Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Online Web Application Penetration Testing Course for Ethical Hackers
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 07:03:56 GMT
════════════════════════
⌗ Tags: #web_application_security #ethical_hacking #penetration_testing #education #website
Medium
Online Web Application Penetration Testing Course for Ethical Hackers
In today’s digital ecosystem, web applications serve as the backbone of business operations, making them prime targets for cybercriminals…
39 views
Daily Writeups
⤷ Title: Advent Of Cyber 2025 : Linux CLI — Shell Bells Kick-Off [Day 1]
════════════════════════
𐀪 Author: Archtrmntor
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 06:06:59 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme_walkthrough #day_1 #tryhackme #tryhackme_writeup
Medium
Advent Of Cyber 2025 : Linux CLI — Shell Bells Kick-Off [Day 1]
Task 1 : Introduction
52 views
Daily Writeups
⤷ Title: GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 14:57:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: OAuthSeeker: Red Team Tool for OAuth Phishing Attacks Against Azure and Office365
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:30:35 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Credential Theft #cybersecurity #Go Binary #Microsoft Azure #Microsoft Graph API #OAuth Phishing #OAuthSeeker #Office365 #Red Team Tool
Penetration Testing Tools
OAuthSeeker: Red Team Tool for OAuth Phishing Attacks Against Azure and Office365
OAuthSeeker is a red team tool for launching OAuth phishing attacks against Azure/Office365, featuring automated token refresh and a customizable frontend.
35 views
Daily Writeups
⤷ Title: Lazarus Exposed: Real-Time Sting Tracks North Korean Hackers Recruiting Remote Employees
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:15:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ANY.RUN #Famous Chollima #Hiring Scam #identity theft #Lazarus Group #North Korea APT #Remote Work Security #Social Engineering
Penetration Testing Tools
Lazarus Exposed: Real-Time Sting Tracks North Korean Hackers Recruiting Remote Employees
A joint investigation by BCA LTD, NorthScan, and ANY.RUN has revealed, in real time, one of North Korea’s
18 views
Daily Writeups
⤷ Title: Rust Crates.io Hack: ‘evm-units’ Package Infected 7K Web3 Developer Workstations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:12:47 +0000
════════════════════════
⌗ Tags: #Malware #Crates.io #EVM #Infostealer #malware #open source #Rust #security #supply chain attack #Uniswap_utils #Web3
Penetration Testing Tools
Rust Crates.io Hack: 'evm-units' Package Infected 7K Web3 Developer Workstations
A new case of software supply-chain compromise has been uncovered on the crates.io platform: a malicious Rust package
7 views
Daily Writeups
⤷ Title: 1 Billion PCs Stranded: Windows 11 Transition Lags, Increasing Security Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:11:19 +0000
════════════════════════
⌗ Tags: #Technology #Windows #Dell Technologies #End of Life #EOL #GPT #OS Transition #privacy #Secure Boot #Security Risk #Windows 10 #Windows 11
Penetration Testing Tools
1 Billion PCs Stranded: Windows 11 Transition Lags, Increasing Security Risk
Windows 10 has now been officially retired from support, yet it still powers nearly a billion personal computers
6 views
Daily Writeups
⤷ Title: Alarm: Google AI Headlines in Discover Feed Distort News and Mislead Readers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:08:50 +0000
════════════════════════
⌗ Tags: #Google #Technology #AI Headlines #Content Distortion #Generative AI #Google Discover #Journalism #Media Ethics #News Feed #Publishers #SEO
Penetration Testing Tools
Alarm: Google AI Headlines in Discover Feed Distort News and Mislead Readers
Google is testing AI-generated headlines in the Discover feed, replacing original news titles with machine-crafted phrasing. The change
7 views
Daily Writeups
⤷ Title: Official EU Subdomain Hacked: Used for SEO Poisoning and Scam Stream Redirects
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:05:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CERT_EU #cybersecurity #Development Server #EMA #Europa.eu #Fraudulent Streaming #SEO Poisoning #Subdomain Compromise #Web Attack
Penetration Testing Tools
Official EU Subdomain Hacked: Used for SEO Poisoning and Scam Stream Redirects
An unexpected attempt to watch the India–Pakistan match led a network researcher to uncover a compromised europa[.]eu subdomain
8 views
Daily Writeups
⤷ Title: Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:04:04 +0000
════════════════════════
⌗ Tags: #Technology #cloud native #Deprecation #EOL #FFmpeg #Ingress NGINX #Kubernetes #open source #reverse proxy #Sustainability
Penetration Testing Tools
Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding
KubeCon in Atlanta delivered a wave of high-profile Kubernetes announcements, yet one of the most consequential developments slipped
8 views
Daily Writeups
⤷ Title: DeFi Exploit: Yearn Finance yETH Pool Hacked for $3 Million via ‘Super-Mint’ Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 07:57:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #DeFi Hack #DeFi Security #Ethereum #exploit #Smart Contract #Stableswap #Tornado Cash #Yearn Finance #yETH
Penetration Testing Tools
DeFi Exploit: Yearn Finance yETH Pool Hacked for $3 Million via 'Super-Mint' Flaw
Yearn Finance has suffered a serious attack on its yETH product, allowing an attacker to siphon off roughly
6 views
Daily Writeups
⤷ Title: AI Agents Exploit Smart Contracts: Devise $4.6M in New Vulnerabilities Autonomously
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 07:56:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agents #Anthropic #Decentralized Finance #DeFi Security #Exploit Development #GPT_5 #LLM Hacking #SCONE_bench #smart contracts
Penetration Testing Tools
AI Agents Exploit Smart Contracts: Devise $4.6M in New Vulnerabilities Autonomously
AI agents have learned to discover and exploit vulnerabilities in smart contracts at a level that now carries
8 views
Daily Writeups
⤷ Title: MAX SEVERITY: Critical Flaw in React Server Allows Unauthenticated RCE
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 07:53:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_55182 #CVSS 10.0 #Deserialization #Flight Protocol #Patch Now #RCE #React Server #Web Infrastructure #zero_day
Penetration Testing Tools
MAX SEVERITY: Critical Flaw in React Server Allows Unauthenticated RCE
Developers and administrators worldwide are scrambling to update their servers after the disclosure of a critical vulnerability in
6 views
Daily Writeups
⤷ Title: Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Fierce Opposition
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 09:13:28 +0000
════════════════════════
⌗ Tags: #Technology #Apple #EFF #India Government #Mandatory App #Policy Reversal #privacy #samsung #Sanchar Saathi #surveillance
Daily CyberSecurity
Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Fierce Opposition
India reversed its mandate to pre-install the Sanchar Saathi app, claiming "voluntary adoption" but following strong resistance from Apple, Samsung, and political opposition.
7 views
Daily Writeups
⤷ Title: AWS Trainium Chip Business Hits Multi-Billion Revenue, Challenging NVIDIA’s Pricing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 09:09:49 +0000
════════════════════════
⌗ Tags: #Technology #AI chip #Andy Jassy #Anthropic #AWS #Cloud Revenue #nvidia #Price_Performance #Project Rainier #Trainium #Trainium3
Daily CyberSecurity
AWS Trainium Chip Business Hits Multi-Billion Revenue, Challenging NVIDIA’s Pricing
AWS CEO Andy Jassy confirms Trainium AI chip revenue hit multi-billions. Over 1M units power 100K enterprises, driven by superior price-performance over GPUs.
10 views
Daily Writeups
⤷ Title: Design Wars: Meta Hires Apple Veteran Alan Dye to Lead New Reality Labs Creative Studio
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 09:05:44 +0000
════════════════════════
⌗ Tags: #Technology #Alan Dye #Apple design #Apple Watch #Creative Studio #Hardware Design #Mark Zuckerberg #Meta #Reality Labs #Tech Defection #Vision Pro
Daily CyberSecurity
Design Wars: Meta Hires Apple Veteran Alan Dye to Lead New Reality Labs Creative Studio
Meta hired Alan Dye, former Apple VP of Human Interface Design (Apple Watch, Vision Pro), to lead a new Creative Studio focused on fusing AI, fashion, and hardware design.
15 views
Daily Writeups
⤷ Title: Misleading AI Headlines: Google Discover Testing Rewrites That Distort News Facts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 09:02:19 +0000
════════════════════════
⌗ Tags: #Technology #AI Headlines #Content Distortion #Generative AI #Google Discover #Mallory Deleon #News Feed #publishing #Search Ecosystem
Daily CyberSecurity
Misleading AI Headlines: Google Discover Testing Rewrites That Distort News Facts
Google is testing AI-rewritten headlines in Discover, which often distort original content (e.g., Steam Machine price) and risk misleading users about news facts.
7 views
Daily Writeups
⤷ Title: Day 3
════════════════════════
𐀪 Author: Oluwadamilare Adeosun
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:38:01 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #infosec #writing #technology #cybersecurity
Medium
Day 3
Today I focused on how Nmap identifies live hosts and uncovers the services running behind open ports. This wasn’t about typing commands…
6 views
Daily Writeups
⤷ Title: Holiday Scams are Surging
════════════════════════
𐀪 Author: Century Solutions Group
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 09:41:46 GMT
════════════════════════
⌗ Tags: #delivery_tracking_scams #holiday_scams #it_msp #cybersecurity
Medium
Holiday Scams are Surging
Holiday scams are surging — 55% of people get weekly scam texts, and younger shoppers are the most vulnerable. Delivery-tracking scams +…
6 views
Daily Writeups
⤷ Title: Разследване на фишинг атака към български държавен орган
════════════════════════
𐀪 Author: Georgi Hadzhinikiforov
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 09:38:31 GMT
════════════════════════
⌗ Tags: #bulgaria #cybersecurity #trojan #investigation #phishing
Medium
Разследване на фишинг атака към български държавен орган
LinkedIn
14 views
Daily Writeups
⤷ Title: Investigating Tor Usage in Cybercrime Cases: A Forensic Workflow
════════════════════════
𐀪 Author: Wehire Laumech Beturaniza
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 09:38:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #tor
Medium
Investigating Tor Usage in Cybercrime Cases: A Forensic Workflow
Introduction
8 views