Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Copilot Connector Feature Unlocked: Microsoft AI Can Now Search and Integrate Google and Microsoft Cloud Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 00:00:39 +0000
════════════════════════
⌗ Tags: #Windows #Connector #Cross_Platform AI #gmail #Google Drive #Microsoft 365 #Microsoft Copilot #Productivity
Daily CyberSecurity
Copilot Connector Feature Unlocked: Microsoft AI Can Now Search and Integrate Google and Microsoft Cloud Data
Windows Copilot's new Connector feature allows users to link Google (Gmail, Drive, Calendar) and Microsoft cloud accounts, enabling cross-platform AI search and document generation.
13 views
Daily Writeups
⤷ Title: Agenda Ransomware Bypasses EDR by Deploying Linux Binary on Windows via Splashtop; Steals Veeam Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Oct 2025 00:37:15 +0000
════════════════════════
⌗ Tags: #Malware #Agenda Ransomware #BYOVD #Cross_Platform #EDR Bypass #Linux Binary #Qilin #Splashtop #Veeam Credentials
Daily CyberSecurity
Agenda Ransomware Bypasses EDR by Deploying Linux Binary on Windows via Splashtop; Steals Veeam Credentials
12 views
Daily Writeups
⤷ Title: Python RAT Disguised as Minecraft Client Uses Telegram Bot API for Cross-Platform Command & Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Oct 2025 00:05:09 +0000
════════════════════════
⌗ Tags: #Malware #Cross_Platform Malware #Discord Tokens #Infostealer #Minecraft #Nursultan Client #Python RAT #Telegram C2
Daily CyberSecurity
Python RAT Disguised as Minecraft Client Uses Telegram Bot API for Cross-Platform Command & Control
Netskope exposed a Python RAT (Nursultan Client) disguised as a Minecraft tool. It uses the Telegram Bot API for C2 to steal Discord tokens, credentials, and capture screenshots on Windows, Linux, and macOS.
20 views
Daily Writeups
⤷ Title: Agenda Ransomware Deploys Linux Variant on Windows for Stealth Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Oct 2025 08:55:18 +0000
════════════════════════
⌗ Tags: #Malware #Agenda Ransomware #BYOVD #Cross_Platform #cybersecurity #Linux #windows
Penetration Testing Tools
Agenda Ransomware Deploys Linux Variant on Windows for Stealth Attack
Agenda ransomware is exploiting RMM tools and BYOVD techniques to execute a Linux variant on Windows hosts, disabling backups and escalating privileges for data exfiltration.
13 views
Daily Writeups
⤷ Title: Swift on Android is Here: New SDK Unlocks Cross-Platform Development
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 04:04:44 +0000
════════════════════════
⌗ Tags: #Technology #Android #Cross_Platform #Mobile Development #open source #SDK #Swift
Penetration Testing Tools
Swift on Android is Here: New SDK Unlocks Cross-Platform Development
The Swift SDK for Android has launched in nightly preview, allowing developers to write native Android apps in Swift and easily share code with iOS via swift-java.
12 views
Daily Writeups
⤷ Title: Kinsing Cryptominer Exploits Apache ActiveMQ RCE (CVE-2023-46604), Adds Sharpire Backdoor for Multi-Stage Intrusion
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 00:18:46 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ActiveMQ #Cobalt Strike #Cross_Platform #cryptominer #CVE_2023_46604 #Kinsing #rce #Sharpire
Daily CyberSecurity
Kinsing Cryptominer Exploits Apache ActiveMQ RCE (CVE-2023-46604), Adds Sharpire Backdoor for Multi-Stage Intrusion
ASEC confirmed Kinsing is exploiting Apache ActiveMQ RCE (CVE-2023-46604) to deploy XMRig cryptominer. The group now integrates Sharpire, Cobalt Strike, and Meterpreter for advanced post-exploitation.
10 views
Daily Writeups
⤷ Title: HelloKitty Successor Kraken Ransomware Hits Windows/ESXi, Benchmarks Victim Performance Before Encryption
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 00:38:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Benchmarking #Cloudflared #Cross_Platform #ESXi #HelloKitty #Kraken Ransomware #RaaS #SSHFS
Daily CyberSecurity
HelloKitty Successor Kraken Ransomware Hits Windows/ESXi, Benchmarks Victim Performance Before Encryption
Cisco Talos reports Kraken, a HelloKitty successor, is a cross-platform RaaS targeting Windows/ESXi. The malware uniquely benchmarks CPU/IO to optimize encryption speed and uses Cloudflared/SSHFS for persistence.
15 views
Daily Writeups
⤷ Title: Chinese APT Deploys Cross-Platform ‘Brickstorm’ Backdoor, Burrows for Years in Critical Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:56:55 +0000
════════════════════════
⌗ Tags: #Malware #ADFS #BRICKSTORM #Chinese APT #CISA #Cross_Platform Malware #Cyber Espionage #NSA #UNC5221 #VMware vCenter #Warp Panda
Penetration Testing Tools
Chinese APT Deploys Cross-Platform 'Brickstorm' Backdoor, Burrows for Years in Critical Networks
Chinese cyber-espionage actors have spent years burrowed, undetected, within the networks of critical organizations, infiltrating infrastructure with sophisticated
11 views
Daily Writeups
⤷ Title: LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 00:06:57 +0000
════════════════════════
⌗ Tags: #Malware #anti_forensics #Cross_Platform #Cybercrime #ESXi #ETW Blinding #LockBit 5.0 #Operation Cronos #ransomware
Daily CyberSecurity
LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption
Despite takedown, LockBit 5.0 resurges as a cross-platform threat. The new variant blinds Windows Event Tracing (ETW), uses Invisible Mode for stealth encryption, and overwrites free disk space.
26 views
Daily Writeups
⤷ Title: New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 03:10:55 +0000
════════════════════════
⌗ Tags: #Malware #01flip #APAC #Cross_Platform #CVE_2019_11580 #LockBit #ransomware #Rust #Sliver
Daily CyberSecurity
New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2
New 01flip ransomware (written in Rust) targets APAC critical infra across Windows/Linux. The attackers use Sliver for C2 and older exploits for access. A curious "lockbit" ignore list was found in the code.
19 views
Daily Writeups
⤷ Title: Switching Teams: iOS 26.3 Beta Adds Official “Transfer to Android” Data Migration Option
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:08:53 +0000
════════════════════════
⌗ Tags: #Technology #Apple #Cross_Platform #Data Migration #Digital Markets Act #eSIM #EU Pressure #google #iOS 26.3 #Transfer to Android
Daily CyberSecurity
Switching Teams: iOS 26.3 Beta Adds Official "Transfer to Android" Data Migration Option
Apple's iOS 26.3 beta now includes an official "Transfer to Android" option, allowing seamless migration of apps, photos, and eSIM, likely driven by EU regulatory pressure.
15 views
Daily Writeups
⤷ Title: Tearing Down the Wall: Google Brings AirDrop Support to the Pixel 9
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 00:03:13 +0000
════════════════════════
⌗ Tags: #Android #AirDrop #Android 16 #Cross_Platform #file sharing #google #iOS 26 #Pixel 10 #Pixel 9 #Qualcomm #Quick Share #Snapdragon #Tech News 2026
Daily CyberSecurity
Tearing Down the Wall: Google Brings AirDrop Support to the Pixel 9
The dissolution of the formidable “walled garden” separating Android and iOS appears to be accelerating beyond initial prognostications. According to reports obtained by Android Author…
11 views
Daily Writeups
⤷ Title: A United Front: Nintendo, Sony, and Microsoft Update Shared Safety Principles
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 00:05:12 +0000
════════════════════════
⌗ Tags: #Technology #2026 Tech News #Cross_platform Security #Digital Well_being #Gaming Safety #Microsoft #Nintendo #Parental Controls #PlayStation #sony #Xbox
Daily CyberSecurity
A United Front: Nintendo, Sony, and Microsoft Update Shared Safety Principles
Nintendo, Sony, and Microsoft issue a 2026 joint manifesto to tackle cyberbullying and harassment using AI moderation across all gaming ecosystems.
7 views
Daily Writeups
⤷ Title: Wrapped in Stealth: Python RAT Hides Inside ELF Binary to Evade Detection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:05:00 +0000
════════════════════════
⌗ Tags: #Malware #Adaptive Beaconing #anti_forensics #Cross_Platform Malware #Cyber Security #ELF Binary #K7 Labs #Malware Analysis #PyInstaller #Python Malware #rat
Daily CyberSecurity
Wrapped in Stealth: Python RAT Hides Inside ELF Binary to Evade Detection
K7 Labs uncovers a stealthy Python-based RAT disguised as an ELF binary. Features adaptive beaconing and anti-forensics to stay hidden. Read the analysis.
20 views
Daily Writeups
⤷ Title: Tearing Down the Walled Garden: How Google Quick Share Finally Bridged the AirDrop Chasm
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:39:43 +0000
════════════════════════
⌗ Tags: #Android #Apple AirDrop #Cross_Platform #Erik Kay #File Transfer #Google Quick Share #Interoperability #Pixel 10 #Samsung Galaxy S26 #Snapdragon 8 Gen 5 #Tech News 2026
Daily CyberSecurity
Tearing Down the Walled Garden: How Google Quick Share Finally Bridged the AirDrop Chasm
Google’s Quick Share is ending the "green bubble" file barrier. Learn how the 2026 rollout brings AirDrop compatibility to Samsung and Snapdragon devices.
14 views
Daily Writeups
⤷ Title: Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:30:30 +0000
════════════════════════
⌗ Tags: #Technology #Apple Messages #cross_platform messaging #E2EE #end_to_end encryption #Google Messages #GSMA Universal Profile 3.0 #iOS 26.4 #Messaging Layer Security #MLS #RCS #Tech News 2026
Penetration Testing Tools
Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
Google and Apple have commenced testing end-to-end encryption for RCS messaging between Android smartphones and iPhones. The tech
9 views