Daily Writeups
@Daily_Writeups
3.47K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.47K subscribers
Daily Writeups
⤷ Title: Uncovering Port Scanning Activity: Network Analysis with Nmap & Wireshark
════════════════════════
𐀪 Author: Nadia Fairuz
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 04:49:39 GMT
════════════════════════
⌗ Tags: #network_security #nmap #wireshark #ethical_hacking #cybersecurity
Medium
Uncovering Port Scanning Activity: Network Analysis with Nmap & Wireshark
Abstract
42 views
Daily Writeups
⤷ Title: Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 13:04:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: systeminformer: monitor system resources, debug software and detect malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:15:43 +0000
════════════════════════
⌗ Tags: #Open Source Tool #systeminformer
Penetration Testing Tools
systeminformer: monitor system resources, debug software and detect malware
systeminformer is a free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware
29 views
Daily Writeups
⤷ Title: The “Covered List” Reprieve: How FCC Notice DA-26-351 Is Reshaping National Network Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:13:39 +0000
════════════════════════
⌗ Tags: #Technology
Penetration Testing Tools
The "Covered List" Reprieve: How FCC Notice DA-26-351 Is Reshaping National Network Security
FCC directive DA-26-351 grants conditional approval for select routers and drones, exempting them from the Covered List. Explore the impact on network security.
13 views
Daily Writeups
⤷ Title: The Open Vault: How a Flaw in the Rhadamanthys Control Panel Saved 70,000 Victims
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:10:08 +0000
════════════════════════
⌗ Tags: #Malware #API Vulnerability #C2 Server #Command and Control #cybersecurity #Infostealer #malware #Rhadamanthys #SANS CTI Summit 2026 #threat intelligence #Victim Notification
Penetration Testing Tools
The Open Vault: How a Flaw in the Rhadamanthys Control Panel Saved 70,000 Victims
A vulnerability within the control panel of the Rhadamanthys infostealer unexpectedly provided a rare opportunity to safeguard victims,
14 views
Daily Writeups
⤷ Title: The $10,000 Pocket Pick: How Hackers Can Drain Your iPhone Without Unlocking It
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:04:04 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple Wallet #Contactless Payment #cybersecurity #Express Transit Mode #Fraud Prevention #iPhone security #Marques Brownlee #NFC Attack #Veritasium #visa
Penetration Testing Tools
The $10,000 Pocket Pick: How Hackers Can Drain Your iPhone Without Unlocking It
A disconcerting narrative regarding the iPhone and the surreptitious theft of funds from a locked device has once
13 views
Daily Writeups
⤷ Title: The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:01:37 +0000
════════════════════════
⌗ Tags: #Malware #3AM Ransomware #Alpine Linux #CitrixBleed 2 #Cyber Security #EDR evasion #GOLD ENCOUNTER #Payouts King #QEMU #ransomware #Sophos #Virtualization Security
Penetration Testing Tools
The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
Ransomware syndicates are increasingly adopting the clandestine practice of concealing their malicious artifacts not merely adjacent to the
13 views
Daily Writeups
⤷ Title: Digital Squatters in the Ivory Tower: How “Hazy Hawk” Hijacked Harvard, MIT, and Stanford Subdomains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:58:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.edu domains #CNAME records #cybersecurity #Dangling DNS #DNS hijacking #DNS Sanitation #Hazy Hawk #Higher Education Security #Infoblox #Subdomain Takeover
Penetration Testing Tools
Digital Squatters in the Ivory Tower: How "Hazy Hawk" Hijacked Harvard, MIT, and Stanford Subdomains
A network of American universities has become ensnared in a pervasive assault that targeted not their instructional infrastructures
12 views
Daily Writeups
⤷ Title: The Malvertising Trap: How the SmokedHam Backdoor Is Opening European Doors for Qilin Ransomware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:57:46 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor Malware #Cloudflare Workers #European Cybersecurity #Malvertising #Orange Cyberdefense #Qilin Ransomware #Remote Desktop Manager #RVTools #SmokedHam #UNC2465
Penetration Testing Tools
The Malvertising Trap: How the SmokedHam Backdoor Is Opening European Doors for Qilin Ransomware
In the incipient months of 2026, search engine advertisements have once again emerged as a convenient veil for
10 views
Daily Writeups
⤷ Title: Cyber-Actors are “Laundering Trust” to Hijack the Global Supply Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:04:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cargo Diversion #Cyber Reconnaissance #Fleet Payments #infosec #Load Board Phishing #powershell #Proofpoint #RMM Abuse #ScreenConnect #Signing_as_a_Service #Transportation Security
Daily CyberSecurity
Cyber-Actors are "Laundering Trust" to Hijack the Global Supply Chain
Proofpoint monitors a 30-day supply chain attack using "signing-as-a-service" to bypass Windows security. Protect your load boards and fleet payments now.
13 views
Daily Writeups
⤷ Title: Critical 9.1 Auth Bypass Hits Budibase Operations Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:02:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Authentication Bypass #Budibase #CVSS 9.1 #DevOps #infosec #Koa Framework #Patch Alert #Regex Security #user_enumeration #Web Security
Daily CyberSecurity
Critical 9.1 Auth Bypass Hits Budibase Operations Platform
A critical 9.1 CVSS flaw in Budibase lets attackers bypass auth via unanchored regex. Protect your user database—update to version 3.35.4 immediately.
10 views
Daily Writeups
⤷ Title: Beyond the Glow: How iOS 27’s “Snow Leopard” Focus and Siri App Will Redefine the iPhone in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:11:54 +0000
════════════════════════
⌗ Tags: #Technology #Apple Intelligence #Apple Rumors #Dynamic Island #Home Screen Customization #iOS 27 #iOS Stability #iPhone 15 Pro #Mark Gurman #Siri Redesign #WWDC 2026
Daily CyberSecurity
Beyond the Glow: How iOS 27’s "Snow Leopard" Focus and Siri App Will Redefine the iPhone in 2026
iOS 27 is coming to WWDC 2026! Discover the new Siri "Search or Ask" interface, the standalone Siri App, and the long-awaited Home Screen Undo functionality.
7 views
Daily Writeups
⤷ Title: The 32GB Ceiling Shatters: Microsoft Finally Ends the “Arbitrary” FAT32 Limit After 30 Years
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:11:29 +0000
════════════════════════
⌗ Tags: #Windows #command_line #Dave Plummer #FAT32 #File Systems #formatting #Microsoft #powershell #Storage Compatibility #Tech History #Windows 11 #Windows Insider
Daily CyberSecurity
The 32GB Ceiling Shatters: Microsoft Finally Ends the "Arbitrary" FAT32 Limit After 30 Years
Microsoft has officially raised the FAT32 formatting limit to 2TB in Windows 11. Say goodbye to the 32GB restriction and third-party tools like Rufus.
8 views
Daily Writeups
⤷ Title: Fabricked: The 100% Deterministic Attack Breaking AMD’s Confidential Computing Vault
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:05:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AMD SEV_SNP #Cloud Security #Confidential Computing #CVE_2025_54510 #EPYC #ETH Zurich #Fabricked #Hardware Security #Hypervisor #Infinity Fabric #infosec #Zen 5
Daily CyberSecurity
Fabricked: The 100% Deterministic Attack Breaking AMD’s Confidential Computing Vault
ETH Zurich researchers unmasked "Fabricked" (CVE-2025-54510), a flaw in AMD Infinity Fabric that bypasses SEV-SNP memory isolation. Patch your firmware today!
18 views
Daily Writeups
⤷ Title: The Forbidden Model: Why the NSA is Secretly Using Anthropic’s Mythos AI Despite a Federal Ban
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:00:10 +0000
════════════════════════
⌗ Tags: #Technology #AI Safeguards #Anthropic #Cyber Warfare #cybersecurity #Dario Amodei #Department of Defense #Federal Ban #Mythos Preview #NSA #supply chain risk #Trump Administration
Daily CyberSecurity
The Forbidden Model: Why the NSA is Secretly Using Anthropic’s Mythos AI Despite a Federal Ban
The NSA is bypassing Trump’s federal ban to use Anthropic’s Mythos Preview. Discover how this restricted "cyber-weapon" AI is transforming U.S. intelligence.
13 views
Daily Writeups
⤷ Title: ⏱️ Race Conditions — Exploiting Timing for Real Impact
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:22:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #linux #bug_bounty #hacking
Medium
⏱️ Race Conditions — Exploiting Timing for Real Impact
✍️ Introduction
11 views
Daily Writeups
⤷ Title: TryHackMe: Enumeration & Brute Force — Complete Walkthrough
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:12:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #cybersecurity #penetration_testing #infosec
Medium
TryHackMe: Enumeration & Brute Force — Complete Walkthrough
Task 1 — Introduction
11 views
Daily Writeups
⤷ Title: The Anatomy of a Real SBOM (CycloneDX Explained)
════════════════════════
𐀪 Author: Dimitar K.
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:38:19 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_engineering #software_development #devsecops
Medium
The Anatomy of a Real SBOM (CycloneDX Explained)
In the previous article, we clarified a common misconception:
11 views
Daily Writeups
⤷ Title: Performans Ölçütlerine Dayalı Gelişmiş Olay Müdahalesi
════════════════════════
𐀪 Author: Perform Yazılım
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:37:14 GMT
════════════════════════
⌗ Tags: #dynatrace #application_security
Medium
Performans Ölçütlerine Dayalı Gelişmiş Olay Müdahalesi
Dynatrace Security Investigator, Dynatrace ile birlikte gelen yerleşik uygulamalardan biridir. Dynatrace Grail® veri havuzuna alınan…
18 views
Daily Writeups
⤷ Title: Vercel got hacked. Here’s what happened.
════════════════════════
𐀪 Author: Rachana Gupta
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:50:30 GMT
════════════════════════
⌗ Tags: #vercel #cybersecurity #hacking #security
Medium
Vercel got hacked. Here’s what happened.
Last weekend, Vercel the company that hosts a huge chunk of the modern web put up a short note on their site saying someone broke into…
11 views