Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sun, 06 Aug 2023 16:41:37 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Malicious attack with Macro code
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/775bfe3e807
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #powershell #cybersecurity #li̇nux #microsoft_office
Medium
Malicious attack with Macro code
In this post I am going share one of first things I have learned from my cyber security training course:
21 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 09 Aug 2023 10:31:48 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: How to Mitigate CVE-2023–36884- A High Severity RCE Vulnerability in Office and Windows HTML?
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/279fc3eb711c
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #it_security #vulnerability_management #cybersecurity #windows_html #microsoft_office
Medium
How to Mitigate CVE-2023–36884- A High Severity RCE Vulnerability in Office and Windows HTML?
In this post, we are covering a high-severity (remote code execution) RCE vulnerability in Office and Windows HTML. The vulnerability…
8 views
Daily Writeups
β€· Title: CVE-2024-21413 (CVSS 9.8): Critical Outlook Flaw Under Active Attack, PoC Available
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Fri, 07 Feb 2025 07:42:21 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2024_21413 #microsoft office #Moniker Link
Cybersecurity News
CVE-2024-21413 (CVSS 9.8): Critical Outlook Flaw Under Active Attack, PoC Available
Uncover the severity of the CVE-2024-21413 exploit in Microsoft Outlook. Understand the implications and take necessary steps to secure your organization from possible cyber threats.
50 views
Daily Writeups
β€· Title: Microsoft’s β€œStartup Boost”: Faster Office, Higher Memory Use
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Sat, 29 Mar 2025 02:20:53 +0000
════════════════════════
βŒ— Tags: #Technology #microsoft office #Microsoft Office Startup Boost #Startup Boost
Daily CyberSecurity
Microsoft's "Startup Boost": Faster Office, Higher Memory Use
Discover the Microsoft Office Startup Boost and how it accelerates application launches while consuming additional memory.
26 views
Daily Writeups
β€· Title: KB5002700 Update Causing Office 2016 Crashes on Windows 10/11
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 10 Apr 2025 10:18:42 +0000
════════════════════════
βŒ— Tags: #Windows #Bug #Crash #KB5002700 #Microsoft #Microsoft Office 2016 #update #Windows 10 #Windows 11
Daily CyberSecurity
KB5002700 Update Causing Office 2016 Crashes on Windows 10/11
Microsoft's KB5002700 security update is causing widespread crashes in Office 2016 on Windows 10/11. Users are advised to await a Microsoft rollback or follow complex removal instructions.
37 views
Daily Writeups
β€· Title: Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 03 Jun 2025 00:17:50 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #APT #Cyberattacks #cybersecurity #Exploits #kaspersky #Linux #microsoft office #patch management #Q1 2025 #Vulnerabilities #windows #zero_day
Daily CyberSecurity
Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025
Kaspersky's Q1 2025 report highlights a surge in attacks on aging systems, unpatched flaws, and mismanaged updates, urging vigilance and prompt action.
13 views
Daily Writeups
β€· Title: FormBook Returns: Exploiting CVE-2017-0199 via Malicious Excel Attachments in New Phishing Campaign
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 09 Jun 2025 00:11:27 +0000
════════════════════════
βŒ— Tags: #Malware #CVE_2017_0199 #cybersecurity #Excel #Exploit #Formbook #FortiGuard #Infostealer #malware #microsoft office #phishing
Daily CyberSecurity
FormBook Returns: Exploiting CVE-2017-0199 via Malicious Excel Attachments in New Phishing Campaign
An old Microsoft Office vulnerability (CVE-2017-0199) is being exploited in a new phishing campaign to deploy the FormBook infostealer malware. Update now!
19 views
Daily Writeups
β€· Title: Phishing Internal Users via Microsoft 365 SMTP Relay
════════════════════════
π€ͺ Author: Mark Roy
════════════════════════
β΄΅ Time: Wed, 11 Jun 2025 14:04:57 GMT
════════════════════════
βŒ— Tags: #microsoft_office #phishing_attacks #penetration_testing #red_team #phishing
Medium
Phishing Internal Users via Microsoft 365 SMTP Relay
This writeup demonstrates how Microsoft 365’s built-in mail infrastructure can be abused to spoof internal users and phish employees —…
35 views
Daily Writeups
β€· Title: ChatGPT Takes Aim at Microsoft Office: OpenAI’s New β€œAgent” Edits Spreadsheets & Presentations Directly
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 17 Jul 2025 10:35:15 +0000
════════════════════════
βŒ— Tags: #Technology #AI agent #business #ChatGPT #microsoft office #OpenAI #Presentations #Productivity #Spreadsheets #Tech News
Daily CyberSecurity
ChatGPT Takes Aim at Microsoft Office: OpenAI's New "Agent" Edits Spreadsheets & Presentations Directly
OpenAI is reportedly developing a new "Agent" feature for ChatGPT, enabling direct editing of Excel and PowerPoint files within the chat interface, challenging Microsoft Office.
16 views
Daily Writeups
β€· Title: A Blast from the Past: Why a 2017 Office Flaw Still Haunts Enterprises Today
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 15 Aug 2025 00:02:04 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2017_11882 #cybersecurity #malware #microsoft office #phishing #Remote Code Execution #security flaw #Xavier Mertens
Daily CyberSecurity
A Blast from the Past: Why a 2017 Office Flaw Still Haunts Enterprises Today
A 2017 Microsoft Office flaw, CVE-2017-11882, is still being exploited by attackers, proving that outdated software remains a major security risk.
18 views
Daily Writeups
β€· Title: Hackers Use Fake Invoices to Spread XWorm RAT via Office Files
════════════════════════
π€ͺ Author: Deeba Ahmed
════════════════════════
β΄΅ Time: Sat, 27 Sep 2025 10:57:09 +0000
════════════════════════
βŒ— Tags: #Security #Malware #Cybersecurity #Invoice #Microsoft Office #Phishing #RAT #TROJAN #Windows #XWorm
Hackread
Hackers Use Fake Invoices to Spread XWorm RAT via Office Files
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
47 views
Daily Writeups
β€· Title: CVE Research (Microsoft Office)
════════════════════════
π€ͺ Author: Dean Alexander Santos BuΓ±o
════════════════════════
β΄΅ Time: Mon, 20 Oct 2025 01:49:24 GMT
════════════════════════
βŒ— Tags: #microsoft_office #cybersecurity #remote_control_execution #common_vulnerabilities
Medium
CVE Research (Microsoft Office)
Dean Alexander Buno, Calvin Zhang, Shakthi Vel Venkatesan
17 views
Daily Writeups
β€· Title: A 2009 PowerPoint Bug Is Back in 2026: Why β€œOld CVEs” Still Beat Modern Defenses
════════════════════════
π€ͺ Author: Suleiman Tawil
════════════════════════
β΄΅ Time: Fri, 09 Jan 2026 14:14:09 GMT
════════════════════════
βŒ— Tags: #cybersecurity #phishing #microsoft_office #infosec #malware
Medium
A 2009 PowerPoint Bug Is Back in 2026: Why β€œOld CVEs” Still Beat Modern Defenses
A weird thing happened in January 2026: a PowerPoint bug from 2009 showed up again on a government β€œactively exploited” list.
25 views
Daily Writeups
β€· Title: Office Under Siege: Microsoft Rushes Emergency Fix for Active Zero-Day
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 28 Jan 2026 07:51:07 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CISA #CVE_2026_21509 #Cyber Security #InfoSec 2026 #Microsoft 365 #Microsoft Office #OLE Bypass #Patch Management #Social Engineering #zero_day
Penetration Testing Tools
Office Under Siege: Microsoft Rushes Emergency Fix for Active Zero-Day
Microsoft has issued an urgent, out-of-band security update for Microsoft Office to mitigate a high-stakes zero-day vulnerability that
9 views
Daily Writeups
β€· Title: Three-Day Turnaround: How APT28 Rapidly Weaponized the Latest Microsoft Office Zero-Day
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 05 Feb 2026 04:04:24 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Vulnerability #APT28 #CERT_UA #Covenant Grunt #CVE_2026_21509 #Microsoft Office #MiniDoor #Operation Neusploit #PixyNetLoader #RTF exploit #Steganography #Ukraine #Zscaler
Penetration Testing Tools
Three-Day Turnaround: How APT28 Rapidly Weaponized the Latest Microsoft Office Zero-Day
The sophisticated threat actor APT28 has commenced the exploitation of a nascent Microsoft Office vulnerability almost immediately following
13 views
Daily Writeups
β€· Title: The Trojan in the Sidebar: How an Abandoned App Turned the Official Microsoft Store into a Phishing Engine
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 16 Feb 2026 15:58:47 +0000
════════════════════════
βŒ— Tags: #Malware #AgreeTo #Credential Harvesting #Cyber Security #malware #Microsoft Graph API #Microsoft Office Add_in #Outlook security #phishing #Tech News 2026 #Vercel #WA200004949
Penetration Testing Tools
The Trojan in the Sidebar: How an Abandoned App Turned the Official Microsoft Store into a Phishing Engine
Researchers have documented the inaugural instance of a deleterious Microsoft Outlook extension proliferating through the official Office Add-in
23 views
Daily Writeups
β€· Title: OpenAI Responses API Now Ingests Excel, Word, and PowerPoint Directly
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 25 Feb 2026 06:46:37 +0000
════════════════════════
βŒ— Tags: #Technology #API update #document automation #DOCX #enterprise AI #GPT_5.3_Codex #microsoft office #OpenAI #PPTX #RAG #Responses API #Tech News 2026 #XLSX
Daily CyberSecurity
OpenAI Responses API Now Ingests Excel, Word, and PowerPoint Directly
Stop flattening CSVs! The OpenAI Responses API now natively supports Word, Excel, and PowerPoint files for seamless, structure-aware AI analysis.
16 views
Daily Writeups
β€· Title: The Final Countdown: Microsoft Sets October 2026 for Office 2021 Support Shutdown
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 14 Apr 2026 12:17:11 +0000
════════════════════════
βŒ— Tags: #Technology #cybersecurity #end of support #IT Planning #Microsoft 365 #Microsoft News #Microsoft Office 2021 #Office 2021 LTSC #Office 2024 #perpetual license #Software Lifecycle
Daily CyberSecurity
The Final Countdown: Microsoft Sets October 2026 for Office 2021 Support Shutdown
Office 2021 reaches its end of life on October 13, 2026. Learn about the security risks and discover your upgrade paths to Office 2024 or Microsoft 365.
11 views
Daily Writeups
β€· Title: Active SharePoint Spoofing and Legacy Office RCE: CISA Alerts on New KEV Exploits
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 15 Apr 2026 02:34:56 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CISA KEV #CVE_2009_0238 #CVE_2026_32201 #cybersecurity #Federal Directive #infosec #Known Exploited Vulnerabilities #microsoft office #Microsoft SharePoint #rce #spoofing
Daily CyberSecurity
Active SharePoint Spoofing and Legacy Office RCE: CISA Alerts on New KEV Exploits
CISA adds Microsoft SharePoint spoofing (CVE-2026-32201) and legacy Office RCE (CVE-2009-0238) to its KEV Catalog. Remediation deadline: April 28, 2026.
21 views
Daily Writeups
β€· Title: The War for Your Documents: Why The Document Foundation is Challenging Microsoft’s OOXML Monopoly
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sat, 23 May 2026 04:16:58 +0000
════════════════════════
βŒ— Tags: #Technique #Digital Sovereignty #Document Interoperability #Excel 1900 Leap Year Bug #LibreOffice #Microsoft Office Monopoly #ODF vs OOXML #Open Source Ethos #OpenDocument Format #The Document Foundation #Vendor Lock_in
Information Security News
The War for Your Documents: Why The Document Foundation is Challenging Microsoft’s OOXML Monopoly
The Document Foundation (TDF), the steward of the open-source office suite LibreOffice, has long been embroiled in an
32 views