Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Azure AD Workload Identity Federation with Cognito
════════════════════════
𐀪 Author: Greg Biegel
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 13:18:30 GMT
════════════════════════
⌗ Tags: #azure_ad #api_security #cognito_identity_pool #workload_identity #aws
Medium
Azure AD Workload Identity Federation with Cognito
In this post I describe how to use Workload Identity Federation within Azure Active Directory (AAD), to access resources protected by an…
35 views
Daily Writeups
⤷ Title: High-Severity Flaw in HashiCorp Nomad (CVE-2025-4922) Allows Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:13:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control List #ACL #CVE_2025_4922 #cybersecurity #HashiCorp Nomad #Nomad #privilege escalation #security patch #Vulnerability #Workload Orchestration
Daily CyberSecurity
High-Severity Flaw in HashiCorp Nomad (CVE-2025-4922) Allows Privilege Escalation
A high-severity flaw (CVE-2025-4922) in HashiCorp Nomad allows privilege escalation via ACL policy lookup. Upgrade to Nomad 1.10.2 (or later) immediately.
12 views
Daily Writeups
⤷ Title: More than Human: Workload Identities in IAM
════════════════════════
𐀪 Author: Curity
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 13:27:18 GMT
════════════════════════
⌗ Tags: #oauth #data_protection #workload_identity #api_security #non_human_identities
Medium
More than Human: Workload Identities in IAM
Workloads need identities too. Go beyond humans — secure APIs, services and machines with modern IAM. Here’s how it works.
8 views
Daily Writeups
⤷ Title: I Deleted Every Static Claude API Key I Owned. Here’s the Keyless Migration, Provider by Provider.
════════════════════════
𐀪 Author: Anup Karanjkar
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 16:10:48 GMT
════════════════════════
⌗ Tags: #workload_identity #claude #api_security #devops #ai_engineering
Medium
I Deleted Every Static Claude API Key I Owned. Here’s the Keyless Migration, Provider by Provider.
Workload Identity Federation just hit GA — the per-provider setup, and the precedence trap that cost me two quiet days
39 views