Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 20:32:00 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: ⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 15:32:00 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: You Didn’t Get Phished — You Onboarded the Attacker
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 14:50:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Noisy Bear Campaign Targeting Kazakhstan Energy Sector Outed as a Planned Phishing Test
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 06 Sep 2025 20:43:00 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: New Salty2FA Phishing Kit Bypasses MFA and Clones Login Pages
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 15:46:28 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Cyber Attack #Cyber Crime #Cybersecurity #Fraud #Phishing #Phishing Kit #Salty2FA #Scam
Hackread
New Salty2FA Phishing Kit Bypasses MFA and Clones Login Pages
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: Republic and Incentiv Partner to Simplify and Reward Web3 Participation
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 15:06:19 +0000
════════════════════════
⌗ Tags: #Press Release #Decentralization #Incentiv #Republic #Technology #Web3
Hackread
Republic and Incentiv Partner to Simplify and Reward Web3 Participation
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
15 views
Daily Writeups
⤷ Title: New Docker Malware Strain Spotted Blocking Rivals on Exposed APIs
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 12:04:37 +0000
════════════════════════
⌗ Tags: #Security #Malware #Akamai #API #Botnet #Cryptomining #Cyber Attack #Cybersecurity #Docker #trend micro
Hackread
New Docker Malware Strain Spotted Blocking Rivals on Exposed APIs
Akamai finds new Docker malware blocking rivals on exposed APIs, replacing cryptominers with tools that hint at early botnet development.
19 views
Daily Writeups
⤷ Title: Aembit Named to Fast Company’s Seventh-Annual List of the 100 Best Workplaces for Innovators
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 11:03:08 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Aembit Named to Fast Company’s Seventh-Annual List of the 100 Best Workplaces for Innovators
Silver Spring, USA, 9th September 2025, CyberNewsWire
15 views
Daily Writeups
⤷ Title: npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 16:38:25 +0000
════════════════════════
⌗ Tags: #Security #Cryptocurrency #Aikido Security #Charlie Eriksen #Cyber Attack #Cybersecurity #Developers #Malware #MetaMask #NPM #Phantom #Python #Vulnerability
Hackread
npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
44 views
Daily Writeups
⤷ Title: Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 15:48:44 +0000
════════════════════════
⌗ Tags: #Security #0day #Cyber Attack #EARTHWORM #Google #Malware #Mandiant #Sitecore #Vulnerability #WEEPSTEEL
Hackread
Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
19 views
Daily Writeups
⤷ Title: MostereRAT Targets Windows, Uses AnyDesk and TightVNC for Full Access
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 14:08:09 +0000
════════════════════════
⌗ Tags: #Security #Malware #AnyDesk #Fraud #Japan #MostereRAT #Phishing #TightVNC #Windows
Hackread
MostereRAT Targets Windows, Uses AnyDesk and TightVNC for Full Access
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
13 views
Daily Writeups
⤷ Title: iExec brings TEE-based privacy tools to Arbitrum
════════════════════════
𐀪 Author: Uzair Amir
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 12:01:07 +0000
════════════════════════
⌗ Tags: #Technology
Hackread
iExec brings TEE-based privacy tools to Arbitrum
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
13 views
Daily Writeups
⤷ Title: Lazarus Group Deploys Malware With ClickFix Scam in Fake Job Interviews
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 10:27:08 +0000
════════════════════════
⌗ Tags: #Security #Malware #Scams and Fraud #ClickFix #Cyber Attack #Cybersecurity #Fraud #Lazarus #Maltrail #North Korea #Scam #security #SentinelLABS #Validin #VirusTotal
Hackread
Lazarus Group Deploys Malware With ClickFix Scam in Fake Job Interviews
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
11 views
Daily Writeups
⤷ Title: A “Catastrophic” Flaw in Burger King’s Parent Company Exposed
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:34:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Burger King #cybersecurity #hacking #Popeyes #RBI #security vulnerability #Tim Hortons
Penetration Testing Tools
A "Catastrophic" Flaw in Burger King's Parent Company Exposed
A new report reveals critical vulnerabilities in the systems of RBI, the parent company of Burger King and Popeyes, exposing employee accounts and systems.
8 views
Daily Writeups
⤷ Title: Critical SAP S/4HANA Flaw Exposes Systems to Full Compromise
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:32:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_42957 #cybersecurity #remote code execution #S/4HANA #SAP #vulnerability
Penetration Testing Tools
Critical SAP S/4HANA Flaw Exposes Systems to Full Compromise
A critical vulnerability (CVE-2025-42957) in SAP S/4HANA with a CVSS score of 9.9 allows attackers with minimal privileges to execute arbitrary code.
14 views
Daily Writeups
⤷ Title: Apple Issues Urgent Patch for Zero-Click Image Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:30:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apple #CVE_2025_43300 #ios #macos #security update #Zero_Click #zero_day
Penetration Testing Tools
Apple Issues Urgent Patch for Zero-Click Image Flaw
Apple has issued an urgent, unscheduled patch for a zero-click vulnerability (CVE-2025-43300) in its ImageIO framework that was being actively exploited in targeted attacks.
7 views
Daily Writeups
⤷ Title: CSS Injection Can Now Steal Data with Just One Line of Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:25:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chromium #CSS injection #cybersecurity #Data Exfiltration #hacking #PortSwigger #web security
Penetration Testing Tools
CSS Injection Can Now Steal Data with Just One Line of Code
A new technique allows attackers to steal data directly from HTML attributes using just a single line of inline CSS, without relying on external style sheets.
9 views
Daily Writeups
⤷ Title: Thermoptic: The New HTTP Proxy That Makes Your Traffic Vanish
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:23:20 +0000
════════════════════════
⌗ Tags: #Open Source Tool #anti_bot #Cloudflare #cybersecurity #fingerprinting #HTTP proxy #Technology #Thermoptic
Penetration Testing Tools
Thermoptic: The New HTTP Proxy That Makes Your Traffic Vanish
A new HTTP proxy called Thermoptic disguises network requests as authentic Chrome traffic, enabling users to bypass advanced blocking systems.
8 views
Daily Writeups
⤷ Title: Anatomy of a Cyberattack: Inside the Campaign Against Kazakhstan’s Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:21:47 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #cyberattack #cybersecurity #Energy Sector #KazMunaiGas #NoisyBear #phishing
Penetration Testing Tools
Anatomy of a Cyberattack: Inside the Campaign Against Kazakhstan's Energy Sector
A new report details a sophisticated cyberattack against Kazakhstan's national oil and gas company, revealing the tactics and tools used by a new threat group, NoisyBear.
22 views
Daily Writeups
⤷ Title: Why the FTC’s Accusations Against Gmail’s Spam Filter Are Misguided
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:20:50 +0000
════════════════════════
⌗ Tags: #Google #cybersecurity #FTC #Gmail #google #political bias #spam filter #Tech Regulation
Penetration Testing Tools
Why the FTC's Accusations Against Gmail's Spam Filter Are Misguided
The FTC is investigating Gmail for alleged political bias. But experts say the real reason for filtered emails is the Republican platform’s aggressive mailing practices.
13 views
Daily Writeups
⤷ Title: XChat’s Encrypted Messages Are Not as Secure as They Seem
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:18:01 +0000
════════════════════════
⌗ Tags: #Technology #cybersecurity #E2EE #end_to_end encryption #privacy #Signal #XChat
Penetration Testing Tools
XChat's Encrypted Messages Are Not as Secure as They Seem
X has launched an end-to-end encrypted chat service, but cryptographers warn it has critical flaws, including server-stored keys and no forward secrecy.
11 views