Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 03 May 2023 12:22:24 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Semperis bolsters channel team to drive sales and grow business in UK & Ireland with new senior…
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/59ce7070d49b
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #identity_security #cyber_security_solutions #active_directory_security
Medium
Semperis bolsters channel team to drive sales and grow business in UK & Ireland with new senior…
Semperis, a pioneer in identity-driven cyber resilience, is accelerating expansion of its hybrid identity protection solutions to…
3 views
Daily Writeups
β€· Title: Leaked Credentials Entra ID Integration Application Overview
════════════════════════
π€ͺ Author: Loginsoft
════════════════════════
β΄΅ Time: Fri, 07 Mar 2025 11:08:04 GMT
════════════════════════
βŒ— Tags: #identity_security #threat_intelligence #entra_id #cybersecurity #vishing
Medium
Leaked Credentials Entra ID Integration Application Overview
Enhancing Security: The Leaked Credentials Entra ID Integration
24 views
Daily Writeups
β€· Title: Lurking Threats in Post-Authentication Sessions
════════════════════════
π€ͺ Author: Maor Franco
════════════════════════
β΄΅ Time: Fri, 21 Mar 2025 17:42:15 GMT
════════════════════════
βŒ— Tags: #detection_and_response #authentication #cybersecurity #authentication_bypass #identity_security
Medium
Lurking Threats in Post-Authentication Sessions
An attacker doesn’t need your password anymore. They don’t even need to break your MFA. They just need to get ahold of your session. And…
13 views
Daily Writeups
β€· Title: Linkable Token ID in Microsoft Entra: Investigating Cross-Workload Attacks with SessionId
════════════════════════
π€ͺ Author: Abhishek Kumar Sharma
════════════════════════
β΄΅ Time: Wed, 30 Jul 2025 01:28:54 GMT
════════════════════════
βŒ— Tags: #cybersecurity #threat_detection #microsoft_entra #identity_security #zero_trust
Medium
Linkable Token ID in Microsoft Entra: Investigating Cross-Workload Attacks with SessionId
Microsoft Entra now supports linkable token identifiers to significantly improve security investigation capabilities around token-based…
32 views
Daily Writeups
β€· Title: The Ghost in the Machine: How Stolen Keys Haunt Your Network Long After a Patch
════════════════════════
π€ͺ Author: Karla Ortiz-Flores
════════════════════════
β΄΅ Time: Wed, 30 Jul 2025 16:58:25 GMT
════════════════════════
βŒ— Tags: #exploitation #incident_response #sharepoint #cybersecurity #identity_security
Medium
The Ghost in the Machine: How Stolen Keys Haunt Your Network Long After a Patch
Patching closes the door, but stolen keys leave it wide open. How post-exploitation trust theft lets attackers stay long after the fix.
14 views
Daily Writeups
β€· Title: Palo Alto Networks Acquires CyberArk for $25B, Enters Identity Security Market
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 01 Aug 2025 02:18:27 +0000
════════════════════════
βŒ— Tags: #Technology #acquisition #AI #CyberArk #cybersecurity #Identity Security #Nikesh Arora #Palo Alto Networks #PAM #Privileged Access Management
Daily CyberSecurity
Palo Alto Networks Acquires CyberArk for $25B, Enters Identity Security Market
Palo Alto Networks is acquiring identity security leader CyberArk for nearly $25B. The deal marks Palo Alto's strategic entry into identity security, a critical pillar for the AI era.
10 views
Daily Writeups
β€· Title: Microsoft Issues Warning on Active Directory Domain Services Vulnerability Allowing Privilege…
════════════════════════
π€ͺ Author: Jasmitharouthu
════════════════════════
β΄΅ Time: Wed, 10 Sep 2025 11:39:36 GMT
════════════════════════
βŒ— Tags: #active_directory #identity_security #coe_security #cybersecurity #privilege_escalation
Medium
Microsoft Issues Warning on Active Directory Domain Services Vulnerability Allowing Privilege…
Microsoft has issued a critical warning regarding a newly discovered vulnerability in Active Directory Domain Services (AD DS) that could…
16 views
Daily Writeups
β€· Title: Stop Credential Stuffing Before It Starts: Monitor Plain Text Leaks and Auto Flag Risky Logins
════════════════════════
π€ͺ Author: Alexandre Vandamme
════════════════════════
β΄΅ Time: Fri, 12 Sep 2025 07:01:47 GMT
════════════════════════
βŒ— Tags: #credential_stuffing #cybersecurity #account_takeover #identity_security #stealer_logs
Medium
Stop Credential Stuffing Before It Starts: Monitor Plain Text Leaks and Auto Flag Risky Logins
Credential stuffing still works because attackers reuse real url:user:pass from stealer logs. The fix is simple: monitor plain-text…
33 views
Daily Writeups
β€· Title: Cohesity and Semperis Announce Groundbreaking Offering that Unifies Data and Identity Resilience
════════════════════════
π€ͺ Author: Louise Rolfe
════════════════════════
β΄΅ Time: Wed, 17 Sep 2025 13:26:43 GMT
════════════════════════
βŒ— Tags: #channel #identity_security #cybersecurity #ransomware #active_directory
Medium
Cohesity and Semperis Announce Groundbreaking Offering that Unifies Data and Identity Resilience
Cohesity Identity Resilience Equips Organisations to Proactively Secure and Recover Identity-based Cyberattacks
19 views
Daily Writeups
β€· Title: Deep Dive: Pass-the-Hash and Pass-the-Ticketβ€Šβ€”β€ŠReuse of Identity Material
════════════════════════
π€ͺ Author: Esra Kayhan
════════════════════════
β΄΅ Time: Thu, 25 Sep 2025 08:27:47 GMT
════════════════════════
βŒ— Tags: #cybersecurity #security #information_technology #infosec #identity_security
Medium
πŸ” Deep Dive: Pass-the-Hash and Pass-the-Ticket β€” Reuse of Identity Material
In enterprise environments, the security of identities and session data sits at the heart of modern attacks. Rather than attempting to…
7 views
Daily Writeups
β€· Title: When Your Fingerprint Can Be Forced: Why SMEs and MSPs Need Stronger Password Protection
════════════════════════
π€ͺ Author: FlashX Cybersecurity
════════════════════════
β΄΅ Time: Mon, 06 Oct 2025 15:24:06 GMT
════════════════════════
βŒ— Tags: #saas #cybersecurity #identityaccess_management #flashx #identity_security
Medium
When Your Fingerprint Can Be Forced: Why SMEs and MSPs Need Stronger Password Protection
A Law That Changes the Game
25 views
Daily Writeups
β€· Title: Scale Your Security, Not Your Headaches: Why Augmenting Your IdP Beats Migration
════════════════════════
π€ͺ Author: Sunil Gentyala
════════════════════════
β΄΅ Time: Fri, 10 Oct 2025 03:18:27 GMT
════════════════════════
βŒ— Tags: #cybersecurity #iam_roles #zero_trust #identity_security #idp
Medium
Scale Your Security, Not Your Headaches: Why Augmenting Your IdP Beats Migration
For many startups and growing businesses, identity management begins with simple, cost-effective solutions like Google Workspace. As…
9 views
Daily Writeups
β€· Title: Hazlo bien o no lo hagas: identidad moderna para arquitecturas sΓ³lidas
════════════════════════
π€ͺ Author: Erick Arostegui Cunza
════════════════════════
β΄΅ Time: Sun, 30 Nov 2025 20:36:48 GMT
════════════════════════
βŒ— Tags: #identity_security #azureentraid #devsecops #application_security #keycloak
Medium
Hazlo bien o no lo hagas: identidad moderna para arquitecturas sΓ³lidas
IntroducciΓ³n
15 views
Daily Writeups
β€· Title: Forging the Keys: Inside SAMLSmith, the C# Framework for Golden & Silver SAML Attacks
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 24 Dec 2025 03:08:48 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #Active Directory #Cybersecurity 2025 #Entra ID #Golden SAML #Identity Security #Pentesting #SAML #SAMLSmith #Silver SAML #XML Forgery
Information Security News
Forging the Keys: Inside SAMLSmith, the C# Framework for Golden & Silver SAML Attacks
SAMLSmith is a C# tool for generating custom SAML responses and implementing Silver SAML and Golden SAML attacks. It provides comprehensive functionality for security researchers and penetration t…
24 views
Daily Writeups
β€· Title: Zoho Patches Critical β€œ9.1” Flaw in ADSelfService Plus
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 15 Jan 2026 00:31:54 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Access Management #active directory #ADSelfService Plus #CVE_2025_11250 #CVSS 9.1 #Identity Security #ManageEngine #Patch Alert #SSO Security
Daily CyberSecurity
Zoho Patches Critical "9.1" Flaw in ADSelfService Plus
ManageEngine patches critical ADSelfService Plus flaw CVE-2025-11250 (CVSS 9.1). Update to Build 6519 immediately to secure your Active Directory.
27 views
Daily Writeups
β€· Title: OpenStack Admin Forgery: CVE-2026-22797 Lets Users β€˜Ask’ for Root
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 16 Jan 2026 01:54:15 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2026_22797 #Identity Security #Keystonemiddleware #OAuth2 #OpenStack #Patch Alert #privilege escalation #red hat
Daily CyberSecurity
OpenStack Admin Forgery: CVE-2026-22797 Lets Users β€˜Ask’ for Root
A significant security flaw has been closed in the OpenStack cloud infrastructure project, specifically within its identity middleware. The vulnerability, tracked as CVE-2026-22797, is a Privilege…
16 views