Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: Perimeter Under Siege: 60 Million Attacks Target Industrial Edge Routers in 90-Day Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:40:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Botnets #Chaya_005 #Critical Infrastructure #Forescout #Industrial Routers #OT Security #reconnaissance #RondoDox #ShadowV2 #Sierra Wireless
Penetration Testing Tools
Perimeter Under Siege: 60 Million Attacks Target Industrial Edge Routers in 90-Day Surge
Over a three-month observation period, Forescout researchers recorded more than 60 million malicious requests targeting devices positioned at
21 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:38:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Data Exfiltration #Discord Webhooks #Financial Cybercrime #Info_stealer #ISO Malware #Operation MoneyMount_ISO #Phantom Stealer #phishing campaign #Seqrite Labs #Telegram Bot
Penetration Testing Tools
The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
While monitoring digital threat activity, researchers at Seqrite Labs uncovered a new targeted campaign dubbed Operation MoneyMount-ISO. The
11 views
Daily Writeups
⤷ Title: Ransomware Groups Pivot: The Rise of Weyhro C2, a New Advanced Command-and-Control Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:37:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AMSI Bypass #Command and Control #cybercrime #cybersecurity #evasion techniques #HVNC #Memory_Only Malware #ransomware #threat intelligence #Weyhro C2
Penetration Testing Tools
Ransomware Groups Pivot: The Rise of Weyhro C2, a New Advanced Command-and-Control Platform
Within cybercriminal circles, the emergence of a new command-and-control framework known as Weyhro C2 has been observed. Its
10 views
Daily Writeups
⤷ Title: MFA Under Siege: The Rise of BlackForce, the Sophisticated “Live” Phishing Kit Targeting 11+ Global Brands
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:36:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlackForce #Credential Theft #cybersecurity #Man_in_the_Browser #MFA Bypass #phishing kit #React #Telegram #Zero Trust #Zscaler
Penetration Testing Tools
MFA Under Siege: The Rise of BlackForce, the Sophisticated "Live" Phishing Kit Targeting 11+ Global Brands
Since early August 2025, Zscaler researchers have been tracking the spread of a new phishing kit known as
14 views
Daily Writeups
⤷ Title: Digital Diaries: Is Your Smart Sex Toy Collecting More Data Than You Realize?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:33:58 +0000
════════════════════════
⌗ Tags: #Data Leak #App Permissions #cybersecurity #data brokers #Digital Privacy #IoT Security #Lelo #Satisfyer #Sex Toy Privacy #Smart Tech #We_Vibe
Penetration Testing Tools
Digital Diaries: Is Your Smart Sex Toy Collecting More Data Than You Realize?
Many of us have installed an app “just once”—simply to breeze through registration, dismiss pop-ups, and finally reach
22 views
Daily Writeups
⤷ Title: Privacy Paradox: Freedom Chat Exposed User Phone Numbers and Secret PINs in Major Security Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:31:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Converso #data privacy #Eric Daigle #Freedom Chat #Messaging App #Phone Number Leak #PIN Exposure #security vulnerability #Tanner Haas
Penetration Testing Tools
Privacy Paradox: Freedom Chat Exposed User Phone Numbers and Secret PINs in Major Security Breach
Freedom Chat, an application marketed as a secure messaging platform, has been exposed to serious risk following the
17 views
Daily Writeups
⤷ Title: Intimacy for Ransom: ShinyHunters Extorts PornHub Over 200M Stolen Premium Search & Watch Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:29:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #data breach #Extortion #Mixpanel #PII #PornHub #Premium Users #Search History #ShinyHunters #ShinySpid3r
Penetration Testing Tools
Intimacy for Ransom: ShinyHunters Extorts PornHub Over 200M Stolen Premium Search & Watch Records
PornHub has stated that it has become the target of extortion by the ShinyHunters group, which claims to
19 views
Daily Writeups
⤷ Title: Oil Exports Paralyzed: PDVSA Administrative Collapse Traps 11M Barrels After Ransomware Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:27:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #Crude Oil #cyberattack #Energy Security #Jose Terminal #Oil Exports #PDVSA #ransomware #US_Venezuela Tensions #Venezuela
Penetration Testing Tools
Oil Exports Paralyzed: PDVSA Administrative Collapse Traps 11M Barrels After Ransomware Attack
Venezuela’s state-owned oil company PDVSA has reported a cyberattack on its systems, stressing that oil production and refining
17 views
Daily Writeups
⤷ Title: SoundCloud Data Breach Exposes Millions as Hackers Steal User Emails
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:27:01 +0000
════════════════════════
⌗ Tags: #Data Leak #cybersecurity incident #data breach #DDOS attack #ShinyHunters #SoundCloud #User Data Leak #VPN Issues
Penetration Testing Tools
SoundCloud Data Breach Exposes Millions as Hackers Steal User Emails
The streaming platform SoundCloud has confirmed that recent outages and problems accessing the service via VPN were the
18 views
Daily Writeups
⤷ Title: Final Scan: Google to Shut Down Dark Web Report in 2026, Pivoting to Actionable Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:23:30 +0000
════════════════════════
⌗ Tags: #Google #cybersecurity #Dark Web Report #data breach #google #Google Password Manager #Passkeys #privacy #Retirement #Security Checkup
Penetration Testing Tools
Final Scan: Google to Shut Down Dark Web Report in 2026, Pivoting to Actionable Security
Google is winding down its Dark Web Report tool, which alerted users when their email addresses or other
22 views
Daily Writeups
⤷ Title: The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:22:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #China Espionage #cloud security #CVE_2025_55182 #cybersecurity #Google Threat Intelligence #Next.js #RCE #React Server Components #React2Shell
Penetration Testing Tools
The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale.
37 views
Daily Writeups
⤷ Title: Malware in Subtitles: Scammers Use Leonardo DiCaprio’s “One Battle After Another” to Spread Agent Tesla
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:20:43 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #Bitdefender #Cyber Espionage #Leonardo DiCaprio #malware #One Battle After Another #Remote Access Trojan #Subtitle Exploit #Torrent Security
Penetration Testing Tools
Malware in Subtitles: Scammers Use Leonardo DiCaprio’s "One Battle After Another" to Spread Agent Tesla
One of the year’s most anticipated films starring Leonardo DiCaprio, Battle After Battle, has yet to reach official
20 views
Daily Writeups
⤷ Title: Betrayal of Trust: “Featured” Urban VPN Extension Caught Stealing Private AI Chat Logs from 8M Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:19:43 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Chatbots #Browser Extensions #ChatGPT #Data Exfiltration #data privacy #Google Chrome #Koi Security #malware #microsoft edge #Urban VPN Proxy
Penetration Testing Tools
Betrayal of Trust: "Featured" Urban VPN Extension Caught Stealing Private AI Chat Logs from 8M Users
Browser extensions have long been a familiar way to boost productivity and add useful features, yet another incident
13 views
Daily Writeups
⤷ Title: Unlocking the Speed: Windows Server 2025 Delivers 80% IOPS Boost with New Native NVMe Stack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:18:39 +0000
════════════════════════
⌗ Tags: #Windows #CPU Efficiency #IOPS #IT Infrastructure #KB5066835 #Microsoft #NTFS #NVMe #SCSI #Storage Performance #Windows Server 2025
Penetration Testing Tools
Unlocking the Speed: Windows Server 2025 Delivers 80% IOPS Boost with New Native NVMe Stack
As early as the spring of 2024, Microsoft promised a substantial performance boost for Windows Server 2025 on
11 views
Daily Writeups
⤷ Title: “Too Many Pointless Things”: Torvalds Rejects TSEM Module, Sparking a Linux Security Civil War
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:45:30 +0000
════════════════════════
⌗ Tags: #Linux #Linus Torvalds #Linux Foundation #Linux Kernel #LSM #Open Source Governance #Security Modules #TAB #Trusted Security Event Modeling #TSEM
Daily CyberSecurity
"Too Many Pointless Things": Torvalds Rejects TSEM Module, Sparking a Linux Security Civil War
Linus Torvalds blasts the TSEM security module as "pointless," leading developers to threaten an appeal to the Linux Foundation’s Technical Advisory Board.
13 views
Daily Writeups
⤷ Title: How I hacked a Jenkins endpoint and leaked critical information
════════════════════════
𐀪 Author: محمد بن إبراهيم
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 05:38:31 GMT
════════════════════════
⌗ Tags: #writeup #penetration_testing #hacking #bug_bounty #cybersecurity
Medium
How I hacked a Jenkins endpoint and leaked critical information
بسم الله الرحمن الرحيم
23 views
Daily Writeups
⤷ Title: Cross-Site Scripting Via Unsanitized Input In a PHP Endpoint
════════════════════════
𐀪 Author: Ajay Vardhan
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:39:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #cross_site_scripting #webappsec #reflected_xss #xss_vulnerability
Medium
Cross-Site Scripting Via Unsanitized Input In a PHP Endpoint
Introduction
11 views
Daily Writeups
⤷ Title: Personal Cybersecurity for Techies
════════════════════════
𐀪 Author: Udit
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 05:29:34 GMT
════════════════════════
⌗ Tags: #hacking #digital_life #cybersecurity #technology #privacy
Medium
Personal Cybersecurity for Techies
Why Security by Obscurity may be a good idea for individuals
15 views
Daily Writeups
⤷ Title: Tải Barbarq Mod APK (Vô Hạn Tiền, Max Level) V1.0.1811
════════════════════════
𐀪 Author: Bandisharecx
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:22:39 GMT
════════════════════════
⌗ Tags: #games #bandishare #hacking
Medium
Tải Barbarq Mod APK (Vô Hạn Tiền, Max Level) V1.0.1811
BarbarQ là một tựa game chiến đấu sinh tồn hấp dẫn, kết hợp giữa phong cách chiến đấu PvP và yếu tố xây dựng đội hình. Người chơi sẽ nhập…
11 views
Daily Writeups
⤷ Title: Forensics — Registry Furensics
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 05:55:42 GMT
════════════════════════
⌗ Tags: #tryhackme #advent_of_cyber_2025 #windows_registry #tryhackme_writeup #cybersecurity
Medium
Forensics — Registry Furensics
Learn what the Windows Registry is and how to investigate it.
22 views