Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Broadcom Fixes Multiple VMware vCenter and NSX Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Sep 2025 02:04:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Broadcom #CVE_2025_41250 #cybersecurity #NSX #security update #SMTP Header Injection #Username Enumeration #vCenter #vmware
Daily CyberSecurity
Broadcom Fixes Multiple VMware vCenter and NSX Vulnerabilities
Broadcom patches three vulnerabilities in VMware vCenter and NSX. The flaws could lead to SMTP header injection and username enumeration, increasing the risk of unauthorized access.
25 views
Daily Writeups
⤷ Title: VMware Zero-Day (CVE-2025-41244) Exploited by Chinese APT UNC5174 Since October 2024
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:01:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aria Operations #Broadcom #Chinese APT #privilege escalation #UNC5174 #vmware #VMware Tools #zero_day
Penetration Testing Tools
VMware Zero-Day (CVE-2025-41244) Exploited by Chinese APT UNC5174 Since October 2024
Broadcom patched CVE-2025-41244, a zero-day LPE flaw in VMware Aria Operations and Tools. NVISO confirmed exploitation since Oct. 2024 by Chinese APT UNC5174.
8 views
Daily Writeups
⤷ Title: OpenAI and Broadcom Partner to Develop Custom AI Accelerator Chips for 10 GW of Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 02:27:26 +0000
════════════════════════
⌗ Tags: #Technology #AI Accelerator #Broadcom #Custom Silicon #Data Center #Infrastructure #OpenAI #Vertical Integration
Daily CyberSecurity
OpenAI and Broadcom Partner to Develop Custom AI Accelerator Chips for 10 GW of Infrastructure
OpenAI partnered with Broadcom to design and deploy custom AI accelerator chips for 10 gigawatts of infrastructure by 2029, strategically reducing its reliance on external suppliers like NVIDIA.
9 views
Daily Writeups
⤷ Title: Broadcom Shifts VMware Workstation/Fusion to Year-Based Versioning with New 25H2 Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 04:04:04 +0000
════════════════════════
⌗ Tags: #Technology #25H2 #Broadcom #dictTool #Fusion Pro #versioning #virtualization #vmware #Workstation Pro
Daily CyberSecurity
Broadcom Shifts VMware Workstation/Fusion to Year-Based Versioning with New 25H2 Release
Broadcom is shifting VMware Workstation Pro/Fusion to year-based versioning (e.g., 25H2). The new release adds dictTool for .vmx editing, USB 3.2 support, and Hyper-V VM detection.
8 views
Daily Writeups
⤷ Title: Immediate Action Required: Secure Your Broadcom Mainframe Software with Digital Package Signing
════════════════════════
𐀪 Author: Jan Cihlar
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 13:57:49 GMT
════════════════════════
⌗ Tags: #digital_package_signing #software_security #cybersecurity #broadcom #mainframe
Medium
Immediate Action Required: Secure Your Broadcom Mainframe Software with Digital Package Signing
Understand the significance of digital package signing, recent changes and steps to prevent issues with installation and maintenance.
16 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation in XWiki and VMware Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 02:12:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Broadcom #CISA #CVE_2025_24893 #CVE_2025_41244 #KEV Catalog #privilege escalation #Remote Code Execution #VMware Aria Operations #VMware Tools #VulnCheck #XWiki
Daily CyberSecurity
CISA Warns of Active Exploitation in XWiki and VMware Vulnerabilities
CISA adds XWiki (CVE-2025-24893) and VMware (CVE-2025-41244) to its KEV Catalog after confirming active exploitation in the wild.
3 views
Daily Writeups
⤷ Title: China APT Infiltrates US Policy Nonprofit in Months-Long Espionage Campaign Using DLL Sideloading
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 00:16:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT41 #Broadcom #China APT #DLL Sideloading #Espionage #Non_Profit Target #Scheduled Task #US Policy
Daily CyberSecurity
China APT Infiltrates US Policy Nonprofit in Months-Long Espionage Campaign Using DLL Sideloading
A China-linked APT targeted a U.S. policy nonprofit for weeks in April 2025. The group used DLL sideloading via a VipreAV binary and msbuild.exe scheduled tasks to achieve SYSTEM persistence for espionage.
10 views
Daily Writeups
⤷ Title: Broadcom & CAMB.AI Developing AI Chip for Real-Time On-Device Dubbing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 12 Nov 2025 02:10:54 +0000
════════════════════════
⌗ Tags: #Technology #AIChip #AudioDescription #Broadcom #CAMBAI #Dubbing #NASCAR #OnDeviceAI #RealTimeTranslation
Daily CyberSecurity
Broadcom & CAMB.AI Developing AI Chip for Real-Time On-Device Dubbing
Broadcom partnered with CAMB.AI to develop an AI chip for real-time, on-device audio translation and dubbing in 150+ languages, promising ultra-low latency.
8 views
Daily Writeups
⤷ Title: Cybercriminals Shift Tactics: Group Deploys Multiple RMM Tools (ScreenConnect, LogMeIn, Naverisk) for Redundant Persistence and Access Resale
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 00:10:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Broadcom Threat Hunter #initial access broker #LogMeIn Resolve #Multi_RMM #persistence #RMM Abuse #ScreenConnect
Daily CyberSecurity
Cybercriminals Shift Tactics: Group Deploys Multiple RMM Tools (ScreenConnect, LogMeIn, Naverisk) for Redundant Persistence and…
Broadcom exposed a group deploying multiple RMM tools (ScreenConnect, LogMeIn, Naverisk) weeks apart to achieve redundant persistence. The likely Initial Access Broker (IAB) prepares systems for resale.
31 views
Daily Writeups
⤷ Title: Critical VMware Aria Operations Flaw Allows RCE During System Upgrades
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 09:07:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Broadcom Security #Command Injection #CVE_2026_22719 #CVE_2026_22721 #Patch Alert #privilege escalation #rce #Remote Code Execution #VMware Aria Operations #VMware Cloud Foundation
Daily CyberSecurity
Critical VMware Aria Operations Flaw Allows RCE During System Upgrades
Broadcom warns of a high-severity RCE flaw (CVE-2026-22719) in VMware Aria Operations. Attackers can execute commands during system migrations. Patch now!
28 views