Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 17:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
59 views
Daily Writeups
⤷ Title: New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 16:34:00 +0530
════════════════════════
⌗ Tags: No_Tags
59 views
Daily Writeups
⤷ Title: Grafana Patches Critical SCIM Flaw (CVE-2025-41115, CVSS 10) Allowing Privilege Escalation and User Impersonation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 11:09:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_41115 #CVSS 10.0 #Grafana #Grafana Enterprise #privilege escalation #SCIM #security advisory
Daily CyberSecurity
Grafana Patches Critical SCIM Flaw (CVE-2025-41115, CVSS 10) Allowing Privilege Escalation and User Impersonation
Grafana Enterprise released emergency patches for CVE-2025-41115 (CVSS 10.0), a critical flaw in SCIM provisioning that could allow attackers to impersonate high-privilege users.
63 views
Daily Writeups
⤷ Title: ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 17:59:00 +0530
════════════════════════
⌗ Tags: No_Tags
50 views
Daily Writeups
⤷ Title: New Eternidade Stealer Uses WhatsApp to Steal Banking Data
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 13:40:30 +0000
════════════════════════
⌗ Tags: #Malware #Security #Banking #Brazil #Eternidade Stealer #Fraud #Scam #SMSishing #SpiderLabs #TROJAN #Trustwave #WhatsApp
Hackread
New Eternidade Stealer Uses WhatsApp to Steal Banking Data
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
56 views
Daily Writeups
⤷ Title: Comet Browser Flaw Lets Hidden API Run Commands on Users’ Devices
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 12:30:57 +0000
════════════════════════
⌗ Tags: #Security #AI #Artificial Intelligence #Browser #Comet Browser #Cybersecurity #MITM #Perplexity #SquareX #Vulnerability #XSS
Hackread
Comet Browser Flaw Lets Hidden API Run Commands on Users’ Devices
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
29 views
Daily Writeups
⤷ Title: COMmander: Lightweight C# Tool Boosts Defensive RPC/COM Telemetry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 10:15:28 +0000
════════════════════════
⌗ Tags: #Open Source Tool #C++ #COM #Commander #cyber defense #ETW #RPC #security tool #Telemetry #Threat Detection #windows
Penetration Testing Tools
COMmander: Lightweight C# Tool Boosts Defensive RPC/COM Telemetry
COMmander is a new, lightweight C# tool that leverages the Windows RPC ETW provider to enrich defensive telemetry, enabling granular detection of RPC/COM events.
23 views
Daily Writeups
⤷ Title: Manus Unveils Browser Operator: AI Automation Inside Your Local Chrome/Edge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 10:07:08 +0000
════════════════════════
⌗ Tags: #Technology #AI Automation #browser extension #Browser Operator #chrome #Edge #Local Access #Manus #Productivity #Web Workflow
Penetration Testing Tools
Manus Unveils Browser Operator: AI Automation Inside Your Local Chrome/Edge
Manus's new Browser Operator extension runs AI automation tasks directly in your local browser (Chrome/Edge), leveraging active logins and cookies for paid services.
24 views
Daily Writeups
⤷ Title: DOJ Warrants Target Starlink Terminals to Disable $400M Southeast Asia Fraud Hubs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 10:04:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Scam #cybercrime #DOJ #Myanmar #Online Fraud #pig butchering #Satellite Internet #Southeast Asia #SpaceX #Starlink
Penetration Testing Tools
DOJ Warrants Target Starlink Terminals to Disable $400M Southeast Asia Fraud Hubs
The DOJ issued warrants to disable Starlink terminals in Myanmar, used by fraud hubs to evade oversight and run crypto scams that have victimized U.S. citizens.
19 views
Daily Writeups
⤷ Title: Dutch Police Seize 250 Servers: Massive Shadow Hosting Operation Shut Down
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 10:04:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anonymous Hosting #BOTNET #cybercrime #Digital Crime #Netherlands #police operation #ransomware #Shadow Hosting #Takedown
Penetration Testing Tools
Dutch Police Seize 250 Servers: Massive Shadow Hosting Operation Shut Down
A major police operation in the Netherlands seized 250 servers, successfully shutting down a massive, anonymous "shadow hosting" provider used for ransomware and botnet attacks.
29 views
Daily Writeups
⤷ Title: CPython Proposes Adopting Rust for Core Modules: Boosting Python Memory Safety
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:53:39 +0000
════════════════════════
⌗ Tags: #Technology #CPython #Free_Threading #Memory Safety #performance #Pre_PEP #Programming Language #PyO3 #python #Rust
Penetration Testing Tools
CPython Proposes Adopting Rust for Core Modules: Boosting Python Memory Safety
CPython developers propose integrating Rust into the core codebase to dramatically improve memory safety and performance, especially for free-threaded Python.
19 views
Daily Writeups
⤷ Title: Germany Approves Sweeping NIS2 Law: Stricter Cyber Rules for Critical Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:52:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #BSI #Bundestag #Critical Infrastructure #cybersecurity #EU Directive #Germany #Information Security #NIS2 #Risk Management
Penetration Testing Tools
Germany Approves Sweeping NIS2 Law: Stricter Cyber Rules for Critical Infrastructure
Germany approved a law implementing the EU's NIS2 directive, imposing stricter reporting and risk management rules on critical sectors and expanding BSI's authority.
15 views
Daily Writeups
⤷ Title: TP-Link Sues Netgear for $1B Over ‘False’ Chinese Hacking Allegations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:50:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Business News #Corporate Feud #Hacking Allegations #lawsuit #National Security #Netgear #router #TP_Link
Penetration Testing Tools
TP-Link Sues Netgear for $1B Over 'False' Chinese Hacking Allegations
TP-Link is suing competitor Netgear for over $1 billion, claiming Netgear orchestrated a smear campaign linking its routers to Chinese government cyberattacks.
17 views
Daily Writeups
⤷ Title: US Cyber Command & Twenty Forge AI Infrastructure for Automated Offensive War
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:48:05 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #Cyber Automation #cyber warfare #In_Q_Tel #Military AI #Offensive Cyber #Pentagon #Twenty #US Cyber Command
Penetration Testing Tools
US Cyber Command & Twenty Forge AI Infrastructure for Automated Offensive War
The US is rapidly building an AI-driven offensive cyber infrastructure. Startup Twenty secured millions in contracts to automate and parallelize attacks with minimal human oversight.
14 views
Daily Writeups
⤷ Title: Apple Tightens AI Privacy: Apps Must Get Consent to Share Data with External LLMs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:44:33 +0000
════════════════════════
⌗ Tags: #Apple #AI #App Store #Developer Rules #GDPR #Gemini #LLM #Mobile Apps #Privacy Policy #Siri #user data
Penetration Testing Tools
Apple Tightens AI Privacy: Apps Must Get Consent to Share Data with External LLMs
Apple updated its App Store rules, now requiring apps to obtain explicit user consent before sending personal data to external AI platforms like large language models.
19 views
Daily Writeups
⤷ Title: UK Plan to Ban Ransom Payments Faces Backlash from Critical Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:42:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Business Risk #Critical Infrastructure #Cyber Security #Cybersecurity Policy #Home Office #Ransom Payments Ban #ransomware #UK
Penetration Testing Tools
UK Plan to Ban Ransom Payments Faces Backlash from Critical Infrastructure
The UK Home Office plan to ban ransomware payments by critical infrastructure operators faces intense pushback from businesses worried it will jeopardize essential services.
20 views
Daily Writeups
⤷ Title: Major Windows Upgrade: AI Agent Isolation, Quantum Crypto, and Cloud Resilience
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:39:37 +0000
════════════════════════
⌗ Tags: #Microsoft #Windows #AI Agents #Hardware Encryption #IT Administration #Post_Quantum Cryptography #security #windows #WinRE #Zero Trust DNS
Penetration Testing Tools
Major Windows Upgrade: AI Agent Isolation, Quantum Crypto, and Cloud Resilience
Windows is receiving a massive security overhaul: isolated environments for AI agents, hardware-accelerated crypto, Zero Trust DNS, and cloud-based recovery tools.
16 views
Daily Writeups
⤷ Title: Google Launches Official Colab Extension for VS Code: Seamless ML Workflow!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:36:36 +0000
════════════════════════
⌗ Tags: #Google #Technology #AI #Cloud Computing #developer tools #Google Colab #GPU #Jupyter Notebooks #machine learning #ML #Visual Studio Code #VS Code
Penetration Testing Tools
Google Launches Official Colab Extension for VS Code: Seamless ML Workflow!
Google's official Colab extension for VS Code brings Colab's cloud resources (GPUs/TPUs) directly into the popular editor for a seamless ML development experience.
24 views
Daily Writeups
⤷ Title: WhatsApp Flaw Exposes 3.5 Billion Users: Scrapers Mapped Profiles Worldwide
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:35:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Contact Lookup #data scraping #Meta #Phone Number Leak #Privacy Flaw #Rate Limit #Vienna University #vulnerability #WhatsApp
Penetration Testing Tools
WhatsApp Flaw Exposes 3.5 Billion Users: Scrapers Mapped Profiles Worldwide
A design flaw in WhatsApp's contact-lookup feature allowed researchers to scrape 3.5 billion user profiles globally, including photos and statuses, with no rate limits.
27 views
Daily Writeups
⤷ Title: Hackers Claim Under Armour Breach, Stealing 343GB of Customer & Employee Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:27:28 +0000
════════════════════════
⌗ Tags: #Data Leak #Customer Data #cyber attack #data breach #Employee Data #Everest Group #ransomware #Retail Security #Threat Group #Under Armour
Penetration Testing Tools
Hackers Claim Under Armour Breach, Stealing 343GB of Customer & Employee Data
The Everest hacking group claims to have stolen 343GB of sensitive customer records and internal data from Under Armour. The company has not yet confirmed the breach.
37 views
Daily Writeups
⤷ Title: Somalia Data Breach: Electronic Visa System Hacked, 35K Applicants’ Data at Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:25:04 +0000
════════════════════════
⌗ Tags: #Data Leak #cyber attack #data breach #Electronic Visa #immigration #National Security #personal data #Somalia #UK Warning #US Warning
Penetration Testing Tools
Somalia Data Breach: Electronic Visa System Hacked, 35K Applicants’ Data at Risk
Somalia's electronic visa system was breached, exposing the data of over 35,000 applicants. The government has reshuffled leadership amid US/UK security warnings.
55 views