Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: CVE-2025–10235: Stored XSS in Scada-LTS Reports Module (Colour Field)
════════════════════════
𐀪 Author: 0x5ea3o1f
════════════════════════
ⴵ Time: Tue, 26 Aug 2025 15:43:48 GMT
════════════════════════
⌗ Tags: #xss_vulnerability
Medium
Stored XSS in Scada-LTS Reports Module (Colour Field)
🔎 Overview
23 views
Daily Writeups
⤷ Title: KillSec Ransomware Strikes Brazilian Healthcare Provider, Exposing Patient Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 01:59:16 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Data Leak #Brazil #Cybercrime #cybersecurity #Data Breach #healthcare #KillSec #MedicSolution #ransomware attack
Daily CyberSecurity
KillSec Ransomware Strikes Brazilian Healthcare Provider, Exposing Patient Data
A ransomware attack on a major Brazilian healthcare software provider exposes over 94,000 sensitive patient files, highlighting a new cyber threat.
11 views
Daily Writeups
⤷ Title: Unsealed Indictment Exposes Mastermind Behind Notorious Ransomware Gangs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 01:51:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyberattacks #cybersecurity #DOJ #Hacking #Law Enforcement #LockerGoga #MegaCortex #Nefilim #Volodymyr Tymoshchuk
Daily CyberSecurity
Unsealed Indictment Exposes Mastermind Behind Notorious Ransomware Gangs
A superseding indictment unsealed by the DOJ reveals a Ukrainian national's role as an administrator in three major ransomware operations.
8 views
Daily Writeups
⤷ Title: CVE-2025-58063: CoreDNS Vulnerability Could Disrupt DNS Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:50:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CoreDNS #CVE_2025_58063 #cybersecurity #Denial of Service #dns #etcd #Vulnerability
Daily CyberSecurity
CVE-2025-58063: CoreDNS Vulnerability Could Disrupt DNS Updates
A critical flaw (CVE-2025-58063) in the CoreDNS etcd plugin allows attackers to pin DNS cache entries for years, causing a denial of service for service updates.
6 views
Daily Writeups
⤷ Title: NVIDIA Patches High-Severity Vulnerabilities in NVDebug Tool
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:18:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #NVDebug #nvidia #privilege escalation #Remote Code Execution #Vulnerability
Daily CyberSecurity
NVIDIA Patches High-Severity Vulnerabilities in NVDebug Tool
NVIDIA has released an update for its NVDebug tool, patching three high-severity vulnerabilities that could lead to code execution and privilege escalation.
12 views
Daily Writeups
⤷ Title: Fake AI Ad Tool “Madgicx Plus” Hijacks Meta Advertiser Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:10:27 +0000
════════════════════════
⌗ Tags: #Malware #ad tech #Chrome extension #Cybereason #cybersecurity #facebook #Instagram #malware #Meta
Daily CyberSecurity
Fake AI Ad Tool "Madgicx Plus" Hijacks Meta Advertiser Accounts
A new malicious Chrome extension, "Madgicx Plus," is targeting Meta advertisers. It promises AI ad optimization but hijacks accounts and steals credentials.
18 views
Daily Writeups
⤷ Title: The Gentlemen: A New Ransomware Group Using Legitimate Tools to Bypass Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:05:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AnyDesk #cybersecurity #data exfiltration #Group Policy #ransomware #The Gentlemen
Daily CyberSecurity
The Gentlemen: A New Ransomware Group Using Legitimate Tools to Bypass Security
A new report reveals The Gentlemen ransomware group is using legitimate drivers and Group Policy to bypass defenses and deploy highly tailored malware.
6 views
Daily Writeups
⤷ Title: Luno: A “Self-Healing” Linux Botnet That Mines Crypto and Launches DDoS Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:00:47 +0000
════════════════════════
⌗ Tags: #Malware #botnet #cryptomining #cybersecurity #ddos #Linux #Luno #malware
Daily CyberSecurity
Luno: A "Self-Healing" Linux Botnet That Mines Crypto and Launches DDoS Attacks
A new Linux botnet, Luno, combines cryptomining and modular DDoS attacks. It's a "self-healing" threat that targets gaming platforms and disguises itself as legitimate processes.
4 views
Daily Writeups
⤷ Title: TryHackMe Writeup: GoldenEye
════════════════════════
𐀪 Author: Berkay AĞGÜL
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 01:42:02 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf_walkthrough #tryhackme_walkthrough #ctf #cybersecurity
Medium
TryHackMe Writeup: GoldenEye
Her siber güvenlik macerası bir keşif yolculuğuyla başlar. Bu CTF’te, “GoldenEye” adlı bir hedefe sızmak için izleyeceğimiz adımları ve…
5 views
Daily Writeups
⤷ Title: Integrating Dockerized Wazuh with Slack
════════════════════════
𐀪 Author: Mw3ndwa Victor
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 01:18:35 GMT
════════════════════════
⌗ Tags: #slack #wazuh #docker #cybersecurity #technology
Medium
Integrating Dockerized Wazuh with Slack
Prerequisites
4 views
Daily Writeups
⤷ Title: Salesforce Drift OAuth Breach: When Tokens Become Skeleton Keys
════════════════════════
𐀪 Author: Rue
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:53:01 GMT
════════════════════════
⌗ Tags: #cloudflare #salesforce #cybersecurity #zscaler #google
Medium
Salesforce Drift OAuth Breach: When Tokens Become Skeleton Keys
Some of the most security-conscious businesses in the world, such as Palo Alto Networks, Zscaler, Cloudflare, and even Google Workspace…
8 views
Daily Writeups
⤷ Title: The 12 Most Useful AI Prompting Laws for MSP Go-To-Market
════════════════════════
𐀪 Author: Nikolay Gul
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:52:16 GMT
════════════════════════
⌗ Tags: #prompting_technique #ai #cybersecurity #managed_services #ai_law
Medium
The 12 Most Useful AI Prompting Laws for MSP Go-To-Market
A practical, vendor-agnostic prompt kit you can paste into your workflow today.
12 views
Daily Writeups
⤷ Title: Cybersecurity Lessons from VOXCompanies®’s Infrastructure
════════════════════════
𐀪 Author: VOXCompanies
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:51:06 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #cyber_security_solutions #cyber_security_awareness #cybersecurity_awareness #cybersecurity
Medium
Cybersecurity Lessons from VOXCompanies®’s Infrastructure
In the rapidly evolving digital landscape, cybersecurity has become a paramount concern for organizations worldwide. As businesses…
5 views
Daily Writeups
⤷ Title: Securing the AI Goldrush: A Cybersecurity Professional’s View
════════════════════════
𐀪 Author: Shae Turner
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:50:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #saas #startupş #data_privacy #security
Medium
Securing the AI Goldrush: A Cybersecurity Professional’s View
AI apps are being built overnight on fragile code and APIs. Without security, every “success story” is one breach away from collapse.
7 views
Daily Writeups
⤷ Title: Allsafe — Android Writeup
════════════════════════
𐀪 Author: Aybora Ünveren
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:45:47 GMT
════════════════════════
⌗ Tags: #ghidra #cybersecurity #mobile_security #frida #android_security
Medium
Allsafe — Android Writeup
In this Medium article I find vulnerabilities in an app called Allsafe. You can get it from the GitHub repo below:
8 views
Daily Writeups
⤷ Title: Building a Secure Software Development Lifecycle (SDLC)
════════════════════════
𐀪 Author: Samina Perveen
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:43:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #python_in_plain_english #software_development #devsecops
Medium
Building a Secure Software Development Lifecycle (SDLC)
It’s Not About Iron Gates. It’s About Building a Culture.
19 views
Daily Writeups
⤷ Title: Home Lab Setup for SOC101
════════════════════════
𐀪 Author: Justin Blake
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 00:32:09 GMT
════════════════════════
⌗ Tags: #career_development #cybersecurity
Medium
Home Lab Setup for SOC101
Introduction
17 views
Daily Writeups
⤷ Title: OUREAD Magazine
════════════════════════
𐀪 Author: GOSSIP BY COMING UP 4 AIR
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 01:24:38 GMT
════════════════════════
⌗ Tags: #mobile_app_development #backend_development #hacker_news #hackthebox_writeup #backpacking
Medium
OUREAD Magazine
Advertising lifestyle & North Leeds
21 views
Daily Writeups
⤷ Title: CyberVolk Ransomware’s Decryption Flaw Makes Data Recovery Impossible
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 03:59:10 +0000
════════════════════════
⌗ Tags: #Malware #AhnLab #Critical Infrastructure #Cybercrime #CyberVolk #Geopolitical #pro_Russia #ransomware #unrecoverable encryption
Daily CyberSecurity
CyberVolk Ransomware’s Decryption Flaw Makes Data Recovery Impossible
A new report reveals CyberVolk ransomware, a pro-Russian strain that encrypts data with an unrecoverable flaw. Its decryption key is useless, making recovery impossible.
18 views
Daily Writeups
⤷ Title: High-Severity Flaws in Sunshine for Windows Allow Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 03:45:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT/CC #CVE_2025_10198 #CVE_2025_10199 #DLL hijacking #privilege escalation #Sunshine for Windows #unquoted service path #Vulnerability
Daily CyberSecurity
High-Severity Flaws in Sunshine for Windows Allow Privilege Escalation
CERT/CC warns of critical flaws in Sunshine for Windows, including unquoted service path and DLL hijacking, that allow local attackers to escalate privileges.
24 views
Daily Writeups
⤷ Title: Beyond Cobalt Strike: A New Open-Source Hacking Tool Is on the Rise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 03:17:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AdaptixC2 #adversarial emulation #AI_generated malware #cybersecurity #malware #Palo Alto Networks #post_exploitation #Red Team #Unit 42
Daily CyberSecurity
Beyond Cobalt Strike: A New Open-Source Hacking Tool Is on the Rise
AdaptixC2, a new open-source hacking tool, is being abused by threat actors. The stealthy framework has been used in attacks, with some loaders likely AI-generated.
11 views