Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Phantom Taurus: New Chinese APT Emerges with Fileless NET-STAR Backdoor Targeting Global Governments and Telecoms
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:24:32 +0000
════════════════════════
⌗ Tags: #Cyber Security #Chinese APT #Espionage #Fileless Malware #IIS Backdoor #NET_STAR #Phantom Taurus #Telecommunications #Unit 42
Penetration Testing Tools
Phantom Taurus: New Chinese APT Emerges with Fileless NET-STAR Backdoor Targeting Global Governments and Telecoms
Unit 42 uncovers Phantom Taurus, a new Chinese APT using the fileless NET-STAR backdoor to target SQL databases and IIS servers in global espionage campaigns.
21 views
Daily Writeups
⤷ Title: MatrixPDF: New Toolkit Turns Ordinary PDFs Into Interactive Phishing Lures That Bypass Gmail
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:20:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #email security #JavaScript #MaaS #malware #MatrixPDF #PDF Phishing #Varonis
Penetration Testing Tools
MatrixPDF: New Toolkit Turns Ordinary PDFs Into Interactive Phishing Lures That Bypass Gmail
Varonis discovered MatrixPDF, a new toolkit that weaponizes PDFs with JavaScript and interactive lures to bypass email filters and redirect victims to phishing sites.
26 views
Daily Writeups
⤷ Title: DeepSeek Unveils Sparse Attention: A New LLM Architecture That Slashes AI API Costs by 50%
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:17:59 +0000
════════════════════════
⌗ Tags: #Technology #API Costs #Computational Efficiency #DeepSeek #DeepSeek_V3.2_Exp #Generative AI #LLM #Sparse Attention
Penetration Testing Tools
DeepSeek Unveils Sparse Attention: A New LLM Architecture That Slashes AI API Costs by 50%
DeepSeek's new experimental model, V3.2-Exp, features a Sparse Attention mechanism designed to cut long-context inference costs and API prices by over 50%.
6 views
Daily Writeups
⤷ Title: Gemini Trifecta: Three Flaws Allowed Hackers to Exploit Google’s AI for Stealthy Data Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:16:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cloud Assist #cybersecurity #Data Exfiltration #Gemini AI #Gemini Trifecta #google #Prompt Injection #Tenable
Penetration Testing Tools
Gemini Trifecta: Three Flaws Allowed Hackers to Exploit Google's AI for Stealthy Data Theft
Tenable exposed the "Gemini Trifecta": three flaws that allowed attackers to hijack Google's AI via injected search history and poisoned logs for stealthy data theft.
8 views
Daily Writeups
⤷ Title: VS Code Rival Zed Hits Windows Public Beta, Bringing Rust-Powered Speed to the #1 Dev Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:14:22 +0000
════════════════════════
⌗ Tags: #Technology #Code Editor #developer tools #performance #Rust #VS Code Alternative #Windows Beta #WSL #Zed
Penetration Testing Tools
VS Code Rival Zed Hits Windows Public Beta, Bringing Rust-Powered Speed to the #1 Dev Platform
Zed, the super-fast, Rust-based code editor, has released a public Windows beta build, targeting the 49.5% of developers who use the platform. It uses 80% less RAM than VS Code.
6 views
Daily Writeups
⤷ Title: SWIFT Launches Blockchain-Based Infrastructure to Transform Global Cross-Border Payments
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:13:24 +0000
════════════════════════
⌗ Tags: #Technology #blockchain #Consensys #Cross_Border Payments #Distributed Ledger #Financial System #smart contracts #Swift #Tokenized Assets
Penetration Testing Tools
SWIFT Launches Blockchain-Based Infrastructure to Transform Global Cross-Border Payments
SWIFT is overhauling its infrastructure with a blockchain-based ledger, partnering with 30 banks to enable instant, 24/7, transparent cross-border payments using smart contracts.
6 views
Daily Writeups
⤷ Title: 48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:07:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #Cisco ASA #Exposed Devices #Firepower #NCSC #network security #RCE #Shadowserver #zero_day
Penetration Testing Tools
48,000 Cisco Firewalls Remain Exposed to Active Zero-Day Attacks, Shadowserver Finds
A Shadowserver scan found over 48,000 Cisco ASA/FTD firewalls remain unpatched against two critical zero-day RCE/Unauthorized Access flaws, despite CISA’s emergency directive.
6 views
Daily Writeups
⤷ Title: $50 Hardware Attack Bypass: Researchers Expose Critical Flaw in Intel SGX and AMD SEV-SNP Trusted Computing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:05:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #AMD SEV_SNP #cloud security #cybersecurity #Hardware Attack #Intel SGX #Raspberry Pi Pico #Side_Channel #TEE #Trusted Execution Environment
Penetration Testing Tools
$50 Hardware Attack Bypass: Researchers Expose Critical Flaw in Intel SGX and AMD SEV-SNP Trusted Computing
Researchers used a $50 hardware interposer to bypass Intel SGX and AMD SEV-SNP. The attack entirely breaks trusted computing guarantees and extracts platform provisioning keys.
11 views
Daily Writeups
⤷ Title: Datzbro Trojan: Spyware-Banking Malware Hijacks Seniors’ Devices with Fake Facebook Lures
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:02:33 +0000
════════════════════════
⌗ Tags: #Malware #Android Trojan #Banking Malware #Datzbro #Remote Access #Senior Scam #Social Engineering #Spyware #ThreatFabric
Penetration Testing Tools
Datzbro Trojan: Spyware-Banking Malware Hijacks Seniors’ Devices with Fake Facebook Lures
The Datzbro Android Trojan is targeting seniors via fake Facebook groups and AI content. The hybrid malware can remotely control devices and steal banking credentials.
9 views
Daily Writeups
⤷ Title: VMware Zero-Day (CVE-2025-41244) Exploited by Chinese APT UNC5174 Since October 2024
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:01:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aria Operations #Broadcom #Chinese APT #privilege escalation #UNC5174 #vmware #VMware Tools #zero_day
Penetration Testing Tools
VMware Zero-Day (CVE-2025-41244) Exploited by Chinese APT UNC5174 Since October 2024
Broadcom patched CVE-2025-41244, a zero-day LPE flaw in VMware Aria Operations and Tools. NVISO confirmed exploitation since Oct. 2024 by Chinese APT UNC5174.
8 views
Daily Writeups
⤷ Title: Lunar Spider Campaign: Single Click Leads to Two-Month Intrusion and Domain Admin Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 02:56:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brute Ratel #Cloudflare #Credential Theft #DFIR #Domain Admin #Infostealer #Latrodectus #Lunar Spider
Penetration Testing Tools
Lunar Spider Campaign: Single Click Leads to Two-Month Intrusion and Domain Admin Theft
Lunar Spider executed a complex, multi-stage attack starting with a single click. The group stole domain admin credentials and persisted for two months to exfiltrate data.
14 views
Daily Writeups
⤷ Title: The Validation Trap: Why Hackers Chase Hall of Fame Instead of Real Bugs
════════════════════════
𐀪 Author: Đeepanshu
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:31:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #bug_bounty #mindset
Medium
The Validation Trap: Why Hackers Chase Hall of Fame Instead of Real Bugs 🏆
Bug bounty hunting is supposed to be about finding vulnerabilities that matter. But let’s be honest — many hackers (maybe even you) aren’t…
11 views
Daily Writeups
⤷ Title: Cybersecurity Awareness Month: Building a Culture of Cyber Resilience
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:22:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #cyber_security_awareness #information_technology #cybersecurity #hacking
Medium
Cybersecurity Awareness Month: Building a Culture of Cyber Resilience
Every October, organizations and professionals worldwide recognize Cybersecurity Awareness Month — an initiative launched in 2004 to…
7 views
Daily Writeups
⤷ Title: Errors to API Exposure
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:06:00 GMT
════════════════════════
⌗ Tags: #programming #infosec #technology #bug_bounty #cybersecurity
Medium
Errors to API Exposure
Error Based Hunting for API Exposure
9 views
Daily Writeups
⤷ Title: MCRTA(MULTI-CLOUD RED TEAMING ANALYST)
════════════════════════
𐀪 Author: anonymous.gharti
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:11:05 GMT
════════════════════════
⌗ Tags: #hacking #cloud_penetration_testing #cloud_red_teaming #red_teaming #mcrta
Medium
MCRTA(MULTI-CLOUD RED TEAMING ANALYST)
I recently passed my certification of MCRTA from CWL cyber-warfare labs which was given in 90% off prize from them. It was a great day of…
15 views
Daily Writeups
⤷ Title: Bluzor.cc Reviews: Scam Complaints, Warnings, and Recovery Options
════════════════════════
𐀪 Author: Editor
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:47:00 GMT
════════════════════════
⌗ Tags: #crypto_scam_recovery #cybersecurity #crypto_scam #cryptocurrency #crypto_safety
Medium
Bluzor.cc Reviews: Scam Complaints, Warnings, and Recovery Options
A complete guide for anyone searching “Is Bluzor.cc a scam?” and looking for answers.
10 views
Daily Writeups
⤷ Title: Campanha de Phishing Brasil — Uma analise do Malware
════════════════════════
𐀪 Author: dathanNobrega
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:46:49 GMT
════════════════════════
⌗ Tags: #malware_analysis #phishing #cybersecurity
Medium
Campanha de Phishing Brasil — Uma analise do Malware
Campanha WhatsApp → ZIP com atalho (.lnk) que executa PowerShell ofuscado (fileless loader)
11 views
Daily Writeups
⤷ Title: Is Coatedf.cc Safe or a Scam? The Truth Revealed
════════════════════════
𐀪 Author: Editor
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:43:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #crypto_scam #cryptocurrency #crypto_safety #crypto_scam_recovery
Medium
Is Coatedf.cc Safe or a Scam? The Truth Revealed
Exploring Coatedf.cc legitimacy, reported fraud cases, and crypto recovery solutions.
9 views
Daily Writeups
⤷ Title: Can You Trust Resolvedapps.diy? Scam Warnings and Honest Reviews
════════════════════════
𐀪 Author: Editor
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:40:36 GMT
════════════════════════
⌗ Tags: #crypto_scam #crypto_safety #cybersecurity #crypto_scam_recovery #cryptocurrency
Medium
Can You Trust Resolvedapps.diy? Scam Warnings and Honest Reviews
Everything you need to know about Resolvedapps.diy, from fraud red flags to consumer protection steps.
6 views
Daily Writeups
⤷ Title: Stillwellinvestings.com Scam Alert: What Every Crypto User Should Know
════════════════════════
𐀪 Author: Editor
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:25:12 GMT
════════════════════════
⌗ Tags: #crypto_safety #cryptocurrency #cybersecurity #crypto_scam_recovery #crypto_scam
Medium
Stillwellinvestings.com Scam Alert: What Every Crypto User Should Know
Breaking down user experiences, scam complaints, and how to recover stolen funds.
6 views
Daily Writeups
⤷ Title: Is Belvarium.com Legit or a Scam? Read This Before Sending Money
════════════════════════
𐀪 Author: Editor
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 03:15:18 GMT
════════════════════════
⌗ Tags: #crypto_scam #cybersecurity #crypto_scam_recovery #crypto_safety #cryptocurrency
Medium
Is Belvarium.com Legit or a Scam? Read This Before Sending Money
A detailed look at Belvarium.com, warning signs of fraud, and recovery tips for victims.
11 views