Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Beyond Human Intuition: DeepMind Launches Global AI for Math Initiative to Revolutionize Discovery
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:51:03 +0000
════════════════════════
⌗ Tags: #Google #AI for Math #AlphaEvolve #Gemini Deep Think #Google DeepMind #IHES #Mathematical Discovery #science
Penetration Testing Tools
Beyond Human Intuition: DeepMind Launches Global AI for Math Initiative to Revolutionize Discovery
DeepMind launched the AI for Math Initiative, uniting 5 top institutes to use Gemini Deep Think and AlphaEvolve to accelerate math discovery and break records.
7 views
Daily Writeups
⤷ Title: House Spy: Robot Vacuum Halted Remotely After Engineer Blocks China Telemetry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:45:09 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor #China #iLife #IoT Security #Remote Access #Robot Vacuum #Surveillance #Telemetry
Penetration Testing Tools
House Spy: Robot Vacuum Halted Remotely After Engineer Blocks China Telemetry
Engineer found a secret Linux computer in his iLife robot vacuum. It uses an open ADB port to allow remote shutdown after telemetry to Chinese servers was blocked.
7 views
Daily Writeups
⤷ Title: Turning Point: KDE Plasma 6.5.1 Arrives, Fixing Dozens of Bugs to Welcome New Linux Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:41:09 +0000
════════════════════════
⌗ Tags: #Linux #Bug Fixes #desktop environment #KDE Plasma #open source #Plasma 6.5 #Usability
Penetration Testing Tools
Turning Point: KDE Plasma 6.5.1 Arrives, Fixing Dozens of Bugs to Welcome New Linux Users
KDE Plasma 6.5.1 released, fixing 63 bugs for a smoother, faster desktop. Features include auto theme switching, unified app permissions, and a redesigned setup utility.
4 views
Daily Writeups
⤷ Title: Diplomatic Spies: Chinese APT UNC6384 Targets NATO Hosts with PlugX Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #Diplomacy #European Union #Mustang Panda #NATO #PlugX #Spear Phishing #UNC6384
Penetration Testing Tools
Diplomatic Spies: Chinese APT UNC6384 Targets NATO Hosts with PlugX Malware
Chinese APT UNC6384 targeted Hungarian/Belgian diplomats with PlugX malware, exploiting a Windows flaw via spear phishing themed around NATO & EU meetings.
13 views
Daily Writeups
⤷ Title: Telecom Spies: Ribbon Communications Breached in 9-Month State-Sponsored Espionage Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:34:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #CISA #cyberattack #Network Breach #Ribbon Communications #Salt Typhoon #State_Sponsored #Telecom Espionage
Penetration Testing Tools
Telecom Spies: Ribbon Communications Breached in 9-Month State-Sponsored Espionage Attack
Hackers, possibly state-linked, infiltrated Ribbon Communications for 9 months, accessing client files. The telecom supplier (Verizon, DoD clients) has notified victims.
9 views
Daily Writeups
⤷ Title: Privacy Alarm: Coalition Urges FTC to Halt Meta’s Plan to Use Private AI Chats for Ads
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:18:22 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Privacy #Chatbot #Data Monetization #Epic #facebook #FTC #Meta #regulation #Surveillance #WhatsApp
Penetration Testing Tools
Privacy Alarm: Coalition Urges FTC to Halt Meta's Plan to Use Private AI Chats for Ads
Advocacy groups urge the FTC to block Meta's plan (starting Dec 16) to use private AI chatbot conversations across Facebook/WhatsApp for targeted advertising.
9 views
Daily Writeups
⤷ Title: The Leak: Cellebrite Matrix Reveals GrapheneOS Protects Pixels Against Data Extraction
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:15:38 +0000
════════════════════════
⌗ Tags: #Android #AFU #BFU #Cellebrite #Data Extraction #Forensics #Google Pixel #GrapheneOS #mobile security #privacy
Penetration Testing Tools
The Leak: Cellebrite Matrix Reveals GrapheneOS Protects Pixels Against Data Extraction
A Cellebrite leak confirms GrapheneOS thwarts automated data extraction on all Google Pixel models (6-9), even when unlocked. Standard firmware remains vulnerable.
8 views
Daily Writeups
⤷ Title: Hacktivist Warning: Canadian Critical Infrastructure Breached, Control Parameters Altered
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:13:46 +0000
════════════════════════
⌗ Tags: #Cyber Security #Canada #Critical Infrastructure #cybersecurity #Hacktivism #ICS #Remote Access #SCADA #Security Advisory
Penetration Testing Tools
Hacktivist Warning: Canadian Critical Infrastructure Breached, Control Parameters Altered
Hacktivists infiltrated Canadian water, oil, and agriculture systems, altering control parameters. Officials warn exposed industrial control systems are easy targets.
12 views
Daily Writeups
⤷ Title: U.S. Interagency Consultations Target TP-Link Ban Over Suspected China Ties
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:11:28 +0000
════════════════════════
⌗ Tags: #Information Security #China #Commerce Department #National Security #Router Ban #Supply Chain #TP_Link #US government
Penetration Testing Tools
U.S. Interagency Consultations Target TP-Link Ban Over Suspected China Ties
U.S. agencies explored a TP-Link ban due to suspected China ties. Officials fear Chinese law could compel the router giant (36% market share) to push malicious updates.
9 views
Daily Writeups
⤷ Title: AI Shield: Android Blocks 10 Billion Scams Monthly as Job Offers & Financial Fraud Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:08:03 +0000
════════════════════════
⌗ Tags: #Android #Cybercriminals #AI Defense #Android Security #google #Mobile fraud #phishing #pig butchering #RCS #spam filter
Penetration Testing Tools
AI Shield: Android Blocks 10 Billion Scams Monthly as Job Offers & Financial Fraud Surge
Google's AI defenses block 10B+ suspicious contacts monthly on Android, combating job offers & group chat scams, with protection rolling out to RCS links.
7 views
Daily Writeups
⤷ Title: Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:02:19 +0000
════════════════════════
⌗ Tags: #Malware #Eclipse Foundation #MSRC #Open VSX #security incident #Supply Chain #Token Security #Visual Studio Code #Wiz
Penetration Testing Tools
Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks
Eclipse revoked compromised Open VSX tokens found in repositories. New "ovsxp_" prefix and shorter validity periods will strengthen supply chain security.
5 views
Daily Writeups
⤷ Title: High-Severity Bug: AMD Zen 5 RDSEED Flaw Risks Randomness Integrity; Microcode Fix Coming
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 02:44:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AGESA #AMD #Confidentiality #CPU vulnerability #EPYC #microcode #RDSEED #Ryzen #Zen 5
Daily CyberSecurity
High-Severity Bug: AMD Zen 5 RDSEED Flaw Risks Randomness Integrity; Microcode Fix Coming
AMD confirmed a high-severity bug in Zen 5 CPUs where the 16/32-bit RDSEED returns non-random values. Microcode fixes roll out starting Nov 14 (EPYC) & late Nov (Ryzen).
5 views
Daily Writeups
⤷ Title: The Fix is Coming: Microsoft Acknowledges and Mitigates Widespread Driver Error 0x80070103
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 02:33:27 +0000
════════════════════════
⌗ Tags: #Windows #Driver Update #Error Code 0x80070103 #KB5067036 #Microsoft #Windows 11 #Windows Update
Daily CyberSecurity
The Fix is Coming: Microsoft Acknowledges and Mitigates Widespread Driver Error 0x80070103
Microsoft officially acknowledged and fixed Windows 11 driver installation error 0x80070103 in Build 26200.7019. The update is expected to roll out to all users in November.
7 views
Daily Writeups
⤷ Title: Dual Audio: Windows 11 Finally Gets Bluetooth Audio Sharing, But Only for Copilot+ PCs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 02:12:47 +0000
════════════════════════
⌗ Tags: #Windows #Audio Sharing #Bluetooth #Copilot #LE Audio #Microsoft #Qualcomm #Snapdragon #Windows 11
Daily CyberSecurity
Dual Audio: Windows 11 Finally Gets Bluetooth Audio Sharing, But Only for Copilot+ PCs
Windows 11 adds Bluetooth audio sharing (Build 26220.7051), enabling dual wireless audio streaming—but the feature is currently restricted to Copilot+ PCs.
10 views
Daily Writeups
⤷ Title: iOS Update Timeline: Apple Preps 26.1 Release, Eyes Passport & RCS Encryption for 26.2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 02:08:10 +0000
════════════════════════
⌗ Tags: #Technology #Apple Update #Apple Wallet #encryption #Gurman #iOS 26 #passport #RCS #Tech News
Daily CyberSecurity
iOS Update Timeline: Apple Preps 26.1 Release, Eyes Passport & RCS Encryption for 26.2
iOS 26.1 drops Nov 3, with 26.2 beta soon after. Public attention focuses on 26.2 delivering US Passport integration in Wallet & RCS End-to-End Encryption.
8 views
Daily Writeups
⤷ Title: Windows 11 Bug: Task Manager Refuses to Close, Multiplying Processes and Hitting Performance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 02:04:47 +0000
════════════════════════
⌗ Tags: #Windows #Microsoft Bug #Performance #System Process #Task Manager #Taskmgr.exe #Windows 11 #Windows Update
Daily CyberSecurity
Windows 11 Bug: Task Manager Refuses to Close, Multiplying Processes and Hitting Performance
A Windows 11 bug (v. 24H2/25H2) prevents Task Manager from closing, causing multiple background processes to multiply and drain system resources. Fix coming soon.
9 views
Daily Writeups
⤷ Title: Space Race: SpaceX Lands $2 Billion Contract for Trump’s “Golden Dome” Missile Defense
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 02:00:51 +0000
════════════════════════
⌗ Tags: #Technology #Defense Tech #DoD #Elon Musk #Golden Dome #Missile Defense #satellite #SpaceX #Starlink
Daily CyberSecurity
Space Race: SpaceX Lands $2 Billion Contract for Trump's "Golden Dome" Missile Defense
SpaceX is set to secure a $2B contract for President Trump's "Golden Dome" initiative, developing 600 missile-tracking satellites for the defense network.
8 views
Daily Writeups
⤷ Title: Week 16 — JS Enum Framework: From Blueprint to Reality
════════════════════════
𐀪 Author: Aang
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:19:52 GMT
════════════════════════
⌗ Tags: #information_security #osint #ethical_hacking #bug_bounty_tips #bug_bounty
Medium
Week 16 — JS Enum Framework: From Blueprint to Reality
JSArvis — JavaScript Analysis, Reconnaissance, & Vulnerability Intelligence System
13 views
Daily Writeups
⤷ Title: How I Found a Stored XSS Vulnerability Through a PDF Upload
════════════════════════
𐀪 Author: Abhishek sharma
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 02:11:37 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty #bug_bounty_tips #stored_xss #bug_bounty_writeup
Medium
How I Found a Stored XSS Vulnerability Through a PDF Upload
About the Author
14 views
Daily Writeups
⤷ Title: Command Injection: When Your App Executes Attacker Code
════════════════════════
𐀪 Author: Rahul Beniwal
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:09:07 GMT
════════════════════════
⌗ Tags: #software_development #command_injection #injection_attacks #application_security
Medium
Command Injection: When Your App Executes Attacker Code
Welcome Everyone. This is our second article on application security. In case you didn’t check SQL Injection, you can read it here. Today…
6 views
Daily Writeups
⤷ Title: SQL Injection Explained: How Attackers Exploit Your Queries and Learn how to prevent SQL Injection
════════════════════════
𐀪 Author: Rahul Beniwal
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:08:34 GMT
════════════════════════
⌗ Tags: #web_safety #software_development #injection_attacks #sql_injection #application_security
Medium
SQL Injection Explained: How Attackers Exploit Your Queries and Learn how to prevent SQL Injection
Non-Medium Members Please Read Here
9 views