Daily Writeups
@Daily_Writeups
3.51K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.51K subscribers
Daily Writeups
⤷ Title: The Evolutionary Stratagem of Void Dokkaebi: Analyzing the Cythonized Mutation of InvisibleFerret
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:05:06 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail browser extension injection #code assessment social engineering #compiled pyd and so binaries #cryptocurrency wallet exfiltration #Famous Chollima developer target #InvisibleFerret Cython backdoor #Manifest V2 browser downgrade #North Korean APT defense #TrendAI threat research #Void Dokkaebi malware evasion
Information Security News
Void Dokkaebi Malware Evasion: Cython Backend Defeats Detection
North Korea's Void Dokkaebi campaign uses Cython to compile the InvisibleFerret backdoor into binary files, successfully bypassing legacy Python security rules.
17 views
Daily Writeups
⤷ Title: New Tampered Chef Malware Campaigns Discovered in Productivity Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing #EvilAI #Info_Stealers #Malvertising #Productivity Software #Tampered Chef #threat intelligence
Daily CyberSecurity
New Tampered Chef Malware Campaigns Discovered in Productivity Software
Researchers uncover the Tampered Chef malware cluster disguised as PDF editors and tools. Learn how these stealthy threats bypass corporate defenses.
15 views
Daily Writeups
⤷ Title: CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
════════════════════════
𐀪 Author: phantom_hat
════════════════════════
ⴵ Time: Wed, 27 May 2026 23:02:16 GMT
════════════════════════
⌗ Tags: #vulnerability_research #command_injection #rce #vulnerability #code_review
Medium
CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
﷽
28 views
Daily Writeups
⤷ Title: New GitLab Security Updates Fix Critical Flaws in Duo AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 00:14:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Security #CVE_2026_4868 #Duo AI Workflows #GitLab CE #GitLab EE #GitLab Patch #SecOps
Daily CyberSecurity
New GitLab Security Updates Fix Critical Flaws in Duo AI
The latest GitLab security updates address high-severity bugs. Download the patch to ensure the Duo AI flaw fixed protects your DevSecOps pipeline.
15 views
Daily Writeups
⤷ Title: Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 30 May 2026 01:44:11 +0000
════════════════════════
⌗ Tags: #Malware #Code Security #dependency confusion #DevSecOps #JavaScript dropper #Microsoft Threat Intelligence #npm registry #supply chain attack
Daily CyberSecurity
Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems
Microsoft uncovers a massive npm dependency confusion attack targeting enterprise infrastructure. Learn how these malicious packages discovered run code.
20 views
Daily Writeups
⤷ Title: Fake RVTools Installer Deploys Modular Python RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:01:03 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing Abuse #Modular Python RAT #RVTools Scam #Sectigo Certificate #VBScript Obfuscation
Daily CyberSecurity
Fake RVTools Installer Deploys Modular Python RAT
A fake RVTools installer campaign distributes a modular Python RAT. Learn how this malware uses signed certificates to evade security controls.
20 views
Daily Writeups
⤷ Title: Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 06:20:43 +0000
════════════════════════
⌗ Tags: #Data Leak #Malware #Browser Extensions #ChatGPT Security #Claude #code_injection #data exfiltration #google chrome #Infosec Report #Malicious AI Extensions
Daily CyberSecurity
Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
The Dangerous Scope of Browser Data Exfiltration Artificial Intelligence has rapidly transformed how we work and communicate every single day. Therefore, millions of professionals now rely on auto…
10 views
Daily Writeups
⤷ Title: Sovereign Ascent: Anthropic Deploys Flagship Fable 5 Architecture
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 04:30:47 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic Fable 5 model #Claude subscription promo #code synthesis app #Mythos architecture update #Project Glasswing tech #vision processing tool
Daily CyberSecurity
Sovereign Ascent: Anthropic Deploys Flagship Fable 5 Architecture
Discover the new Anthropic Fable 5 model family. Learn how its advanced vision layer reverse-engineers code from pixels with zero cap access.
10 views
Daily Writeups
⤷ Title: You’re Probably Overpaying for the Tokens That Find Your Vulnerabilities
════════════════════════
𐀪 Author: Jost Faganel
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #anthropic_claude #frontier_models #application_security #agentic_workflow #code_vulnerability
Medium
You’re Probably Overpaying for the Tokens That Find Your Vulnerabilities
The most expensive, most sophisticated security model on our benchmark finished tenth. A model that costs a dollar to run beat it. Here’s…
13 views
Daily Writeups
⤷ Title: NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 01:01:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #Command Injection #CVE_2026_24155 #CVE_2026_24228 #CVE_2026_24252 #Deserialization #NeMo Framework #nvidia
Daily CyberSecurity
NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
NVIDIA has issued an urgent fix for its NeMo Framework, the popular open-source toolkit for building generative AI models. The update tackles an NVIDIA NeMo vulnerability set spanning three separa…
14 views