Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The “Fifty Command” Limit: How a Single Line of Code Paralyses Anthropic’s Claude Code Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 07:57:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Adversa #AI Vulnerability #Anthropic #Bash Exploitation #CI/CD Security #Claude Code #Cybersecurity 2026 #Infosec #LLM Security #Prompt Injection
Penetration Testing Tools
The "Fifty Command" Limit: How a Single Line of Code Paralyses Anthropic’s Claude Code Security
Security researchers from the Tel Aviv-based firm Adversa have unearthed a vulnerability within Claude Code—the autonomous artificial intelligence
6 views
Daily Writeups
⤷ Title: The EU’s AWS “Master Key”: How a Compromised Trivy Update Leaked 340GB of Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 09:40:11 +0000
════════════════════════
⌗ Tags: #Data Leak #API Key Theft #aws security #CERT_EU #CI/CD security #data leak #EU Security #European Commission #infosec #ShinyHunters #supply chain attack #TeamPCP #Trivy
Daily CyberSecurity
The EU’s AWS "Master Key": How a Compromised Trivy Update Leaked 340GB of Data
A massive supply-chain attack hit the European Commission via a compromised Trivy update. 340GB of data was leaked by ShinyHunters. Rotate your AWS keys!
3 views
Daily Writeups
⤷ Title: Shadow Nodes: Deciphering the Rise of Ashab al-Yamin in the European Cyber Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:14:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ashab al_Yamin #BreachForums #ChaCha20_Poly1305 #CI/CD Security #Cyber Propaganda #Cybercrime 2026 #Double Extortion #European Security #Geopolitical Threats #Harakat Ashab al_Yamin al_Islamia #Information Warfare #Iranian Proxy #LiteLLM #RaaS #Sabereen News #supply chain attack #TeamPCP #Tech Against Terrorism #Telegram Security #Trivy #Vect Ransomware
Penetration Testing Tools
Shadow Nodes: Deciphering the Rise of Ashab al-Yamin in the European Cyber Landscape
The emergence of the nascent hacking collective Harakat Ashab al-Yamin al-Islamia has piqued the curiosity of security analysts
18 views
Daily Writeups
⤷ Title: The Assembly Line of Extortion: How Vect and TeamPCP Weaponized the Global Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:11:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BreachForums #ChaCha20_Poly1305 #CI/CD Security #Cybercrime 2026 #Double Extortion #LiteLLM #RaaS #supply chain attack #TeamPCP #Trivy #Vect Ransomware
Penetration Testing Tools
The Assembly Line of Extortion: How Vect and TeamPCP Weaponized the Global Software Supply Chain
Vect ransomware and TeamPCP have joined forces to industrialize cybercrime. Discover how they poisoned Trivy and LiteLLM to hijack 1,000+ corporate networks.
13 views
Daily Writeups
⤷ Title: Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:51:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Atlassian #Bamboo #CI/CD security #CVE_2026_21571 #DevOps #infosec #os command injection #Patch Alert #rce #Supply Chain
Daily CyberSecurity
Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection
Atlassian Bamboo Data Center hit by critical 9.4 RCE (CVE-2026-21571). Attackers can hijack your build pipeline. Secure your supply chain—patch now!
22 views
Daily Writeups
⤷ Title: High-Severity PHPUnit Vulnerability Enables Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 13:45:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation Security #CI/CD security #CVE_2026_41570 #DevSecOps #infosec #Patch Alert #PHP Security #PHPUnit #Poisoned Pipeline #rce
Daily CyberSecurity
High-Severity PHPUnit Vulnerability Enables Remote Code Execution
PHPUnit CVE-2026-41570 allows RCE via invisible newline injection in CI/CD pipelines. Secure your build servers—update to 12.5.22 or 13.1.6 today.
15 views
Daily Writeups
⤷ Title: Void Dokkaebi Unmasked: The “Worm-Like” Supply Chain Threat Targeting Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 06:24:51 +0000
════════════════════════
⌗ Tags: #Malware #Blockchain Staging #CI/CD security #Famous Chollima #GitHub Security #infosec #North Korea APT #Open Source Security #supply chain attack #TrendMicro #Void Dokkaebi #VS Code Malware
Daily CyberSecurity
Void Dokkaebi Unmasked: The “Worm-Like” Supply Chain Threat Targeting Developers
A new report from researchers at TrendMicro has exposed the evolution of Void Dokkaebi (also known as Famous Chollima), a North Korea-aligned intrusion set that has transitioned from traditional s…
32 views
Daily Writeups
⤷ Title: Patching the CVSS 10 RCE Hole in Gemini CLI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 03:01:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@google/gemini_cli #AI security #Automation #CI/CD security #CVSS 10 #Gemini CLI #GitHub Actions #infosec #Patch Alert #Prompt injection #rce
27 views
Daily Writeups
⤷ Title: The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:04:51 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js/sqlite #aws security #Azure #Bun runtime #CI/CD security #credential stealer #infosec #Kubernetes #mbt #Mini Shai_Hulud #npm malware #SAP #supply chain attack
Daily CyberSecurity
The "Mini Shai-Hulud" Attack Hijacking SAP Developer Pipelines
SAP developers are under attack. A surgical credential stealer hijacks CI/CD runners and cloud tokens via npm preinstall hooks. Rotate all secrets immediately.
26 views
Daily Writeups
⤷ Title: High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:10:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2026_42520 #CVE_2026_42523 #cybersecurity #DevSecOps #infosec #Jenkins #Patch Alert #plugin security #rce #Vulnerability Research #XSS
Daily CyberSecurity
High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins
Jenkins patches high-severity RCE in Credentials Binding and XSS in GitHub/HTML Publisher plugins. Secure your CI/CD pipeline by upgrading today.
15 views