Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Phishing Attacks: The Silent Cyber Weapon That Steals Your Life in Minutes.
════════════════════════
𐀪 Author: Mrinal Kumar Chandra
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 21:18:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #technology #ethical_hacking #hacking
Medium
🎣 Phishing Attacks: The Silent Cyber Weapon That Steals Your Life in Minutes.
How fake messages hijack real people and how you can stop them before they strike.
36 views
Daily Writeups
⤷ Title: THM - Valenfind
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 21:10:39 GMT
════════════════════════
⌗ Tags: #security #hacking #technology #cybersecurity #tech
Medium
THM - Valenfind
A writeup for “Valenfind” on TryHackMe.
23 views
Daily Writeups
⤷ Title: THM - Signed Messages
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 21:07:16 GMT
════════════════════════
⌗ Tags: #hacking #technology #security #tech #cybersecurity
Medium
THM - Signed Messages
A writeup for “Signed Messages” on TryHackMe.
29 views
Daily Writeups
⤷ Title: Publisher — TryHackMe
════════════════════════
𐀪 Author: Azzam Mohammed (WHHacker)
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 21:20:53 GMT
════════════════════════
⌗ Tags: #privilege_escalation #penetration_testing #cybersecurity #web_exploitation #tryhackme
Medium
Publisher — TryHackMe
Introduction
30 views
Daily Writeups
⤷ Title: Critical Honeywell CCTV Flaw (CVSS 9.8) Allows Unauthenticated Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:42:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Camera Hacking #CCTV #CISA #CVE_2026_1670 #firmware update #Honeywell #ICSA_26_048_04 #IoT security #Physical Security #Video Surveillance
Daily CyberSecurity
Critical Honeywell CCTV Flaw (CVSS 9.8) Allows Unauthenticated Takeover
CISA warns of Honeywell CCTV flaw CVE-2026-1670. Unauthenticated attackers can reset passwords & hijack feeds. Update firmware immediately.
27 views
Daily Writeups
⤷ Title: New CRESCENTHARVEST Malware Targets Iranian Dissidents
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:40:06 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Acronis TRU #CRESCENTHARVEST #cyber_espionage #DLL Sideloading #Google Signature Abuse #Human Rights #Iran Protests #malware #Remote Access Trojan #surveillance
Daily CyberSecurity
New CRESCENTHARVEST Malware Targets Iranian Dissidents
Acronis uncovers CRESCENTHARVEST, a new spyware targeting Iranian dissidents. Attackers use protest lures & Google DLL sideloading to steal data.
15 views
Daily Writeups
⤷ Title: Fake Jobs, Real Theft: “Contagious Interview” Malware Drains Crypto Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:36:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BeaverTail #Contagious Interview #Cryptocurrency Theft #Invisible Ferret #malware #MetaMask Security #North Korean hackers #Python Malware #social engineering #Web3 security
Daily CyberSecurity
Fake Jobs, Real Theft: "Contagious Interview" Malware Drains Crypto Wallets
North Korean hackers target IT pros with "Contagious Interview" malware. Fake job offers install trojanized MetaMask extensions to steal crypto.
16 views
Daily Writeups
⤷ Title: The “I Paid Twice” Trap: New Booking.com Phishing Kit Targets Hotels & Guests
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:32:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Booking.com #Bridewell #Cyber Crime #financial fraud #Hospitality Security #Hotel Security #phishing #Russian cybercrime #social engineering #Travel Scam
Daily CyberSecurity
The "I Paid Twice" Trap: New Booking.com Phishing Kit Targets Hotels & Guests
Bridewell warns of Russian hackers targeting Booking.com. Phishing kits steal hotel staff creds to scam guests with "I Paid Twice" messages.
18 views
Daily Writeups
⤷ Title: Infected Out of the Box: “Keenadu” Backdoor Hijacks Android at the Firmware Level
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:27:38 +0000
════════════════════════
⌗ Tags: #Malware #Ad Fraud #Android Malware #Cyber Security #Firmware Backdoor #kaspersky #Keenadu #libandroid_runtime #mobile security #supply chain attack #Triada #Zygote Process
Daily CyberSecurity
Infected Out of the Box: "Keenadu" Backdoor Hijacks Android at the Firmware Level
Kaspersky uncovers Keenadu, a firmware-level Android backdoor infecting the Zygote process. This pre-installed malware gives attackers full control.
13 views
Daily Writeups
⤷ Title: PostgreSQL Fixes 5 Security Flaws Including Critical Code Execution Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:20:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_2005 #CVE_2026_2006 #database security #infosec #open_source #Patch Alert #pgcrypto #PostgreSQL #rce
Daily CyberSecurity
PostgreSQL Fixes 5 Security Flaws Including Critical Code Execution Risks
Urgent: PostgreSQL patches 5 flaws, including 3 critical RCEs (CVSS 8.8). Attackers can execute code as OS user via text manipulation. Update v14-18.
16 views
Daily Writeups
⤷ Title: Ghost NICs & Secret Knocks: Dell Zero-Day (CVSS 10) Exploited by UNC6201
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:18:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #CVE_2026_22769 #Dell RecoverPoint #ESXi Security #Ghost NICs #GRIMBOLT #Mandiant #SLAYSTYLE #UNC6201 #Virtualization Security #zero_day
Daily CyberSecurity
Ghost NICs & Secret Knocks: Dell Zero-Day (CVSS 10) Exploited by UNC6201
Mandiant reveals UNC6201 exploiting Dell RecoverPoint zero-day CVE-2026-22769. Attackers use "Ghost NICs" & GRIMBOLT malware. Patch now.
17 views
Daily Writeups
⤷ Title: Hackers Use Jira Notifications to Bypass Spam Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:12:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Atlassian JIRA #Email Security #Enterprise Security #Keitaro TDS #Notification Abuse #phishing #SaaS Security #social engineering #spam campaign #Trend Micro
Daily CyberSecurity
Hackers Use Jira Notifications to Bypass Spam Filters
Hackers abuse Atlassian Jira notifications to bypass spam filters. Trend Micro warns of scams targeting enterprise users via trusted alerts.
24 views
Daily Writeups
⤷ Title: “Dormant” Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:07:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bash Injection #CVE_2026_1281 #CVE_2026_1340 #Ivanti EPMM #mobile security #Nezha Agent #Patch Alert #Remote Code Execution #Unit 42 #zero_day
Daily CyberSecurity
"Dormant" Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
Ivanti EPMM under attack via zero-days CVE-2026-1281 & 1340. Hackers use bash scripts to plant dormant backdoors. Patch immediately.
18 views
Daily Writeups
⤷ Title: CISA Adds 2008 Windows Flaw & Chrome Zero-Day to KEV
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:00:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chrome Security #CISA #CVE_2008_0015 #CVE_2020_7796 #CVE_2024_7694 #CVE_2026_2441 #KEV Catalog #Patch Alert #Windows XP #zero_day
Daily CyberSecurity
CISA Adds 2008 Windows Flaw & Chrome Zero-Day to KEV
CISA adds 4 flaws to KEV: Ancient Windows ActiveX bug (CVE-2008-0015) & new Chrome zero-day (CVE-2026-2441). Patch now to prevent exploitation.
18 views
Daily Writeups
⤷ Title: TryHackMe VulnNet Walkthrough: Complete CTF Writeup & Privilege Escalation Guide
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:06:51 GMT
════════════════════════
⌗ Tags: #penetration_testing #vulnerability #bug_bounty #hacking #ctf
Medium
TryHackMe VulnNet Walkthrough: Complete CTF Writeup & Privilege Escalation Guide
This post is a complete VulnNet walkthrough, aimed at CTF players and OSCP students who want more than just copy‑paste commands.
19 views
Daily Writeups
⤷ Title: sslscan Guide: How to audit SSL/TLS certificates and detect critical vulnerabilities
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #hacking #cybersecurity #technology
Medium
sslscan Guide: How to audit SSL/TLS certificates and detect critical vulnerabilities
Learn how to use sslscan to identify encryption flaws, obsolete protocols, and hidden assets in your web security audits.
24 views
Daily Writeups
⤷ Title: Exam Review: Certified AppSec Practitioner (CAP)
════════════════════════
𐀪 Author: Mrittika Debnath
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 19:06:20 GMT
════════════════════════
⌗ Tags: #information_security #application_security #cybersecurity
Medium
Exam Review: Certified AppSec Practitioner (CAP)
I recently appeared for the Certified AppSec Practitioner (CAP) exam by SecOps Group and successfully passed with a meritorious score of…
32 views
Daily Writeups
⤷ Title: RPC Proxy Injection Part II: Breaking Elastic EDR Telemetry
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 22:58:20 GMT
════════════════════════
⌗ Tags: #pentesting #malware #hacking #red_team #cybersecurity
Medium
RPC Proxy Injection Part II: Breaking Elastic EDR Telemetry
Welcome to this new Medium post, this one it’s the continuation of a previous post from some weeks ago where we leverage the Remote…
30 views
Daily Writeups
⤷ Title: INE-Host & Network Penetration Testing: System-Host Based Attacks CTF 1 by Singkhon
════════════════════════
𐀪 Author: Singkhon K
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 23:44:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #programming #cybersecurity #coding #ctf
Medium
INE-Host & Network Penetration Testing: System-Host Based Attacks CTF 1 by Singkhon
Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…
33 views
Daily Writeups
⤷ Title: Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:47:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #CVE_2025_33239 #CVE_2025_33240 #infosec #LLM Training #machine_learning #Megatron Bridge #nvidia #privilege escalation #Tech News 2026
Daily CyberSecurity
Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
NVIDIA has released a critical software update for its Megatron Bridge, a key component used in training large language models (LLMs). The bulletin discloses two high-severity vulnerabilities hidd…
36 views