Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: “Prefix Swap” Panic: Sophisticated “Jackson” Imposter Infiltrates Maven Central
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:06:49 +0000
════════════════════════
⌗ Tags: #Malware #Aikido Security #cybersecurity #DevOps #Jackson Library #jackson_databind #Java security #malware #Maven Central #org.fasterxml #supply chain attack #Typosquatting
Daily CyberSecurity
"Prefix Swap" Panic: Sophisticated "Jackson" Imposter Infiltrates Maven Central
Aikido Security uncovers the first sophisticated malware on Maven Central: a "prefix swap" attack on the Jackson library used to steal data.
15 views
Daily Writeups
⤷ Title: Fixing the “RAM Tax”: Microsoft’s New Plan to Make File Explorer Search 2X Faster
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:00:48 +0000
════════════════════════
⌗ Tags: #Windows #File Explorer #Microsoft #Optimization #PC Speed #RAM Usage #Search Indexer #System Performance #Windows 11 #Windows 11 Build 26220.7523 #Windows Insider
Daily CyberSecurity
Fixing the "RAM Tax": Microsoft’s New Plan to Make File Explorer Search 2X Faster
Microsoft is testing a major fix for Windows 11 File Explorer that eliminates redundant indexing, slashing RAM and CPU usage for faster file searches.
14 views
Daily Writeups
⤷ Title: The $70 Chip War: Why Google is Firing Execs and Apple is Bracing for a 230% Price Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:00:37 +0000
════════════════════════
⌗ Tags: #Technology #AI Shortage #Apple #Data Center #google #HBM3e #iPhone 17 #iPhone 18 #LPDDR5X #Microsoft #samsung #Semiconductor Crisis #SK Hynix #TPU
Daily CyberSecurity
The $70 Chip War: Why Google is Firing Execs and Apple is Bracing for a 230% Price Surge
Google and Microsoft execs are clashing with South Korean suppliers as a massive HBM shortage forces Apple to face a 230% price hike for iPhone RAM.
21 views
Daily Writeups
⤷ Title: JPGChat | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:53:12 GMT
════════════════════════
⌗ Tags: #tryhackme #python #tryhackme_walkthrough #tryhackme_writeup #python_libraries
Medium
JPGChat | TryHackMe | Walkthrough
Initial Access
27 views
Daily Writeups
⤷ Title: The Unshakable Foundation: How Anycast Keeps the Internet’s Root DNS Alive
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:46:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anycast #BGP Routing #DDoS Mitigation #DNSSEC #internet infrastructure #IP Anycast #NetScout #Network Redundancy #network security #Root DNS
Information Security News
The Unshakable Foundation: How Anycast Keeps the Internet’s Root DNS Alive
The stability and resilience of the internet rest largely on systems that remain invisible to most users. Among these foundational pillars is the root DNS server system—a critical mechanism respon…
26 views
Daily Writeups
⤷ Title: The Enemy Within: Why Hackers are Paying Your Employees $100K to Betray You
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:45:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Check Point #cybercrime #Dark Web #data breach #Employee Monitoring #FinTech Security #Infosec #Insider Threat #SIM Swapping #Social Engineering
Penetration Testing Tools
The Enemy Within: Why Hackers are Paying Your Employees $100K to Betray You
Within cybercriminal circles, interest in recruiting insiders from within companies is surging. Rather than mounting complex external intrusions,
18 views
Daily Writeups
⤷ Title: Operation Sentinel: Interpol Arrests 574 in Sweeping African Cybercrime Bust
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:38:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AFJOC #Africa #BEC #Benin #cybercrime #Digital Extortion #Ghana #Interpol #Nigeria #Operation Sentinel #ransomware #Senegal
Penetration Testing Tools
Operation Sentinel: Interpol Arrests 574 in Sweeping African Cybercrime Bust
A coordinated cybercrime crackdown across Africa has culminated in hundreds of arrests and the seizure of millions of
10 views
Daily Writeups
⤷ Title: NVIDIA’s Christmas Surprise: Open Sourcing CUDA Tile IR to Break the Moat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:29:52 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Apache 2.0 #Blackwell #CUDA 13.1 #CUDA Tile IR #GPU Programming #MLIR #Nvidia #open source #Tensor Cores #ZLUDA
Penetration Testing Tools
NVIDIA’s Christmas Surprise: Open Sourcing CUDA Tile IR to Break the Moat
As a Christmas gift to the open-source community, NVIDIA has released the CUDA Tile IR intermediate representation as
6 views
Daily Writeups
⤷ Title: Beyond Macros: Paper Werewolf’s “EchoGather” Backdoor Exploits Excel XLLs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:28:34 +0000
════════════════════════
⌗ Tags: #Malware #APT #Cyber Espionage #EchoGather #Excel Exploits #GOFFEE #Malware 2025 #Paper Werewolf #phishing #Russia #Ukraine #WinRAR vulnerability #XLL
Penetration Testing Tools
Beyond Macros: Paper Werewolf’s "EchoGather" Backdoor Exploits Excel XLLs
The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks.
10 views
Daily Writeups
⤷ Title: Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #Cyber Espionage #DNS Poisoning #Evasive Panda #Infosec #iQIYI #kaspersky #malware #MgBot #MitM Attack #SohuVA #supply chain attack
Penetration Testing Tools
Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out
8 views
Daily Writeups
⤷ Title: The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:06 +0000
════════════════════════
⌗ Tags: #Information Security #2026 Cyber Risk #AI Espionage #China #CISA #FCC #Federal Budget #Grid Security #Infrastructure Security #One_Time Passwords #Salt Typhoon
Penetration Testing Tools
The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
By 2026, government agencies are finding it increasingly difficult to describe cyber risk with a single word or
10 views
Daily Writeups
⤷ Title: The Breach That Won’t Die: LastPass Vaults Fuel a $35M Crypto Heist 3 Years Later
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:22:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitcoin #Blockchain Analysis #CoinJoin #crypto hack #Data Breach 2025 #Infosec #LastPass #Password Security #Russian Cybercrime #TRM Labs #Wasabi wallet
Penetration Testing Tools
The Breach That Won't Die: LastPass Vaults Fuel a $35M Crypto Heist 3 Years Later
The LastPass breach that occurred back in 2022 continues to generate illicit profits years later. A recent on-chain
10 views
Daily Writeups
⤷ Title: The Editor’s Trap: EmEditor Hijacked to Deploy Stealthy “Google Drive” Infostealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:17:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #browser extension #Cybersecurity 2025 #data breach #EmEditor #Infostealer #malware #PowerShell #QiAnXin #supply chain attack #WALSHAM INVESTMENTS
Penetration Testing Tools
The Editor’s Trap: EmEditor Hijacked to Deploy Stealthy "Google Drive" Infostealer
In late December, an unwelcome supply-chain surprise erupted around the popular text editor EmEditor. According to the developer,
10 views
Daily Writeups
⤷ Title: The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:16:19 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Apache 2.0 #Container Security #DevOps #DHI #Docker #Helm #Kubernetes #open source #SBOM #SLSA #Supply Chain
Penetration Testing Tools
The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog
Docker has announced that its Docker Hardened Images (DHI) are now free and fully open: they can be
23 views
Daily Writeups
⤷ Title: The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:10:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Binance #Blockchain Security #crypto hack #Infosec #PostHog #Recovery Phrase #SlowMist #supply chain attack #Trust Wallet #v2.68.0 #ZachXBT
Penetration Testing Tools
The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
Blockchain investigator ZachXBT reported on December 25 that, over the preceding hours, numerous Trust Wallet users had experienced
12 views
Daily Writeups
⤷ Title: How a Capital Letter Bypasses Fortinet 2FA
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:09:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #2FA Bypass #Active Directory #CVE_2020_12812 #cyber attack #Cybersecurity 2025 #FortiGate #Fortinet #FortiOS #LDAP #MFA #SSL VPN
Penetration Testing Tools
How a Capital Letter Bypasses Fortinet 2FA
Fortinet has warned administrators that real-world attacks are once again exploiting the vulnerability FG-IR-19-283 (CVE-2020-12812), first disclosed in
30 views
Daily Writeups
⤷ Title: The Protector’s Fall: Georgia’s Security Chief Arrested in $35M Global Fraud Scandal
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:05:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Call Center Fraud #Corruption #Empire of Deception #Georgia #Georgian Dream #Grigol Liluashvili #International Crime #Money Laundering #OCCRP #Tbilisi
Penetration Testing Tools
The Protector’s Fall: Georgia’s Security Chief Arrested in $35M Global Fraud Scandal
The former head of Georgia’s State Security Service has become the central figure in a major corruption scandal
14 views
Daily Writeups
⤷ Title: IronJump: The Hardened, Bash-Only Bastion Framework for Zero-Trust Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:52:14 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bash #Bastion Host #Cybersecurity 2026 #DevOps #Hardening #Hybrid Infrastructure #IronJump #Jump Server #OT Security #Reverse Tunnels #ssh
Penetration Testing Tools
IronJump: The Hardened, Bash-Only Bastion Framework for Zero-Trust Control
IronJump is a hardened, cloud-free SSH bastion framework in Bash. Securely manage IT/OT endpoints with strict access controls and automated hardening.
19 views
Daily Writeups
⤷ Title: ️ How I Earned $$$ by Exploiting an XML-RPC SSRF in a WordPress Site
════════════════════════
𐀪 Author: Algo Demo
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:52:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #wordpress #bug_bounty_writeup
Medium
🛡️ How I Earned $$$ by Exploiting an XML-RPC SSRF in a WordPress Site
While testing for common vulnerabilities in WordPress installations, I found an exposed XML-RPC interface that enabled me to perform method…
22 views
Daily Writeups
⤷ Title: One Liners Cheat sheet For Bug bounty Hunter
════════════════════════
𐀪 Author: Mainekhacker
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:56:49 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cheatsheet #cybersecurity #hacking
Medium
One Liners Cheat sheet For Bug bounty Hunter
One-liners are compact commands that combine multiple steps into a single execution
28 views