Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The Invisible Worm: GlassWorm Spreads Via VS Code Extensions and Blockchain C2
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:58:11 +0000
════════════════════════
⌗ Tags: #Malware #blockchain #cybersecurity #GlassWorm #malware #Supply Chain #VS Code
Penetration Testing Tools
The Invisible Worm: GlassWorm Spreads Via VS Code Extensions and Blockchain C2
A new self-propagating worm, GlassWorm, hides code in VS Code extensions using invisible Unicode and uses Solana blockchain for its "unkillable" C2.
25 views
Daily Writeups
⤷ Title: The MFA Killer: How One Programmer’s Tool Became a $100M Cybercrime Weapon
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:54:49 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity #Evilginx #MFA Bypass #phishing #Red Team #Scattered Spider
Penetration Testing Tools
The MFA Killer: How One Programmer’s Tool Became a $100M Cybercrime Weapon
Evilginx, a security research tool designed to bypass MFA, was adopted by groups like Scattered Spider and used in the $100M MGM Resorts breach.
24 views
Daily Writeups
⤷ Title: irst Known Case: Feds Force OpenAI to Disclose ChatGPT User Identity
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:50:38 +0000
════════════════════════
⌗ Tags: #Data Leak #ChatGPT #CSAM #Homeland Security #Legal Precedent #OpenAI #privacy
Penetration Testing Tools
irst Known Case: Feds Force OpenAI to Disclose ChatGPT User Identity
Homeland Security issued the first known warrant compelling OpenAI to disclose a ChatGPT user's identity based on specific prompts in a CSAM investigation.
10 views
Daily Writeups
⤷ Title: The New E-Crime: AI-Driven Ransomware and Billion-Dollar Asian Underworlds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:48:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #Asia_Pacific #cybercrime #fintech #ransomware #Underground Economy
Penetration Testing Tools
The New E-Crime: AI-Driven Ransomware and Billion-Dollar Asian Underworlds
A new report details a surge in AI-driven ransomware (like FunkLocker) across APJ, fueled by Chinese underground services processing billions in illicit funds.
10 views
Daily Writeups
⤷ Title: Muji Suspends Online Store After Ransomware Cripples Logistics Partner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:45:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Askul #E_commerce #Japan #Muji #ransomware #Supply Chain
Penetration Testing Tools
Muji Suspends Online Store After Ransomware Cripples Logistics Partner
Muji has suspended its online store operations after a ransomware attack crippled the systems of its logistics partner, Askul Corp., disrupting deliveries.
8 views
Daily Writeups
⤷ Title: Warning: AI IDEs Cursor and Windsurf Expose Users to 94 Chromium Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:42:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI IDE #Cursor #cybersecurity #RCE #supply chain attack #Windsurf
Penetration Testing Tools
Warning: AI IDEs Cursor and Windsurf Expose Users to 94 Chromium Flaws
Cursor and Windsurf IDEs, used by 1.8M developers, are exposed to 94 unpatched Chromium/V8 vulnerabilities that could allow remote code execution.
13 views
Daily Writeups
⤷ Title: The Hunter Hunted: Spyware Targets the Developer Who Built Its Exploits
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:41:39 +0000
════════════════════════
⌗ Tags: #Malware #Apple #cybersecurity #hacking #NSO Group #Spyware #zero_day
Penetration Testing Tools
The Hunter Hunted: Spyware Targets the Developer Who Built Its Exploits
An engineer who developed iOS exploits for a government contractor was targeted by the same mercenary spyware he worked on, sparking a mystery.
12 views
Daily Writeups
⤷ Title: LinkedInDumper: dump employee information from LinkedIn Voyager API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:01:48 +0000
════════════════════════
⌗ Tags: #Open Source Tool #LinkedIn Dumper
Penetration Testing Tools
LinkedInDumper: dump employee information from LinkedIn Voyager API
LinkedIn Dumper is a Python 3 script to dump company employees from LinkedIn Voyager API.
10 views
Daily Writeups
⤷ Title: Reddit Sues Perplexity and Data Brokers for ‘Industrial-Scale’ Scraping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 02:48:52 +0000
════════════════════════
⌗ Tags: #Technology #AI #data scraping #Lawsuit #Perplexity #Reddit #robots.txt
Daily CyberSecurity
Reddit Sues Perplexity and Data Brokers for 'Industrial-Scale' Scraping
Reddit has filed a lawsuit against Perplexity and three data brokers, accusing them of unauthorized, "industrial-scale" scraping of its content for AI training.
10 views
Daily Writeups
⤷ Title: iPhone Air Flops: Apple to Slash Production by Over 80% After Weak Sales
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 02:44:30 +0000
════════════════════════
⌗ Tags: #Technology #Apple #iPhone Air #Ming_Chi Kuo #mobile #Sales #Tech News
Daily CyberSecurity
iPhone Air Flops: Apple to Slash Production by Over 80% After Weak Sales
Analyst Ming-Chi Kuo reports that sales of the ultra-thin iPhone Air have collapsed, prompting Apple to cut production by over 80% due to poor demand.
17 views
Daily Writeups
⤷ Title: Security First: Windows 11 Disables File Previews for Web Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 02:36:37 +0000
════════════════════════
⌗ Tags: #Windows #cybersecurity #File Explorer #Microsoft #NTLM #privacy #Windows 11
Daily CyberSecurity
Security First: Windows 11 Disables File Previews for Web Downloads
Microsoft disabled File Explorer previews for web-downloaded files to block an NTLM hash leak vulnerability, prioritizing security over convenience.
14 views
Daily Writeups
⤷ Title: Full-Scale War: Apple Challenges EU’s Digital Markets Act in Court
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 02:26:04 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #Apple #DMA #European Union #Lawsuit #regulation
Daily CyberSecurity
Full-Scale War: Apple Challenges EU's Digital Markets Act in Court
Apple has escalated its fight against the EU's Digital Markets Act (DMA) in the General Court, calling the regulation an "immense and intrusive burden."
10 views
Daily Writeups
⤷ Title: Deepfake Defense: YouTube Rolls Out AI Tool to Protect Creator Likeness
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 02:14:52 +0000
════════════════════════
⌗ Tags: #Technology #AI #Content ID #Creator Economy #deepfake #privacy #youtube
Daily CyberSecurity
Deepfake Defense: YouTube Rolls Out AI Tool to Protect Creator Likeness
YouTube rolls out its "Likeness Detection Tool" to YPP creators, allowing them to automatically flag and remove unauthorized deepfake videos of themselves.
20 views
Daily Writeups
⤷ Title: ISC Patches Multiple High-Severity BIND Vulnerabilities Enabling Cache Poisoning and Denial of Service Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 02:07:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BIND 9 #Critical Vulnerability #CVE_2025_40780 #DNS Cache Poisoning #DNS Spoofing #ISC #Resolver Security
Daily CyberSecurity
ISC Patches Multiple High-Severity BIND Vulnerabilities Enabling Cache Poisoning and Denial of Service Attacks
14 views
Daily Writeups
⤷ Title: How I can discover the winner before the official reveal
════════════════════════
𐀪 Author: Viperblitzz
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:28:05 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #cybersecurity #bug_hunting #bug_bounty_tips
Medium
How I can discover the winner before the official reveal
🙌🏻Introduction
18 views
Daily Writeups
⤷ Title: From Burp Suite to BloodHound: The Career Roadmap of an Offensive Security Pro
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:03:52 GMT
════════════════════════
⌗ Tags: #cyber #technology #cybersecurity #hacking #malware
Medium
🧠 From Burp Suite to BloodHound: The Career Roadmap of an Offensive Security Pro
How to grow from a junior pentester running Nessus scans… to leading Red Team ops that keep entire companies awake at night.
32 views
Daily Writeups
⤷ Title: The Hidden Weakness in Tokenized Finance
════════════════════════
𐀪 Author: Jon Capriola
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:49:02 GMT
════════════════════════
⌗ Tags: #blockchain #cybersecurity #business #cryptocurrency #artificial_intelligence
Medium
The Hidden Weakness in Tokenized Finance
A2SPA & CryptoValidity: The Path to Trust
16 views
Daily Writeups
⤷ Title: Multi-honeypot Platform on Azure using T-Pot
════════════════════════
𐀪 Author: X2Tech
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:44:34 GMT
════════════════════════
⌗ Tags: #azure #threat_intelligence #cloud_security #cybersecurity #honeypot
Medium
Multi-honeypot Platform on Azure using T-Pot
Setting Up T-Pot on Azure for a Cloud-Based Honeypot Network
14 views
Daily Writeups
⤷ Title: When Phishing Meets AI: The Hidden Threat of Prompt Injection
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:31:51 GMT
════════════════════════
⌗ Tags: #phishing #cybersecurity #social_engineering #ai_powered_phishing #prompt_injection
Medium
When Phishing Meets AI: The Hidden Threat of Prompt Injection
Phishing is the art of deception. For decades, attackers have refined ways to make you click where you should not, type what you should not…
18 views
Daily Writeups
⤷ Title: Critical: 3,894 SonicWall SSL VPNs at Risk of OVERSTEP Exploit and MFA Bypass
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 03:05:26 GMT
════════════════════════
⌗ Tags: #sonicwall #vpn #cybersecurity #ssl #exploit
Medium
Critical: 3,894 SonicWall SSL VPNs at Risk of OVERSTEP Exploit and MFA Bypass
Multiple hacking groups have been repeatedly using SonicWall SSL VPN devices as an intrusion vector, and the security community continues…
20 views
Daily Writeups
⤷ Title: Cybersecurity of 5G Technology and Services
════════════════════════
𐀪 Author: Muhammad Ali Khan
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 02:57:48 GMT
════════════════════════
⌗ Tags: #5g_security #5g_technology #cybersecurity #telecommunication
Medium
Cybersecurity of 5G Technology and Services
Article written by: Muhammad Ali Khan
16 views