Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 23:42:43 +0530
════════════════════════
⌗ Tags: No_Tags
11 views
Daily Writeups
⤷ Title: ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 23:15:44 +0530
════════════════════════
⌗ Tags: No_Tags
10 views
Daily Writeups
⤷ Title: Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 22:31:53 +0530
════════════════════════
⌗ Tags: No_Tags
10 views
Daily Writeups
⤷ Title: Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 21:42:31 +0530
════════════════════════
⌗ Tags: No_Tags
13 views
Daily Writeups
⤷ Title: INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 19:08:22 +0530
════════════════════════
⌗ Tags: No_Tags
11 views
Daily Writeups
⤷ Title: The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 17:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
12 views
Daily Writeups
⤷ Title: Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 16:45:42 +0530
════════════════════════
⌗ Tags: No_Tags
12 views
Daily Writeups
⤷ Title: OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 16:14:05 +0530
════════════════════════
⌗ Tags: No_Tags
10 views
Daily Writeups
⤷ Title: Paying in ADA: Cardano’s vision for the future of payroll
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 17:52:01 +0000
════════════════════════
⌗ Tags: #Crypto #Blockchain #Fintech #ADA #Cardano #Cryptocurrency #Technology
Hackread
Paying in ADA: Cardano’s vision for the future of payroll
Cardano payroll could support ADA salaries and automated payments, but employers must address price volatility, tax obligations, wallet security and compliance.
13 views
Daily Writeups
⤷ Title: Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 15:48:40 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Security #Africa #Cryptomining #Cybersecurity #Fraud #Interpol #Scam #Serengeti #Serengeti III
Hackread
Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown
INTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,929 victims of criminal networks.
10 views
Daily Writeups
⤷ Title: Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:06:41 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Contern, Luxembourg, 22nd October 2026, CyberNewswire
11 views
Daily Writeups
⤷ Title: Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 15:24:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista #CVE_2026_114625 #exploited in the wild #privilege escalation #SD_WAN #sql injection #VeloCloud
Daily CyberSecurity
Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild
TL;DR Arista says attackers are actively exploiting CVE-2026-114625, a critical VeloCloud Orchestrator vulnerability rated CVSS 9.9. The SQL injection flaw lets any logged-in user gain “supe…
10 views
Daily Writeups
⤷ Title: Storm-0940 Uses ARTEX AI Agent to Probe IT and Software Vendors for Supply Chain Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:52:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Agents #ARTEX AI agent #Entra ID #Okta #Password Spraying #Storm_0940 #supply chain attack #Wiz
Daily CyberSecurity
Storm-0940 Uses ARTEX AI Agent to Probe IT and Software Vendors for Supply Chain Access
At a glance Actor Suspected Storm-0940, which Microsoft describes as Chinese state-aligned Activity AI agent-driven reconnaissance, password spraying, and authentication bypass attempts Targets IT…
12 views
Daily Writeups
⤷ Title: Token Replay Attack Hits 79 Organizations Through Stolen Microsoft 365 Sessions
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:44:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AitM Phishing #Conditional Access #Device Code Phishing #Entra ID #Huntress #MFA Bypass #Microsoft 365 BEC #token replay attack
Daily CyberSecurity
Token Replay Attack Hits 79 Organizations Through Stolen Microsoft 365 Sessions
At a glance Actor Unknown operator using rented hosting and VPN infrastructure Activity AiTM phishing, device-code phishing, token replay, and business email compromise Targets Microsoft 365 users…
13 views
Daily Writeups
⤷ Title: Operation Serengeti III Leads to 1,462 Arrests and USD 105 Million Recovered Across Africa
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:30:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Africa cybercrime crackdown #business email compromise #Cybercrime Atlas #Fortinet #INTERPOL #Law Enforcement #Online Fraud #Operation Serengeti III
Daily CyberSecurity
Operation Serengeti III Leads to 1,462 Arrests and USD 105 Million Recovered Across Africa
At a glance Actor Cybercrime networks operating across Africa Activity Cyber-enabled fraud, ransomware, BEC, online scams, and digital extortion Targets 65,929 identified victims, per INTERPOL Sca…
8 views
Daily Writeups
⤷ Title: Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:07:09 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Contern, Luxembourg, 22nd October 2026, CyberNewswire
7 views
Daily Writeups
⤷ Title: cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:46:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_107663 #CVE_2026_109618 #CVE_2026_109619 #PHP2Shell #Web Hosting #WP Toolkit
Daily CyberSecurity
cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
TL;DR cPanel has issued two security updates covering three CVEs. A cPanel PHP update fixes the critical PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, across EasyApache4 builds. Separately…
8 views
Daily Writeups
⤷ Title: QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:03:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #NAS security #PHP2Shell #QNAP #QTS #QuTS hero #Remote Code Execution
Daily CyberSecurity
QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
TL;DR QNAP says the QNAP PHP2Shell vulnerabilities affect QTS, QuTS hero, QuTScloud and several QNAP apps. The two flaws, CVE-2026-109618 and CVE-2026-109619, let unauthenticated attackers run cod…
8 views
Daily Writeups
⤷ Title: EU Opens Booking.com DSA Investigation Over Fake Listings and Phishing Scams
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 10:56:32 +0000
════════════════════════
⌗ Tags: #Technology #Booking.com #Digital Services Act #DSA #European Commission #Online Fraud #phishing #Travel Scams
Daily CyberSecurity
EU Opens Booking.com DSA Investigation Over Fake Listings and Phishing Scams
On October 21, the European Commission opened formal proceedings against Booking.com under the Digital Services Act. The Booking.com DSA investigation will test whether the platform did enough to …
8 views
Daily Writeups
⤷ Title: Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 10:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bind Mount Bypass #container security #CVE_2026_44849 #CVE_2026_44850 #docker #Portainer #privilege escalation
Daily CyberSecurity
Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
TL;DR Portainer has fixed two critical Portainer vulnerabilities, each rated CVSS 9.4, that let standard users mount host files into containers. One extends a bind mount bypass that survived two e…
9 views