Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Symantec PAM Patches Critical Security Flaw – CVE-2025-24503 (CVSSv4 9.3)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 01:34:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_24503 #CVE_2025_24507 #Symantec PAM
Cybersecurity News
Symantec PAM Patches Critical Security Flaw - CVE-2025-24503 (CVSSv4 9.3)
Keep your sensitive information safe with Symantec PAM 4.2.1. Find out how the latest release fixes vulnerabilities that could be exploited by attackers.
16 views
Daily Writeups
⤷ Title: Symantec Demonstrates OpenAI’s Operator Agent in PoC Phishing Attack
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Fri, 14 Mar 2025 18:36:58 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Phishing Scam #Chatbot #Cybersecurity #OpenAI #Phishing #PoC #security #Symantec
Hackread
Symantec Demonstrates OpenAI’s Operator Agent in PoC Phishing Attack
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
45 views
Daily Writeups
⤷ Title: Symantec Endpoint Protection IPS Kuralı Oluşturma
════════════════════════
𐀪 Author: onurgumus
════════════════════════
ⴵ Time: Tue, 25 Mar 2025 11:54:32 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #cybersecurity #symantec #sep
Medium
Symantec Endpoint Protection IPS Kuralı Oluşturma
Merhaba, Symantec Endpoint Protection yazı serisine Symantec Endpoint Protection Manager (SEPM) Intrusion Prevention (Saldırı Önleme)…
26 views
Daily Writeups
⤷ Title: Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:36:41 +0000
════════════════════════
⌗ Tags: #Cyber Security #Billbug #Bronze Elgin #ChromeKatz #cyberattack #DLL Sideloading #Espionage Campaign #Lotus Blossom #Lotus Panda #malware #Sagerunex #Southeast Asia #Symantec #Threat Actors
Daily CyberSecurity
Billbug Group Targets Southeast Asia in Sophisticated Espionage Campaign
The Billbug group targeted Southeast Asian organizations using advanced tools & DLL sideloading. This report details their sophisticated espionage campaign.
20 views
Daily Writeups
⤷ Title: Chrome Extension Security Alert: Hidden API Keys Expose 100M+ Users to Risk!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 10:54:38 +0000
════════════════════════
⌗ Tags: #Data Leak #API keys #AWS S3 #Browser Extensions #Chrome Web Store #Data Breach #Google Analytics #hardcoded credentials #Microsoft Editor #security vulnerability #Symantec #Trust Wallet
Daily CyberSecurity
Chrome Extension Security Alert: Hidden API Keys Expose 100M+ Users to Risk!
Symantec found over 100 million Chrome extension users at risk due to hardcoded API keys and secrets, potentially leading to data manipulation and financial loss.
32 views
Daily Writeups
⤷ Title: Chrome Extension Security Alert: Hidden API Keys Expose 21M+ Users to Risk!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 10:54:38 +0000
════════════════════════
⌗ Tags: #Data Leak #API keys #AWS S3 #Browser Extensions #Chrome Web Store #Data Breach #Google Analytics #hardcoded credentials #Microsoft Editor #security vulnerability #Symantec #Trust Wallet
Daily CyberSecurity
Chrome Extension Security Alert: Hidden API Keys Expose 21M+ Users to Risk!
Symantec found over 21 million Chrome extension users at risk due to hardcoded API keys and secrets, potentially leading to data manipulation and financial loss.
26 views
Daily Writeups
⤷ Title: Popular Chrome Extensions Caught Leaking Sensitive User Data via Unencrypted HTTP
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:30:42 +0000
════════════════════════
⌗ Tags: #Data Leak #Chrome extensions #cybersecurity #data leak #Data Privacy #http #Man in the Middle #password manager #Symantec #Unencrypted Traffic #vpn
Daily CyberSecurity
Popular Chrome Extensions Caught Leaking Sensitive User Data via Unencrypted HTTP
Symantec reveals popular Chrome extensions like Browsec VPN & DualSafe Password Manager are leaking sensitive user data over unencrypted HTTP, risking privacy.
19 views
Daily Writeups
⤷ Title: Ransomware or Espionage? Fog Ransomware Attack in Asia Raises Suspicion with Rare Toolset
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 14 Jun 2025 00:16:54 +0000
════════════════════════
⌗ Tags: #Malware #APT41 #Cobalt Strike #Cybercrime #cybersecurity #Espionage #Financial Institution #Fog Ransomware #GC2 #persistence #ransomware #Symantec #Syteca
Daily CyberSecurity
Ransomware or Espionage? Fog Ransomware Attack in Asia Raises Suspicion with Rare Toolset
Symantec reports a Fog ransomware attack on an Asian bank that used unusual tools like employee monitoring software and an APT-linked backdoor, suggesting possible espionage.
18 views
Daily Writeups
⤷ Title: Symantec Endpoint Management Alert: Critical Flaw Allows Unauthenticated RCE, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 10:58:57 +0000
════════════════════════
⌗ Tags: #Vulnerability #Altiris #cybersecurity #Endpoint Management #Insecure Deserialization #rce #Remote Code Execution #Symantec
Daily CyberSecurity
Symantec Endpoint Management Alert: Critical Flaw Allows Unauthenticated RCE, PoC Releases
A critical RCE flaw (CVE-2025-5333) in Symantec Endpoint Management (Altiris) allows unauthenticated attackers to execute arbitrary code via insecure .NET Remoting deserialization.
28 views
Daily Writeups
⤷ Title: LockBit Ransomware Evolves: New Stealthy Tactics Use DLL Sideloading & Masquerading to Bypass Defenses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 02:30:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #DLL Sideloading #evasion #LockBit #Masquerading #ransomware #Symantec #threat actor #TTPs
Daily CyberSecurity
LockBit Ransomware Evolves: New Stealthy Tactics Use DLL Sideloading & Masquerading to Bypass Defenses
Symantec's report reveals LockBit is using evolved tactics, including DLL sideloading and process masquerading with legitimate executables, to evade detection and deploy payloads.
13 views
Daily Writeups
⤷ Title: Silent Killer: Black Basta Bundles “BYOVD” Driver to Blind Antivirus
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:22:19 +0000
════════════════════════
⌗ Tags: #Malware #Black Basta #BYOVD #Cardinal #CrowdStrike #cybersecurity #defense evasion #kernel_exploitation #Malware Analysis #NsecSoft Driver #ransomware #Sophos #Symantec
Daily CyberSecurity
Silent Killer: Black Basta Bundles "BYOVD" Driver to Blind Antivirus
Black Basta ransomware now embeds a vulnerable NsecSoft driver (BYOVD) to silently kill antivirus processes like Sophos & CrowdStrike.
23 views
Daily Writeups
⤷ Title: North Korean Lazarus Group Adopts Medusa Ransomware in Global Attacks
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 23:40:47 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Crime #Cyber Attack #Cybersecurity #Extortion #Lazarus #Medusa #North Korea #Ransomware #Symantec #Vulnerability
Hackread
North Korean Lazarus Group Adopts Medusa Ransomware in Global Attacks
Lazarus Group is now using Medusa ransomware in attacks on healthcare and social services, signaling a move toward profit-focused cybercrime.
35 views
Daily Writeups
⤷ Title: Harvester APT Expands Spying Operations with New GoGra Linux Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 16:42:05 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #Afghanistan #Carbon Black #Cyber Attack #Cybersecurity #GoGra #Harvester APT #India #Linux #Symantec
Hackread
Harvester APT Expands Spying Operations with New GoGra Linux Malware
New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control.
32 views
Daily Writeups
⤷ Title: Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 01:08:40 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Carbon Black #cyber_espionage #GoGra #Harvester #infosec #Linux Backdoor #Malware Analysis #Microsoft Graph API #South Asia Security #Symantec
Daily CyberSecurity
Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API
Harvester APT expands to Linux using Microsoft Graph API for C2. Learn how the "GoGra" variant uses Outlook and "Zomato Pizza" lures to evade detection.
16 views
Daily Writeups
⤷ Title: Iranian Seedworm Group Infiltrates South Korean Tech Titan in Global Espionage Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:13:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ChromElevator #Credential Harvesting #DLL Sideloading #Industrial Espionage #Iranian MOIS #MuddyWater #Node.js Malware #Seedworm #South Korea Cyberattack #Symantec #threat intelligence
Penetration Testing Tools
Iranian Seedworm Group Infiltrates South Korean Tech Titan in Global Espionage Surge
The Iranian threat collective Seedworm maintained a clandestine presence within the infrastructure of a prominent South Korean electronics
21 views
Daily Writeups
⤷ Title: Predating Stuxnet: How the “fast16” Malware Secretly Sabotaged Nuclear Weapons Simulations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:04:53 +0000
════════════════════════
⌗ Tags: #Malware #AUTODYN #Cyber Sabotage #Equation Group #fast16 #infosec #LS_DYNA #Lua Virtual Machine #Nuclear Weapon Design #Stuxnet #Symantec Threat Hunter #Uranium Compression
Daily CyberSecurity
Predating Stuxnet: How the "fast16" Malware Secretly Sabotaged Nuclear Weapons Simulations
Symantec exposes fast16, a 2005 cyber-sabotage framework designed to inject an in-memory Lua engine and corrupt uranium-compression weapons simulations.
15 views
Daily Writeups
⤷ Title: GodDamn Ransomware Rebrands Beast and Uses a Malicious Signed Driver to Disable Defenses
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 06:11:12 +0000
════════════════════════
⌗ Tags: #Malware #AnyDesk #Beast Ransomware #BYOVD #GodDamn Ransomware #Hyadina #Malicious Kernel Driver #mimikatz #Monster Ransomware #PoisonX #Symantec
Daily CyberSecurity
GodDamn Ransomware Rebrands Beast and Uses a Malicious Signed Driver to Disable Defenses
At a Glance Malware family GodDamn ransomware (rebrand of Beast, formerly Monster) Threat actor Hyadina, a ransomware-as-a-service developer tracked by Symantec Target / victims Enterprise Windows…
16 views
Daily Writeups
⤷ Title: Daxin Malware Resurfaces in Taiwan Alongside New Stupig Backdoor
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 08:00:57 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #cyber_espionage #Daxin #Stupig #Symantec #Taiwan
Daily CyberSecurity
Daxin Malware Resurfaces in Taiwan Alongside New Stupig Backdoor
At a Glance Actor or group Unnamed China-linked espionage group (per Symantec’s 2022 attribution) Activity type Suspected long-term cyber espionage Targets Taiwan-based subsidiary of a multi…
9 views
Daily Writeups
⤷ Title: Spirals Ransomware Encrypts a South Asian IT Network in Under 24 Hours
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 14:30:13 +0000
════════════════════════
⌗ Tags: #Malware #Double Extortion #IIS Web Shell #lateral movement #PsExec #ransomware #Rust malware #Spirals Ransomware #Symantec
Daily CyberSecurity
Spirals Ransomware Encrypts a South Asian IT Network in Under 24 Hours
At a glance Malware family Spirals (new Rust-based ransomware, named by its operators) Threat actor Unknown. No named group; attribution not established. Target / victims One IT services company i…
16 views