Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sun, 26 Mar 2023 01:29:23 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Fortra GoAnywhere’s False Reassurances Leave Clients Vulnerable
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/38b739f3ff70
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #file_transfer #goanywhere #data_breach #cybersecurity #fortra
Medium
Fortra GoAnywhere’s False Reassurances Leave Clients Vulnerable
Fortra GoAnywhere, a popular secure file transfer software, is currently under scrutiny after several companies reported data breaches despite being told by Fortra that their data was safe. The…
5 views
Daily Writeups
β€· Title: CVE-2025-10035 (CVSS 10): Critical Deserialization Flaw in GoAnywhere MFT Exposes Enterprises to Remote Exploitation
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 19 Sep 2025 01:38:35 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2025_10035 #cybersecurity #File Transfer #Fortra #GoAnywhere #MFT #Vulnerability
Daily CyberSecurity
CVE-2025-10035 (CVSS 10): Critical Deserialization Flaw in GoAnywhere MFT Exposes Enterprises to Remote Exploitation
A new 10.0 CVSS score vulnerability in Fortra's GoAnywhere MFT platform allows attackers to execute remote code. Learn how to protect your systems now.
16 views
Daily Writeups
β€· Title: Critical CVSS 10 Flaw in GoAnywhere File Transfer Threatens 20,000 Systems
════════════════════════
π€ͺ Author: Deeba Ahmed
════════════════════════
β΄΅ Time: Thu, 25 Sep 2025 10:36:30 +0000
════════════════════════
βŒ— Tags: #Security #Cl0p #Cybersecurity #File Transfer #Fortra #GoAnywhere #Ransomware #Vulnerability
Hackread
Critical CVSS 10 Flaw in GoAnywhere File Transfer Threatens 20,000 Systems
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
31 views
Daily Writeups
β€· Title: GoAnywhere MFT Zero-Day Actively Exploited for Days Before Patch Release
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 29 Sep 2025 03:58:15 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_10035 #cybersecurity #Deserialization #Fortra #GoAnywhere MFT #remote code execution #WatchTowr #zero_day
Penetration Testing Tools
GoAnywhere MFT Zero-Day Actively Exploited for Days Before Patch Release
A critical flaw in GoAnywhere MFT was actively exploited for days before Fortra issued a patch. Attackers gained unauthenticated RCE and created a backdoor.
29 views
Daily Writeups
β€· Title: Medusa Ransomware Group Actively Exploiting Critical GoAnywhere Flaw
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 08 Oct 2025 08:31:49 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_10035 #cybersecurity #Fortra #GoAnywhere #Medusa #ransomware #Storm_1175 #vulnerability
Penetration Testing Tools
Medusa Ransomware Group Actively Exploiting Critical GoAnywhere Flaw
The Medusa ransomware group, Storm-1175, has been actively exploiting a critical, unauthenticated GoAnywhere MFT flaw (CVE-2025-10035) for initial network access.
10 views
Daily Writeups
β€· Title: The 3-Million Email Siege: Inside Scripted Sparrow’s Global Industrialized BEC Machine
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 23 Dec 2025 00:46:56 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Automated Cyberattacks #BEC #business email compromise #Email Security #Executive Impersonation #Finance Fraud #Fortra FIRE #phishing #Scripted Sparrow #social engineering
Daily CyberSecurity
The 3-Million Email Siege: Inside Scripted Sparrow’s Global Industrialized BEC Machine
A massive, globally distributed cybercriminal collective is aggressively targeting corporate finance departments with a highly automated Business Email Compromise (BEC) campaign. A new report by F…
22 views
Daily Writeups
β€· Title: CalPhishing Scam Uses EvilTokens Kit, Outlook Invites to Steal M365 Sessions
════════════════════════
π€ͺ Author: Deeba Ahmed
════════════════════════
β΄΅ Time: Fri, 15 May 2026 10:30:22 +0000
════════════════════════
βŒ— Tags: #Security #Phishing Scam #Scams and Fraud #CalPhishing #Cyber Attack #Cyber Crime #Cybersecurity #EvilTokens #Fortra #M365 #Outlook #Outlook Invite #Phishing
Hackread
CalPhishing Scam Uses EvilTokens Kit, Outlook Invites to Steal M365 Sessions
Follow us on social media at @HackRead
30 views
Daily Writeups
β€· Title: Fortra BoKS Vulnerability Opens Door to Remote Command Injection
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Wed, 17 Jun 2026 02:30:30 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #BoKS #Command Injection #Core Privileged Access Manager #CVE_2026_9862 #Fortra #PAM
Daily CyberSecurity
Fortra BoKS Vulnerability Opens Door to Remote Command Injection
A critical Fortra BoKS vulnerability (CVE-2026-9862) enables remote OS command injection via the autoregistration service. Mitigate now.
16 views