⤷ Title: Massive npm Supply Chain Attack: Qix’s Account Compromised, Billions of Weekly Downloads at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 02:22:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #crypto hijacking #cybersecurity #javascript #Node.js #npm #phishing #Qix #Socket #supply chain attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 02:22:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #crypto hijacking #cybersecurity #javascript #Node.js #npm #phishing #Qix #Socket #supply chain attack
Daily CyberSecurity
Massive npm Supply Chain Attack: Qix’s Account Compromised, Billions of Weekly Downloads at Risk
A key npm maintainer's account was compromised, leading to a supply chain attack. Malicious code in popular packages is stealing crypto during transactions.
⤷ Title: Adobe Issues Emergency Patch for SessionReaper (CVE-2025-54236), One of Magento’s Most Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 02:10:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe Commerce #CVE_2025_54236 #e_commerce #Magento #Sansec #SessionReaper #Vulnerability #Web Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 02:10:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe Commerce #CVE_2025_54236 #e_commerce #Magento #Sansec #SessionReaper #Vulnerability #Web Security
Daily CyberSecurity
Adobe Issues Emergency Patch for SessionReaper (CVE-2025-54236), One of Magento’s Most Critical Flaws
Adobe has broken from its regular patch schedule to release an emergency fix for CVE-2025-54236, a vulnerability Sansec has dubbed SessionReaper. The flaw, described as one of the most severe in M…
⤷ Title: MostereRAT: The New RAT That Is Bypassing Antivirus and EDR Solutions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 01:55:54 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #defense evasion #EPL #FortiGuard Labs #MostereRAT #phishing #privilege escalation #rat #Windows Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 01:55:54 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #defense evasion #EPL #FortiGuard Labs #MostereRAT #phishing #privilege escalation #rat #Windows Security
Daily CyberSecurity
MostereRAT: The New RAT That Is Bypassing Antivirus and EDR Solutions
A new phishing campaign is spreading MostereRAT, a sophisticated RAT that uses a Chinese scripting language and advanced evasion to bypass antivirus and EDR solutions.
⤷ Title: Unmasking Salt Typhoon: A Report Exposes 45 New Domains from a Chinese APT Group
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 01:42:28 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT group #china #cyber_espionage #GhostEmperor #Salt Typhoon #Silent Push #threat intelligence #UNC4841
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 01:42:28 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT group #china #cyber_espionage #GhostEmperor #Salt Typhoon #Silent Push #threat intelligence #UNC4841
Daily CyberSecurity
Unmasking Salt Typhoon: A Report Exposes 45 New Domains from a Chinese APT Group
A new report uncovers 45 previously unknown domains linked to the Chinese APT group Salt Typhoon. The findings reveal a long-term, multi-year espionage infrastructure.
⤷ Title: Planet X : Android Application Based CTF Challenge Walkthrough
════════════════════════
𐀪 Author: Saurabh Jain
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 07:16:10 GMT
════════════════════════
⌗ Tags: #pentesting #android_security #android #ctf_writeup #bug_bounty
════════════════════════
𐀪 Author: Saurabh Jain
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 07:16:10 GMT
════════════════════════
⌗ Tags: #pentesting #android_security #android #ctf_writeup #bug_bounty
Medium
Planet X : Android Application Based CTF Challenge Walkthrough
Planet X is an intermediate level Android application CTF challenge. The aim of this CTF challenge is to learn and concentrate on the…
⤷ Title: 4. Top 10 Recon Tools I Use Every Day (With Pro Tips & Workflows)
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 06:46:07 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #cybersecurity #bug_bounty_tips #hacking
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 06:46:07 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #cybersecurity #bug_bounty_tips #hacking
Medium
4. Top 10 Recon Tools I Use Every Day (With Pro Tips & Workflows)
🔐Free Article Link.
⤷ Title: 8. Intro to XSS: How I Found My First Bug
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 06:46:04 GMT
════════════════════════
⌗ Tags: #hacking #xss_attack #bug_bounty #cybersecurity #infosec
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 06:46:04 GMT
════════════════════════
⌗ Tags: #hacking #xss_attack #bug_bounty #cybersecurity #infosec
Medium
8. Intro to XSS: How I Found My First Bug
🔐Free Article Link.
⤷ Title: How a Failed Payment on a Train Platform Earned Me $400
════════════════════════
𐀪 Author: Hackergod00001
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 06:36:59 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #bug_bounty_tips #infosec #cybersecurity
════════════════════════
𐀪 Author: Hackergod00001
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 06:36:59 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #bug_bounty_tips #infosec #cybersecurity
Medium
How a Failed Payment on a Train Platform Earned Me $400
This isn’t another bug bounty story meant to make your eyes sparkle with massive payouts. This is the story of how a normal, boring…
⤷ Title: Web Cache Poisoning via Fat GET Requests: Exploiting Cache Key Flaws
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:04:51 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #cache_key_manipulation #cache_poisoning_attack #bug_bounty #xss_via_cache_poisoning
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:04:51 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #cache_key_manipulation #cache_poisoning_attack #bug_bounty #xss_via_cache_poisoning
Medium
Web Cache Poisoning via Fat GET Requests: Exploiting Cache Key Flaws
Learn how fat GET requests enable web cache poisoning by exploiting mismatched cache key handling, and why this vulnerability can escalate…
⤷ Title: Broken like Hijacking earned me $150
════════════════════════
𐀪 Author: Canonminibeast
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:06:37 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty #hacking #bug_bounty_writeup
════════════════════════
𐀪 Author: Canonminibeast
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:06:37 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty #hacking #bug_bounty_writeup
Medium
Broken like Hijacking earned me $150
hey hi guys its been a while am writing a blog .
⤷ Title: SQL for Bug Bounty Hunters 2.0
════════════════════════
𐀪 Author: Swetha
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:06:05 GMT
════════════════════════
⌗ Tags: #learning #hacking #programming #sql #bug_bounty
════════════════════════
𐀪 Author: Swetha
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:06:05 GMT
════════════════════════
⌗ Tags: #learning #hacking #programming #sql #bug_bounty
Medium
SQL for Bug Bounty Hunters 2.0
This is the like to 1.0 version of this article https://medium.com/bugbountywriteup/sql-for-bug-bounty-hunters-106a4c324049
⤷ Title: AspGoat: The First Intentionally Vulnerable modern ASP.NET Core App for OWASP Top 10
════════════════════════
𐀪 Author: Soham
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:06:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ethical_hacking #dotnet #application_security
════════════════════════
𐀪 Author: Soham
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:06:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ethical_hacking #dotnet #application_security
Medium
AspGoat: The First Intentionally Vulnerable modern ASP.NET Core App for OWASP Top 10
Most intentionally vulnerable applications we know and use for training like DVWA, Juice Shop, and WebGoat are written in PHP , Node.JS…
⤷ Title: When Support Portals Bite Back: DOM-XSS in a Helpcenter
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:03:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #cybercrime #bug_bounty_writeup #bug_bounty_tips
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 05:03:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #cybercrime #bug_bounty_writeup #bug_bounty_tips
Medium
When Support Portals Bite Back: DOM-XSS in a Helpcenter
FREE LINK
⤷ Title: E-Ciber: como funciona a Estratégia Nacional de Cibersegurança do Brasil?
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 16:39:01 GMT
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 16:39:01 GMT
════════════════════════
⌗ Tags: No_Tags
BugHunt
E-Ciber: como funciona a Estratégia Nacional de Cibersegurança do Brasil?
O que é a E-Ciber e como impacta empresas, governo e cidadãos? Entenda a Estratégia Nacional de Cibersegurança e seus principais desafios.
⤷ Title: The Bug Bounty Hunter Begins
════════════════════════
𐀪 Author: Agentic Monarch
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 15:51:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #33h #bug_bounty_hunter
════════════════════════
𐀪 Author: Agentic Monarch
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 15:51:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #33h #bug_bounty_hunter
Medium
The Bug Bounty Hunter Begins
เริ่มต้นบันทึกเส้นทางของการเปลี่ยนอาชีพมาทำ Cyber Security Engineer / Bug Bounty Hunter :)
⤷ Title: “That One Time I Found a Golden Ticket in a Desktop App”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 15:15:17 GMT
════════════════════════
⌗ Tags: #programming #bug_bounty #money #cybersecurity #hacking
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 15:15:17 GMT
════════════════════════
⌗ Tags: #programming #bug_bounty #money #cybersecurity #hacking
Medium
“That One Time I Found a Golden Ticket in a Desktop App”
Let’s be real. We’ve all seen those mind-blowing bug bounty write-ups on Twitter. The ones that make you wonder, “How did they even think…
⤷ Title: How Hackers Exploit AI Tools Like ChatGPT: What You Need to Know
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 14:18:38 GMT
════════════════════════
⌗ Tags: #chatgpt #ai_tools #penetration_testing #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 14:18:38 GMT
════════════════════════
⌗ Tags: #chatgpt #ai_tools #penetration_testing #bug_bounty #cybersecurity
Medium
How Hackers Exploit AI Tools Like ChatGPT: What You Need to Know
✨ Link for the full article in the first comment
⤷ Title: Subdomain Takeover
════════════════════════
𐀪 Author: yee-yore
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 13:46:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #red_team #bug_bounty #pentesting
════════════════════════
𐀪 Author: yee-yore
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 13:46:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #red_team #bug_bounty #pentesting
Medium
Subdomain Takeover
Subdomain Takeover Introduction Imagine you’re visiting `blog.example.com`. 1. Browser: "What's the IP address for blog.example.com?" 2. DNS Server: "blog.example.com points to …
⤷ Title: How to Find Hidden Web Vulnerabilities Using FFUF
════════════════════════
𐀪 Author: Ibtissam hammadi
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 13:32:21 GMT
════════════════════════
⌗ Tags: #technology #ffuf #bug_bounty #cybersecurity #hacking
════════════════════════
𐀪 Author: Ibtissam hammadi
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 13:32:21 GMT
════════════════════════
⌗ Tags: #technology #ffuf #bug_bounty #cybersecurity #hacking
Medium
How to Find Hidden Web Vulnerabilities Using FFUF
Go beyond basic commands and learn the techniques that reveal the vulnerabilities others miss.
⤷ Title: Digital Forensics : Recover Deleted Files Using Autopsy
════════════════════════
𐀪 Author: Arrhenius Paelongan
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 10:38:21 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #penetration_testing #bug_bounty #digital_forensics
════════════════════════
𐀪 Author: Arrhenius Paelongan
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 10:38:21 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #penetration_testing #bug_bounty #digital_forensics
Medium
Digital Forensics : Recover Deleted Data Using Autopsy
Introduction
⤷ Title: How I Accidentally Stumbled Upon a Critical Vulnerability (Exposed backup on google storage)
════════════════════════
𐀪 Author: Sirat Sami (analyz3r)
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 10:01:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #bug_bounty_writeup #bug_bounty_tips #hacking
════════════════════════
𐀪 Author: Sirat Sami (analyz3r)
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 10:01:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #bug_bounty_writeup #bug_bounty_tips #hacking
Medium
How I Accidentally Stumbled Upon a Critical Vulnerability (Exposed backup on google storage)
Hi everyone, I’m Sirat, a bug hunter and security researcher.
Recently, I released a new tool called Skybrute, which is designed to…
Recently, I released a new tool called Skybrute, which is designed to…