Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Daily CyberSecurity Launches CVE Watchtower: Live Intelligence for a Faster Response
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:50:30 +0000
════════════════════════
⌗ Tags: #Announcement #CVE #CVE Watchtower
Daily CyberSecurity
Daily CyberSecurity Launches CVE Watchtower: Live Intelligence for a Faster Response
Introducing CVE Watchtower: your go-to service for real-time intelligence on security vulnerabilities in the cybersecurity landscape.
44 views
Daily Writeups
⤷ Title: Unmasking the DarkCloud: A New Stealer Is Hiding Malware in JPG Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 03:20:14 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #DarkCloud Stealer #Infostealer #malware #phishing #Process injection #steganography
Daily CyberSecurity
Unmasking the DarkCloud: A New Stealer Is Hiding Malware in JPG Files
A new report reveals a multi-stage phishing campaign distributing DarkCloud Stealer. The malware hides its loader in a JPG file and injects code into MSBuild.exe for stealth.
19 views
Daily Writeups
⤷ Title: CVE-2025-5821: Critical Authentication Bypass in WordPress Case Theme User Plugin Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 02:35:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #admin account takeover #Authentication Bypass #Case Theme User #CVE_2025_5821 #CVSS 9.8 #cybersecurity #hacker attacks #Wordfence #WordPress Vulnerability
Daily CyberSecurity
CVE-2025-5821: Critical Authentication Bypass in WordPress Case Theme User Plugin Exploited in the Wild
A critical flaw in the Case Theme User WordPress plugin (CVSS 9.8) allows unauthenticated attackers to hijack admin accounts. The vulnerability is under active exploitation.
21 views
Daily Writeups
⤷ Title: HijackLoader: The Stealthy Malware Loader Powering Modern Cyberattacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 02:00:32 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #cybersecurity #evasion techniques #HijackLoader #Lumma Stealer #MaaS #malware loader #Malware_as_a_Service #Seqrite #threat intelligence
Daily CyberSecurity
HijackLoader: The Stealthy Malware Loader Powering Modern Cyberattacks
A new report reveals HijackLoader, a Malware-as-a-Service loader. It uses advanced evasion and anti-analysis techniques to deliver stealers and other payloads.
30 views
Daily Writeups
⤷ Title: Maranhão Stealer: A New Malware Hijacks Gamers’ PCs Through Pirated Games
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:53:31 +0000
════════════════════════
⌗ Tags: #Malware #Cybercrime #Cyble #gaming community #Infostealer #malware #Maranhão Stealer #pirated software #Reflective DLL Injection
Daily CyberSecurity
Maranhão Stealer: A New Malware Hijacks Gamers' PCs Through Pirated Games
A new report reveals Maranhão Stealer, a new malware targeting the gaming community through pirated software and cheats. It steals crypto, credentials, and data.
21 views
Daily Writeups
⤷ Title: Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:40:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@PreAuthorize #Authorization Bypass #CVE_2025_41248 #CVE_2025_41249 #method security #Spring Framework #Spring Security #Vulnerability
Daily CyberSecurity
Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
Two medium-severity flaws in Spring Security and the Spring Framework allow authorization bypasses in applications that use method-level security on generic types.
19 views
Daily Writeups
⤷ Title: PoC Published: Linux Kernel 0-Click RCE Vulnerability Found in ksmbd
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:15:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0_click #CVE_2023_4130 #CVE_2023_52440 #cyber attack #Exploit #ksmbd #Linux Kernel #rce #smb #Vulnerability
Daily CyberSecurity
PoC Published: Linux Kernel 0-Click RCE Vulnerability Found in ksmbd
A new report details a 0-click RCE exploit chain in the Linux kernel's ksmbd module that allows an authenticated user to gain root access. A PoC has been published.
15 views
Daily Writeups
⤷ Title: Kimsuky Group Weaponizes AI Deepfakes in New Spear-Phishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:10:09 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI deepfake #ChatGPT #Cyber Warfare #cyber_espionage #Genians Security Center #Kimsuky #North Korean hackers #spear_phishing
Daily CyberSecurity
Kimsuky Group Weaponizes AI Deepfakes in New Spear-Phishing Campaign
North Korean threat group Kimsuky is using AI-generated deepfakes in a new spear-phishing campaign, signaling a new frontier in cyber warfare.
17 views
Daily Writeups
⤷ Title: Yurei: The New Ransomware Group Using Open-Source Code to Target Businesses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:06:38 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #Cybercrime #Double Extortion #go #open_source malware #Prince ransomware #Yurei ransomware
Daily CyberSecurity
Yurei: The New Ransomware Group Using Open-Source Code to Target Businesses
A new ransomware group, Yurei, is using open-source malware to attack businesses in Asia and Africa. The group is using a double-extortion model to pressure victims.
14 views
Daily Writeups
⤷ Title: A Digital Trojan Horse: A New Campaign Is Using SEO to Deliver Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:01:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese_speaking users #Cybercrime #FortiGuard Labs #Hiddengh0st #malware #phishing #SEO Poisoning #Winos
Daily CyberSecurity
A Digital Trojan Horse: A New Campaign Is Using SEO to Deliver Malware
A new report reveals a malware campaign using SEO poisoning to target Chinese-speaking users. Attackers use fake software sites to deliver Hiddengh0st and Winos.
16 views
Daily Writeups
⤷ Title: Web shell upload via path traversal (Portswigger Lab Walkthrough)
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:53:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #portswigger #bug_bounty #web_app_security #hacking
Medium
Web shell upload via path traversal (Portswigger Lab Walkthrough)
From Upload Form to Shell
18 views
Daily Writeups
⤷ Title: TO BECOME A SOC EXPERT(DAY-4)
════════════════════════
𐀪 Author: vulnhunter
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:50:37 GMT
════════════════════════
⌗ Tags: #technology #social_media #bug_bounty #ethical_hacking #cybersecurity
Medium
TO BECOME A SOC EXPERT(DAY-4)
Day 4: Incident Response (IR) Workflow
20 views
Daily Writeups
⤷ Title: When a Chatbot Becomes an Impostor
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:31:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty #cyber_security_awareness #bug_bounty_tips
Medium
When a Chatbot Becomes an Impostor
We all love those little chat bubbles in the corner of websites. They pop up, greet you politely, and sometimes even solve your problem…
18 views
Daily Writeups
⤷ Title: ️ Ghost Subdomain: How I Became an Accidental Cloud Landlord Through Abandoned DNS Records
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:16:45 GMT
════════════════════════
⌗ Tags: #money #bug_bounty #cybersecurity #hacking #infosec
Medium
🏚️ Ghost Subdomain: How I Became an Accidental Cloud Landlord Through Abandoned DNS Records
Hey there!😁
18 views
Daily Writeups
⤷ Title: Gemini Pro’s Student Verification Loophole: A Bug, or a Feature?
════════════════════════
𐀪 Author: Skjasimuddin
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:08:58 GMT
════════════════════════
⌗ Tags: #google_gemini_pro #bug_bounty #vulnerability_disclosure #cybersecurity #google
Medium
🔓 Gemini Pro’s Student Verification Loophole: A Bug, or a Feature?
By Sk Jasimuddin | Security Researcher | Disclosed: September 14, 2025  [Contact: [email protected]]
19 views
Daily Writeups
⤷ Title: Cyber Security Details: Investigating Cyber Crimes
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 05:30:52 GMT
════════════════════════
⌗ Tags: #investigate #hacking #cybercrime #security #forensics
Medium
Cyber Security Details: Investigating Cyber Crimes
Delving into cyber security details, this article explores the intricate process of investigating cyber crimes, equipping advanced…
10 views
Daily Writeups
⤷ Title: Securing the Edge: Cyber Security Details
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 05:32:33 GMT
════════════════════════
⌗ Tags: #cyber_sec #edge_sec #infosec #security #edgenet
Medium
Securing the Edge: Cyber Security Details
The proliferation of edge computing introduces a new frontier in the cybersecurity landscape, demanding meticulous attention to the…
16 views
Daily Writeups
⤷ Title: The Importance of Threat Intelligence: Cyber Security Details
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 05:31:11 GMT
════════════════════════
⌗ Tags: #infosec #threatintel #cyber_sec #security #analysis
Medium
The Importance of Threat Intelligence: Cyber Security Details
Proactive cybersecurity hinges on threat intelligence, enabling engineers to defend digital assets. Discover its critical role in enhancing…
14 views
Daily Writeups
⤷ Title: Cyber Security Details: Protecting Intellectual Property
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 05:31:08 GMT
════════════════════════
⌗ Tags: #infosec #intel_prop #ip_protect #cyber_sec #dataguard
Medium
Cyber Security Details: Protecting Intellectual Property
Safeguarding intellectual property is paramount in the digital age, representing an organization’s most valuable assets. This guide…
20 views
Daily Writeups
⤷ Title: Code Your Future: Data Science vs. Cybersecurity
════════════════════════
𐀪 Author: Eimtonline
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 05:54:33 GMT
════════════════════════
⌗ Tags: #artificialintelligenceai #machine_learning #data_science #cybersecurity
Medium
Code Your Future: Data Science vs. Cybersecurity
Not sure whether to dive into Data Science or Cybersecurity after your CS degree? We’ll guide you with insights to make your decision…
11 views
Daily Writeups
⤷ Title: Stop Common SSH Mistakes: Hardening Tips for Every Linux Sysadmin
════════════════════════
𐀪 Author: Pawan Natekar
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 05:53:04 GMT
════════════════════════
⌗ Tags: #linux #space #cybersecurity #medium #software_development
Medium
Stop Common SSH Mistakes: Hardening Tips for Every Linux Sysadmin
How I secure my Linux servers daily with key SSH hardening practices to keep attackers out and ensure smooth operations.
17 views