedir? Bir işletme veya kuruluş için artıları ve eksileri nelerdir? Ne gibi türleri vardır?
21 views