Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: A CCSP (Certified Cloud Security Professional) Exam Kickstarter for Cloud Native Security…
════════════════════════
𐀪 Author: Gerald Bachlmayr
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 00:19:20 GMT
════════════════════════
⌗ Tags: #cloud_native #cloud_security #cybersecurity #cloud_computing #certification
Medium
A CCSP (Certified Cloud Security Professional) Exam Kickstarter for Cloud Native Security…
Last week, I passed the Certified Cloud Security Professional (CCSP) exam. I had previously passed the AWS Security Specialty exam in 2020…
72 views
Daily Writeups
⤷ Title: A CCSP (Certified Cloud Security Professional) Exam Kickstarter for Cloud Native Security…
════════════════════════
𐀪 Author: Gerald Bachlmayr
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 02:01:25 GMT
════════════════════════
⌗ Tags: #cloud_native #ccsp #cybersecurity #aws #cloud_security
Medium
A CCSP (Certified Cloud Security Professional) Exam Kickstarter for Cloud Native Security…
In the first part, we covered why CCSP matters, key differences to cloud provider certifications, and risk terminology. As a next step, we…
11 views
Daily Writeups
⤷ Title: AI Threats Have Moved Out of the Lab
════════════════════════
𐀪 Author: Yousri KOUKI
════════════════════════
ⴵ Time: Tue, 02 Sep 2025 08:36:25 GMT
════════════════════════
⌗ Tags: #cloud_native #ai #machine_learning #hacking #security
Medium
AI Threats Have Moved Out of the Lab
For years, the cybersecurity community has debated the possibility of AI-driven attacks. Researchers often reassured themselves with a…
17 views
Daily Writeups
⤷ Title: Cloud Native Application Security (CNAPP): A Game Changer In Cybersecurity
════════════════════════
𐀪 Author: Cloud Kinetics
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 09:18:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_infrastructure #cloud_application #cnapp #cloud_native
Medium
Cloud Native Application Security (CNAPP): A Game Changer In Cybersecurity
As more organizations embrace the cloud, securing cloud-native applications has become increasingly complex. Fragmented multi-vendor…
12 views
Daily Writeups
⤷ Title: The Future of Real-Time Security in Apache Kafka: From Event Buses to Autonomous Nervous Systems.
════════════════════════
𐀪 Author: Sachin Rajakaruna
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 15:28:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #data_streaming #apache_kafka #cloud_native #devsecops
Medium
The Future of Real-Time Security in Apache Kafka: From Event Buses to Autonomous Nervous Systems.
Apache Kafka has evolved from a durable log into the de facto backbone of distributed data systems. But while the ecosystem has mastered…
10 views
Daily Writeups
⤷ Title: Building Secure Multi-Tenant SaaS: Secure Architecture Patterns That Scale
════════════════════════
𐀪 Author: Niranjan Sharma
════════════════════════
ⴵ Time: Sun, 05 Oct 2025 02:49:59 GMT
════════════════════════
⌗ Tags: #multi_tenant #cybersecurity #cloud_architecture #saas #cloud_native
Medium
Building Secure Multi-Tenant SaaS: Secure Architecture Patterns That Scale
The evolution of Software-as-a-Service has fundamentally transformed how organizations consume and deliver software. Yet beneath the…
12 views
Daily Writeups
⤷ Title: Securing Software in the Era of AI-Generated Code
════════════════════════
𐀪 Author: Valentin Podkamennyi
════════════════════════
ⴵ Time: Sun, 26 Oct 2025 02:03:18 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_development #ai #cloud_native
Medium
Securing Software in the Era of AI-Generated Code
The accelerating pace of cloud-native development and the rise of AI-generated code are creating unprecedented cybersecurity challenges.
8 views
Daily Writeups
⤷ Title: Building a Microservice to Detect and Anonymize Sensitive Data in Files
════════════════════════
𐀪 Author: Prabhu Srivastava
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 07:21:19 GMT
════════════════════════
⌗ Tags: #cloud_native #data_management #cybersecurity #master_data_governance #sensitive_data
Medium
Building a Microservice to Detect and Anonymize Sensitive Data in Files
Every day, businesses like mine handle a river of sensitive information. Client databases, API credentials, financial data and personal…
17 views
Daily Writeups
⤷ Title: Next-Gen Ransomware Targets AWS S3: Five Cloud-Native Variants Exploit Misconfigurations for Irreversible Data Destruction
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 00:15:07 +0000
════════════════════════
⌗ Tags: #Malware #AWS S3 #Cloud Security #cloud_native #Extortion #IAM #KMS #ransomware #SSE_C #Trend Research
Daily CyberSecurity
Next-Gen Ransomware Targets AWS S3: Five Cloud-Native Variants Exploit Misconfigurations for Irreversible Data Destruction
Trend Research warns that ransomware is shifting to AWS S3, exploiting misconfigured IAM and SSE-C keys in five attack variants to cause irreversible data loss and cloud-native extortion.
20 views
Daily Writeups
⤷ Title: Security Alert: Apache SkyWalking Stored XSS Vulnerability (CVE-2025-54057)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 03:22:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache SkyWalking #APM Security #Cloud Native Security #CVE_2025_54057 #Stored XSS
Daily CyberSecurity
Security Alert: Apache SkyWalking Stored XSS Vulnerability (CVE-2025-54057)
Apache SkyWalking patches a Stored XSS flaw (CVE-2025-54057) affecting versions 10.2.0 and older. Upgrade to v10.3.0 to secure your APM dashboards.
16 views
Daily Writeups
⤷ Title: Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:04:04 +0000
════════════════════════
⌗ Tags: #Technology #cloud native #Deprecation #EOL #FFmpeg #Ingress NGINX #Kubernetes #open source #reverse proxy #Sustainability
Penetration Testing Tools
Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding
KubeCon in Atlanta delivered a wave of high-profile Kubernetes announcements, yet one of the most consequential developments slipped
8 views
Daily Writeups
⤷ Title: I Wasted 3 Years on EDR for Kubernetes. Here’s What Actually Works.
════════════════════════
𐀪 Author: Jonathan Kaftzan
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 15:13:01 GMT
════════════════════════
⌗ Tags: #cloud_native_security #application_security #kubernetes #threat_detection
Medium
I Wasted 3 Years on EDR for Kubernetes. Here’s What Actually Works.
Why traditional threat detection fails in cloud-native environments — and what I learned building something better
36 views
Daily Writeups
⤷ Title: Cluster Admin for All: Critical Kyverno Flaw (CVSS 10) Shatters Isolation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 00:27:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admission Controller #cloud_native #CVE_2026_22039 #CVE_2026_23881 #DevSecOps #dos #K8s #Kubernetes Security #Kyverno #privilege escalation
Daily CyberSecurity
Cluster Admin for All: Critical Kyverno Flaw (CVSS 10) Shatters Isolation
Critical Kyverno flaw CVE-2026-22039 (CVSS 10) allows policy creators to gain cluster admin rights. Update to v1.16.3 to fix privilege escalation & DoS.
8 views
Daily Writeups
⤷ Title: Gatekeeper Breached: 4 Critical Ingress-Nginx Flaws Risk Cluster Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 10:13:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #cloud_native #container security #DevSecOps #ingress_nginx #Kubernetes #Patch Alert #rce #Secret Disclosure
Daily CyberSecurity
Gatekeeper Breached: 4 Critical Ingress-Nginx Flaws Risk Cluster Secrets
Critical Ingress-Nginx flaws (CVE-2026-1580) allow RCE and secret theft via config injection. Upgrade to v1.13.7 or v1.14.3 immediately to secure K8s.
25 views
Daily Writeups
⤷ Title: Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:43:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #attack path visualization #AWS EKS #cloud_native security #DevSecOps #eks_security_scanner #Go #IAM security #Kubernetes security #RBAC audit #Tech News 2026 #Threat Modeling
Penetration Testing Tools
Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
Stop guessing your EKS security posture. Use eks-security-scanner to build threat graphs, detect privileged pods, and audit RBAC/IAM access paths instantly.
31 views
Daily Writeups
⤷ Title: Why Traditional Web Security Models Are Failing
════════════════════════
𐀪 Author: sachhsoft
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 05:31:01 GMT
════════════════════════
⌗ Tags: #api_security #cloud_native_security #modern_web_security #saas_application_security
Medium
Why Traditional Web Security Models Are Failing
For years, web security followed a predictable formula.
38 views