Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Hunting Playbook: F5 Incident Detection Using Sigma Rules and Multi-Signal Correlation Techniques
════════════════════════
𐀪 Author: Abdul
════════════════════════
ⴵ Time: Wed, 15 Oct 2025 15:26:45 GMT
════════════════════════
⌗ Tags: #state_sponsored_hacking #hacking #f5 #cybersecurity #national_security
Medium
Hunting Playbook: F5 Incident Detection Using Sigma Rules and Multi-Signal Correlation Techniques
Executive summary
12 views
Daily Writeups
⤷ Title: From Hobbyists to State Pipeline: China Centralizes Vulnerability Research and Bans Foreign Hacking Contests
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Oct 2025 02:25:04 +0000
════════════════════════
⌗ Tags: #Information Security #APT #bug bounty #China #Cyber Espionage #MIIT #MSS #State Control #Vulnerability Research
Information Security News
From Hobbyists to State Pipeline: China Centralizes Vulnerability Research and Bans Foreign Hacking Contests
Over the past two decades, China’s vulnerability research industry has evolved from a disorganized network of enthusiasts into a highly structured ecosystem deeply intertwined with state interests…
12 views
Daily Writeups
⤷ Title: Spy vs. Spy: Mercenary Spyware Targets the Developers Who Build It
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 04:09:41 +0000
════════════════════════
⌗ Tags: #Malware #Apple #cybersecurity #Pegasus #spyware #state_sponsored #zero_day
Daily CyberSecurity
Spy vs. Spy: Mercenary Spyware Targets the Developers Who Build It
An iOS exploit developer was shocked to receive an Apple warning after being targeted by the same kind of state-sponsored mercenary spyware he researches.
24 views
Daily Writeups
⤷ Title: China Claims NSA Sabotaged National Time Center with 42 Cyber Weapons
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 06:48:44 +0000
════════════════════════
⌗ Tags: #Cyber Security #China #Critical Infrastructure #Cyberespionage #cybersecurity #NSA #State_Sponsored
Penetration Testing Tools
China Claims NSA Sabotaged National Time Center with 42 Cyber Weapons
China's CNCERT claims the US NSA conducted a two-year cyber operation using 42 tools to steal data and infiltrate the National Time and Frequency Center.
11 views
Daily Writeups
⤷ Title: Telecom Spies: Ribbon Communications Breached in 9-Month State-Sponsored Espionage Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:34:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #CISA #cyberattack #Network Breach #Ribbon Communications #Salt Typhoon #State_Sponsored #Telecom Espionage
Penetration Testing Tools
Telecom Spies: Ribbon Communications Breached in 9-Month State-Sponsored Espionage Attack
Hackers, possibly state-linked, infiltrated Ribbon Communications for 9 months, accessing client files. The telecom supplier (Verizon, DoD clients) has notified victims.
9 views
Daily Writeups
⤷ Title: Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:28:46 +0000
════════════════════════
⌗ Tags: #Malware #Apple #google #Intellexa #Spyware Alerts #State_Linked Attacks #Surveillance Tech #Threat Analysis Group #Zero_Day Exploitation
Penetration Testing Tools
Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims
The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked
10 views
Daily Writeups
⤷ Title: “React2Shell” Crisis: Critical Vulnerability Triggers Global Cyberattacks by State-Sponsored Groups
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 00:19:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Vulnerability #CVE_2025_55182 #Deserialization #Next.js #rce #React Server Components #React2Shell #state_sponsored
Daily CyberSecurity
"React2Shell" Crisis: Critical Vulnerability Triggers Global Cyberattacks by State-Sponsored Groups
A Critical RCE (CVSS 10.0) flaw, React2Shell, in React/Next.js's Flight protocol allows unauthenticated system takeover. North Korean and Chinese state actors are actively exploiting the deserialization bug.
13 views
Daily Writeups
⤷ Title: Urgent: Apple Patches Two Critical WebKit Zero-Days Under Active Exploitation Against High-Risk Targets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 13 Dec 2025 01:52:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #CVE_2025_43529 #ios #iPadOS #memory corruption #Safari #State_Sponsored Spyware #use after free #WebKit #zero_day
Daily CyberSecurity
Urgent: Apple Patches Two Critical WebKit Zero-Days Under Active Exploitation Against High-Risk Targets
Apple patched two critical zero-days in WebKit (UAF & Memory Corruption) under active exploitation in extremely sophisticated attacks against targeted individuals. Update iOS 26 immediately.
29 views
Daily Writeups
⤷ Title: UK Sanctions 2 Chinese Firms: i-Soon & Integrity Tech Targeted for Cyberattacks on Allies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:51:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #China #Cyber Espionage #cyberattack #i_Soon #Integrity Tech #National Security #NCSC #State_Sponsored Hacking #UK Sanctions
Penetration Testing Tools
UK Sanctions 2 Chinese Firms: i-Soon & Integrity Tech Targeted for Cyberattacks on Allies
The United Kingdom has announced sanctions against two Chinese technology companies, accusing them of reckless and indiscriminate cyberattacks
18 views
Daily Writeups
⤷ Title: The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:06:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Browser Extensions #chrome #cyber_espionage #DarkSpectre #Edge #firefox #GhostPoster #KOI Security #malware #ShadyPanda #state_sponsored #Zoom Stealer
Daily CyberSecurity
The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
Koi Security unmasks DarkSpectre, a Chinese threat group that used 300+ browser extensions to spy on 8.8M users and steal corporate meeting data.
23 views
Daily Writeups
⤷ Title: Notepad++ Hijacked: State-Sponsored Actors Poisoned Updates for Months
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 07:55:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #Chinese hackers #cybersecurity #malware #notepad++ #Open Source Security #Patch Alert #state_sponsored #supply chain attack #Update Hijack #WinGUp
Daily CyberSecurity
Notepad++ Hijacked: State-Sponsored Actors Poisoned Updates for Months
Notepad++ confirms update infrastructure was compromised by state-sponsored actors targeting specific users. Update to version 8.8.9 immediately.
38 views
Daily Writeups
⤷ Title: Digital Siege: The “Pre-Positioning” Strategy Fueling 2.6 Million Daily Attacks on Taiwan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:37:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #China APT #Critical Infrastructure #DDoS #Forescout report #Onnara breach #pre_positioning #South Korea cyber defense #State_Sponsored Hacking #Taiwan cybersecurity #Tech News 2026
Penetration Testing Tools
Digital Siege: The "Pre-Positioning" Strategy Fueling 2.6 Million Daily Attacks on Taiwan
In 2025, adversarial syndicates orchestrated a global offensive spanning 178 nations, primarily preying upon governmental architectures, financial institutions,
22 views
Daily Writeups
⤷ Title: The Attribution Dilemma: Inside Palo Alto Networks’ “Shadow Operations” Report and the Unnamed Giant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 16:06:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #attribution #China cyber threat #Cyber Espionage #global infrastructure security #National Security #Palo Alto Networks #Shadow Operations #State_Sponsored Hacking #Tech News 2026 #TGR_STA_1030 #Unit 42
Penetration Testing Tools
The Attribution Dilemma: Inside Palo Alto Networks’ "Shadow Operations" Report and the Unnamed Giant
Palo Alto Networks has conspicuously tempered the rhetoric within its latest dossier regarding an extensive cyber-espionage campaign, eschewing
20 views
Daily Writeups
⤷ Title: Stealth & Persistence: MuddyWater’s New Rust-Based Payload Mimics Cloudflare and Reddit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 00:06:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Genians Report #infosec #Macro_based Attacks #MuddyWater APT #Operation Olalampo #RMM tool abuse #Rust malware #State_Sponsored Espionage #threat intelligence
Daily CyberSecurity
Stealth & Persistence: MuddyWater’s New Rust-Based Payload Mimics Cloudflare and Reddit
Genians report reveals MuddyWater APT's shift to Rust-based malware and RMM tool abuse for long-term espionage across government and critical infrastructure.
24 views
Daily Writeups
⤷ Title: The Chatbot Saboteur: How Claude Was Coerced into a 150GB Heist of Mexican State Intelligence
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 09:17:04 +0000
════════════════════════
⌗ Tags: #Data Leak #Anthropic #ChatGPT #Claude Opus 4.6 #Data Exfiltration #Gambit Security #Jalisco #Mexico Cyberattack #National Digital Agency #OpenAI #Prompt Engineering #State_Sponsored Hacking #Tech News 2026
Penetration Testing Tools
The Chatbot Saboteur: How Claude Was Coerced into a 150GB Heist of Mexican State Intelligence
An unidentified adversary manipulated the Claude chatbot, developed by Anthropic, to orchestrate a series of surgical strikes against
24 views