Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Ethical Hacking Skills for Strong Cybersecurity Foundations
════════════════════════
𐀪 Author: Adhiraj Kasabe
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:50:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking_course #ethical_hacking #ethical_hacking_training #artificial_intelligence #ai
Medium
Ethical Hacking Skills for Strong Cybersecurity Foundations
The Ethical Hacking Foundation Certification kinda helps professionals pick up the essential knowledge to spot vulnerabilities, make sense…
34 views
Daily Writeups
⤷ Title: Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 20 May 2026 10:42:06 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:48:05 +0000
════════════════════════
⌗ Tags: #Linux #AI Bug Reports #Automated Vulnerability Submissions #Bug Regression #Code Review Fatigue #DevSecOps 2026 #Drive_By Patching #Linus Torvalds #Linux Kernel Development #Open Source Maintainers #Security Mailing List Bottleneck
Daily CyberSecurity
Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
The integration of automated artificial intelligence workflows engineered to unearth and submit security vulnerabilities has begun to heavily impact the Linux Kernel development ecosystem. In his …
21 views
Daily Writeups
⤷ Title: Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:58 +0000
════════════════════════
⌗ Tags: #Malware #AppleSeed #cyber_espionage #HelloDoor #infosec #Kimsuky #MemLoad #PebbleDash #Rust Backdoor #threat intelligence #TryCloudflare #VSCode Remote Tunneling
Daily CyberSecurity
Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
Kimsuky APT evolves its arsenal with "HelloDoor," a new Rust-based backdoor, and hijacks trusted VSCode Remote Tunneling to bypass corporate firewalls.
14 views
Daily Writeups
⤷ Title: Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:43:11 +0000
════════════════════════
⌗ Tags: #Technology #Automated Enforcement Algorithms #Cloud Concentration Risk #Google Cloud Account Suspension #Infrastructure Automation Failure #Multi_Cloud Redundancy #Non_Enterprise Build Throttle #Railway Outage 2026 #Site Reliability Engineering #Unilateral Cloud Termination #UniSuper GCP Incident
Daily CyberSecurity
Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
Developer cloud platform Railway suffers a widespread, catastrophic infrastructure outage after Google Cloud abruptly suspends its corporate account.
12 views
Daily Writeups
⤷ Title: Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:39:53 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Harvesting Payload #Cryptographic Token Rotation #Developer Endpoint Isolation #Forensic Log Analysis #GitHub Copilot Leak #GitHub Enterprise Server #GitHub Source Code Breach #supply chain attack #TeamPCP Syndicate #VS Code Extension Worm
Daily CyberSecurity
Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
GitHub confirms a perimeter breach by TeamPCP. An administrative VS Code extension supply-chain worm exfiltrated 3,800 proprietary core source repositories.
11 views
Daily Writeups
⤷ Title: Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:13:42 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #Cyber Security #defense evasion #infosec #Malware Analysis #Point Wild #PyInstaller Loader #rat #Remote Access Trojan #VirtualProtect #XWorm
Daily CyberSecurity
Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
Point Wild exposes a sophisticated PyInstaller loader using in-memory AMSI patching and SHA-512 decryption to drop XWorm V7.4. Patch now!
15 views
Daily Writeups
⤷ Title: How I Discovered Account Takeover (ATO) via XSS and Open redirect
════════════════════════
𐀪 Author: JEETPAL
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty_writeup
Medium
How I Discovered Account Takeover (ATO) via XSS and Open redirect
Hello Everyone,
15 views
Daily Writeups
⤷ Title: How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
════════════════════════
𐀪 Author: PradyumnTiwareNexus
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:27:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #web_security #infosec
Medium
🔐 How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
👋 Hey Hackers!
13 views
Daily Writeups
⤷ Title: The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
════════════════════════
𐀪 Author: Vijay Kumar Gupta
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:46:00 GMT
════════════════════════
⌗ Tags: #life #hacking #careers #cybersecurity #non_tech
Medium
The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
Or: How I Learned to Say No (And Why You Should Too)
15 views
Daily Writeups
⤷ Title: Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
════════════════════════
𐀪 Author: Yuvraj Singh
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:29:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #email_security #vulnerability #tech_news_today
Medium
Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
CVE-2026–42945 is live in the wild. SEPPMail has a CVSS 10.0 flaw. If either is in your stack, this is your five-alarm briefing.
20 views
Daily Writeups
⤷ Title: How Modern Scam Call Centers Operate — Inside The Scam Industry (Part 1)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:37:51 GMT
════════════════════════
⌗ Tags: #security #make_money_online #hacking #cybersecurity #social_media
Medium
📞 How Modern Scam Call Centers Operate — Inside The Scam Industry (Part 1)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
9 views
Daily Writeups
⤷ Title: Active Directory Basics
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:24:44 GMT
════════════════════════
⌗ Tags: #infosec #web_development #cybersecurity #ethical_hacking #cyber_security_awareness
Medium
Active Directory Basics
Introduction
10 views
Daily Writeups
⤷ Title: Evolution of Cloud
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:22:23 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #web_development #cybersecurity #cloud_computing #infosec
Medium
Evolution of Cloud
Cloud Benefits and Characteristics
22 views
Daily Writeups
⤷ Title: [CopyFail and DirtyFrag] — Privilege Escalation on Ubuntu
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:14:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #copyfail #ubuntu #linux_priv_esc #dirty_frag
Medium
[CopyFail and DirtyFrag] — Privilege Escalation on Ubuntu
Two kernel exploits. One root shell. No race conditions, no disk traces, no way your file integrity checks will catch it.
35 views
Daily Writeups
⤷ Title: Connecting Burp Suite with GitHub Copilot via MCP Server
════════════════════════
𐀪 Author: Albert
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:02:28 GMT
════════════════════════
⌗ Tags: #penetration_testing #generative_ai_tools #burpsuite #mcp_server #github_copilot
Medium
Connecting Burp Suite with GitHub Copilot via MCP Server
How to bring AI directly into your web vulnerability analysis workflow.
44 views
Daily Writeups
⤷ Title: Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:04:06 +0000
════════════════════════
⌗ Tags: #Malware #@antv Malicious Packages #atool Maintainer Account #CI/CD Secret Stealer #Claude Code Backdoor #OIDC Token Hijacking #Session P2P Network #Shai_Hulud npm Attack #Sigstore Provenance Forgery #Software Supply Chain Worm #Visual Studio Code Malware
Penetration Testing Tools
Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
The npm ecosystem has been subjected to a massive, highly coordinated supply-chain assault. Within a compressed one-hour envelope,
36 views
Daily Writeups
⤷ Title: Bypassing the Guardrails: New “DirtyDecrypt” Linux Flaw Overwrites Root Files in Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:02:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #CONFIG_RXGK Kernel Parameter #Container Escape Exploit #Copy_on_Write Bypass #CVE_2026_31635 #Fedora Arch Linux Vulnerable #Linux DirtyDecrypt Vulnerability #Linux Kernel Sasha Levin #RxGK Page Cache Corruption #rxgk_decrypt_skb Local Privilege Escalation #Zellic Threat Research
Penetration Testing Tools
Bypassing the Guardrails: New "DirtyDecrypt" Linux Flaw Overwrites Root Files in Memory
The Linux ecosystem has been destabilized by successive operational waves for several weeks; scarcely had the industry turbulence
21 views
Daily Writeups
⤷ Title: Under the PyInstaller Mask: Point Wild Exposes XWorm V7.4 Stealth Loader and AMSI Bypass
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:49:06 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reflection Plugins #AES Encrypted C2 Configuration #AMSI Bypass In_Memory Execution #Fileless Remote Administrative Trojan #Hidden System File Attributes #Point Wild Threat Intelligence #PyInstaller Loader Forensic #Runtime Windows API Resolving #Win.Kernel_Svc_AJ8iOw.exe #XWorm V7.4 Malware
Information Security News
Under the PyInstaller Mask: Point Wild Exposes XWorm V7.4 Stealth Loader and AMSI Bypass - Information Security News
Threat intelligence architects at Point Wild have dissectively mapped a contemporary XWorm V7.4 infection pipeline, demonstrating how a seemingly innocuous, Python-based installation package systematically mutates into a formidable remote administrative implant.…
26 views
Daily Writeups
⤷ Title: China-Linked Hackers Deploy “TencShell” Backdoor via Faux Web Font Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:45:33 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL Threat Research #Donut Shellcode In_Memory Execution #Fileless Position_Independent Code #Rshell Framework Customization #State_Sponsored Cyber Espionage #Tencent API Impersonation #TencShell Backdoor Malware #Third_Party Identity Compromise #Web Font Masquerading #Windows Registry Persistence
Information Security News
China-Linked Hackers Deploy "TencShell" Backdoor via Faux Web Font Files - Information Security News
In April 2026, threat intelligence specialists at Cato CTRL neutralized a sophisticated network intrusion attempt targeting a major multinational manufacturing enterprise. The adversaries sought to establish a persistent foothold within the corporate perimeter…
21 views