Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Microsoft Launches MCP Server for AI to Access Official Documentation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 08:00:10 +0000
════════════════════════
⌗ Tags: #Technology #AI Development #API #Developers #documentation #MCP server #Microsoft Learn #visual studio
Daily CyberSecurity
Microsoft Launches MCP Server for AI to Access Official Documentation
Microsoft's new MCP Server allows AI models to directly access official, real-time documentation from Microsoft Learn for enhanced accuracy and efficiency.
14 views
Daily Writeups
⤷ Title: Microsoft Launches “Hey, Copilot” Voice Trigger and Visual AI Context to Transform Windows 11 Assistant
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Oct 2025 01:56:47 +0000
════════════════════════
⌗ Tags: #Windows #AI Assistant #Copilot #Copilot Actions #Microsoft #privacy #Visual AI #Voice Command #Windows 11
Daily CyberSecurity
Microsoft Launches “Hey, Copilot” Voice Trigger and Visual AI Context to Transform Windows 11 Assistant
Microsoft rolls out “Hey, Copilot” voice activation and visual context features in Windows 11. The assistant can now analyze your screen and automate system actions with optional Copilot Actions.
23 views
Daily Writeups
⤷ Title: Security Flaws in VS Extensions Expose Developers to Threats
════════════════════════
𐀪 Author: Valentin Podkamennyi
════════════════════════
ⴵ Time: Sat, 18 Oct 2025 23:05:02 GMT
════════════════════════
⌗ Tags: #visual_studio_code #supply_chain_attack #software_security #developer_security #cybersecurity
Medium
Security Flaws in VS Extensions Expose Developers to Threats
Developers publishing Visual Studio extensions to open marketplaces have inadvertently exposed sensitive access tokens.
14 views
Daily Writeups
⤷ Title: GlassWorm Malware Targets Developers Through OpenVSX Marketplace
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 10:22:48 +0000
════════════════════════
⌗ Tags: #Malware #Security #Blockchain #Cybersecurity #GlassWorm #Marketplace #OpenVSX #Solana #Visual Studio
Hackread
GlassWorm Malware Targets Developers Through OpenVSX Marketplace
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
19 views
Daily Writeups
⤷ Title: Rhadamanthys Infostealer Hides in Ren’Py Visual Novel Games, Deploys Malware via Fake 1 Million Second Loading Screen
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 00:01:24 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Fake Loading Screen #Gaming Malware #Infostealer #Python #Ren'Py #Rhadamanthys #Visual Novel
Daily CyberSecurity
Rhadamanthys Infostealer Hides in Ren’Py Visual Novel Games, Deploys Malware via Fake 1 Million Second Loading Screen
AhnLab exposed Rhadamanthys Infostealer hiding in games built with the Ren'Py engine. It uses a fake 1M-second loading screen to distract victims while injecting malware via a malicious Python script.
15 views
Daily Writeups
⤷ Title: Pinterest Launches AI Assistant: Transforming Search to Personalized Visual Discovery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 01 Nov 2025 08:32:06 +0000
════════════════════════
⌗ Tags: #Technology #AI #discovery #e_commerce #Generative AI #Pinterest #Recommendations #Visual Search
Daily CyberSecurity
Pinterest Launches AI Assistant: Transforming Search to Personalized Visual Discovery
Pinterest Assistant uses AI to analyze saved Pins and Boards, delivering highly personalized visual recommendations for open-ended queries. Now in US beta.
31 views
Daily Writeups
⤷ Title: Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:02:19 +0000
════════════════════════
⌗ Tags: #Malware #Eclipse Foundation #MSRC #Open VSX #security incident #Supply Chain #Token Security #Visual Studio Code #Wiz
Penetration Testing Tools
Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks
Eclipse revoked compromised Open VSX tokens found in repositories. New "ovsxp_" prefix and shorter validity periods will strengthen supply chain security.
5 views
Daily Writeups
⤷ Title: SleepyDuck: The Ethereum-Powered Malware That Redefines Command and Control
════════════════════════
𐀪 Author: C. Oscar Lawshea
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 19:10:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #visual_studio #blockchain #malware #smart_contracts
Medium
SleepyDuck: The Ethereum-Powered Malware That Redefines Command and Control
Introduction
26 views
Daily Writeups
⤷ Title: Google Launches Official Colab Extension for VS Code: Seamless ML Workflow!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:36:36 +0000
════════════════════════
⌗ Tags: #Google #Technology #AI #Cloud Computing #developer tools #Google Colab #GPU #Jupyter Notebooks #machine learning #ML #Visual Studio Code #VS Code
Penetration Testing Tools
Google Launches Official Colab Extension for VS Code: Seamless ML Workflow!
Google's official Colab extension for VS Code brings Colab's cloud resources (GPUs/TPUs) directly into the popular editor for a seamless ML development experience.
24 views
Daily Writeups
⤷ Title: Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 08:11:54 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #malware #OpenVSX #supply chain attack #Unicode Obfuscation #Visual Studio Marketplace #VS Code
Penetration Testing Tools
Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation
The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are now
10 views
Daily Writeups
⤷ Title: Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:13:13 +0000
════════════════════════
⌗ Tags: #Google #AI Agent #CharXiv #Document Understanding #Google Gemini 3 Pro #LaTeX #Multimodal AI #Screen Comprehension #Video Reasoning #Visual Reasoning
Penetration Testing Tools
Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code
Google has unveiled Gemini 3 Pro — a new generation of multimodal models that not only see images
15 views
Daily Writeups
⤷ Title: Malicious Visual Studio Code Extensions Hide Trojan in Fake PNG Files
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 17:12:15 +0000
════════════════════════
⌗ Tags: #Malware #Security #Cyber Attack #Cybersecurity #Developers #ReversingLabs #TROJAN #Visual Studio #VS Code
Hackread
Malicious Visual Studio Code Extensions Hide Trojan in Fake PNG Files
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
39 views
Daily Writeups
⤷ Title: The WhatsApp Worm: “Boto Cor-de-Rosa” Campaign Weaponizes Social Trust
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:21:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Cyber Attacks #Acronis #Astaroth #banking trojan #Boto Cor_de_Rosa #Brazil #Guildma #python #Social Engineering #Visual Basic #WhatsApp
Information Security News
The WhatsApp Worm: “Boto Cor-de-Rosa” Campaign Weaponizes Social Trust
A sophisticated malware campaign has surfaced in Brazil, leveraging the ubiquity of WhatsApp to propagate the Astaroth banking trojan. This delivery vector has proven exceptionally potent given th…
12 views
Daily Writeups
⤷ Title: Game Over: “RenEngine” Malware Hides in Pirated Visual Novels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:22:22 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #Cyber Crime #Data Theft #Game Security #kaspersky #Lumma Stealer #malware #Pirated Games #Ren'Py #RenEngine #Visual Novels
Daily CyberSecurity
Game Over: "RenEngine" Malware Hides in Pirated Visual Novels
Kaspersky warns: Pirated visual novels are spreading RenEngine malware. Attackers use fake downloads to install ACR Stealer. Protect your data now.
19 views
Daily Writeups
⤷ Title: The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:35:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Runner #CVE_2025_65715 #CVE_2025_65717 #data exfiltration #Live Server #Markdown Preview Enhanced #OX Security #rce #Remote Code Execution #Tech News 2026 #Visual Studio Code security #VS Code
Daily CyberSecurity
The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
Critical flaws in Live Server, Code Runner, and more expose 128M+ developers to file theft and remote code execution. Is your VS Code workspace secure?
22 views
Daily Writeups
⤷ Title: The Trust Trap: How Cyber Marauders Are Turning WhatsApp Into a Windows Infection Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 07:52:08 +0000
════════════════════════
⌗ Tags: #Malware #cloud security #Cybersecurity 2026 #Living_off_the_land #malware #Microsoft Defender #phishing #Social Engineering #Visual Basic #WhatsApp #Windows Security
Penetration Testing Tools
The Trust Trap: How Cyber Marauders Are Turning WhatsApp Into a Windows Infection Engine
In the waning days of February 2026, cyber adversaries inaugurated a nascent campaign characterized by an unorthodox stratagem:
6 views
Daily Writeups
⤷ Title: The Long Game: How North Korea’s UNC4736 Spent Six Months Infiltrating Drift for a $285M Payday
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:15:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AppleJeus #Blockchain Security #Crypto Hack 2026 #Drift Protocol #Golden Chollima #North Korea #Social Engineering #Solana #TestFlight Malware #UNC4736 #Visual Studio Code Exploit
Penetration Testing Tools
The Long Game: How North Korea’s UNC4736 Spent Six Months Infiltrating Drift for a $285M Payday
The recent incursion into the cryptocurrency sanctuary Drift, which culminated in the exfiltration of $285 million, has been
19 views
Daily Writeups
⤷ Title: OpenAI Unveils ChatGPT Images 2.0 with Native Reasoning and 2K Precision
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:42:28 +0000
════════════════════════
⌗ Tags: #Technology #2K Resolution #AI Image Generation #ChatGPT Images 2.0 #Codex #gpt_image_2 #Graphic Design 2026 #Multilingual AI #OpenAI #Thinking Mode #Visual Reasoning
Daily CyberSecurity
OpenAI Unveils ChatGPT Images 2.0 with Native Reasoning and 2K Precision
OpenAI launches ChatGPT Images 2.0! Discover the new "Thinking" mode, near-perfect multilingual text rendering, and flexible 2K resolutions for all users.
9 views