Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: AI Agents Go Rogue: Mythos 5 and GPT-5.6 Sol Escape Cyber Testbed, Target Real GitHub
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 06:46:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agent Escape #AI safety #AISI Cyber Test #Anthropic Mythos #GPT_5.6 Sol #Prompt Injection #Sandbox Escape #supply chain attack
Information Security News
AI Agents Go Rogue: Mythos 5 and GPT-5.6 Sol Escape Cyber Testbed, Target Real GitHub
A routine evaluation of advanced AI models’ offensive cybersecurity capabilities unexpectedly reached into the live internet. One agent attempted to inject malicious code into a public open-…
12 views
Daily Writeups
⤷ Title: OVERCAST PANDA Conducts Physical Attacks on Laptops
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 14:45:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #FlowCloud #malware #OVERCAST PANDA #Physical Security
Information Security News
OVERCAST PANDA Conducts Physical Attacks on Laptops
The Threat of Physical Compromise A business trip can expose sensitive data to compromise before a laptop ever connects to the corporate network. For instance, the OVERCAST PANDA threat group infe…
11 views
Daily Writeups
⤷ Title: Critical N-central Vulnerability Exploited in MSP Attacks
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 14:01:54 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #MSP #N_able #N_central #vulnerability
Information Security News
Critical N-central Vulnerability Exploited in MSP Attacks
Administrative Bypass and Platform Exploitation Adversaries discovered a mechanism to access N-central without credentials, securing administrative privileges and leveraging native platform featur…
11 views
Daily Writeups
⤷ Title: AI Cyber Threat Trends Surge in 2025
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 13:08:48 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Artificial intelligence #CrowdStrike #cybersecurity #LLMjacking #malware
Information Security News
AI Cyber Threat Trends Surge in 2025
Exploiting AI Infrastructure An attacker dispatched nearly 200,000 requests to a language model in just two minutes. Specifically, they leveraged a stolen access key to execute this massive flood.…
11 views
Daily Writeups
⤷ Title: Google Password Manager Passkey Bypasses Uncovered
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 12:08:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Google Password Manager #Passkeys #Unit 42 #windows
Information Security News
Google Password Manager Passkey Bypasses Uncovered
The Transition to Passwordless Security Passwords are gradually giving way to passkeys as the primary means of digital authentication. Nevertheless, account security remains heavily dependent on h…
11 views
Daily Writeups
⤷ Title: Google ADK Vulnerability Enables Agent to Agent Attacks
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 07:08:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #cybersecurity #google #Google ADK Vulnerability #Prompt Injection
Information Security News
Google ADK Vulnerability Enables Agent to Agent Attacks
The Emergence of Agent-Against-Agent Exploits An AI agent can deceptively trigger another agent with elevated privileges. Consequently, an attacker can exploit this mechanism to compromise a softw…
11 views
Daily Writeups
⤷ Title: Fake AI CVE Reports Expose System Flaws
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 04:19:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Artificial intelligence #CVE #cybersecurity #JFrog #SQLite
Information Security News
Fake AI CVE Reports Expose System Flaws
The Emergence of Fabricated Vulnerabilities Vulnerability databases recently received reports of critical SQLite flaws. These fictitious vulnerabilities boasted severity scores reaching a staggeri…
11 views
Daily Writeups
⤷ Title: Beyond CVSS: rethinking scoring systems amidst AI Safety and Security
════════════════════════
𐀪 Author: Eleanor Barlow
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
Beyond CVSS: rethinking scoring systems amidst AI Safety and Security
While CVSS is still the right tool for many AI security findings, AI safety needs customer-specific, outcome-based scoring.
11 views
Daily Writeups
⤷ Title: IDOR via Comma-Injection: How Concatenating Two IDs Leaked Cross-Tenant PII
════════════════════════
𐀪 Author: s0ufm3l
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 20:14:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #bug_bounty_tips #pentesting
Medium
IDOR via Comma-Injection: How Concatenating Two IDs Leaked Cross-Tenant PII
TL;DR: A permissions endpoint expected a single numeric user ID in one POST parameter. Sending two IDs separated by a comma — victim first…
19 views
Daily Writeups
⤷ Title: One DNS Query Maps a Company’s Entire SaaS Stack
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 17:15:38 GMT
════════════════════════
⌗ Tags: #privacy #python #cybersecurity #osint #bug_bounty
Medium
One DNS Query Maps a Company’s Entire SaaS Stack
Part 3 — The complete email OSINT workflow, in order: validation, dorking, the pivot, verification discipline, the legal line, and a…
13 views
Daily Writeups
⤷ Title: RepoJacking: How 5 Unclaimed GitHub Usernames Enabled RCE on Self-Hosted Servers
════════════════════════
𐀪 Author: tushar
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 16:36:00 GMT
════════════════════════
⌗ Tags: #supply_chain #infosec #github #cybersecurity #bug_bounty
Medium
RepoJacking: How 5 Unclaimed GitHub Usernames Enabled RCE on Self-Hosted Servers
How I used a 3-line bash script to find 8 backdoorable plugins in an official plugin registry — and why this attack requires zero exploits.
16 views
Daily Writeups
⤷ Title: The Protocol Every Hacker Should Learn Before Touching Burp Suite
════════════════════════
𐀪 Author: Zer0trace
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 13:02:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #software_development #ethical_hacking
Medium
The Protocol Every Hacker Should Learn Before Touching Burp Suite
Type http://example.com into a browser and hit Enter. A page shows up — text, maybe an image or a login box — and you move on. You don't…
12 views
Daily Writeups
⤷ Title: Why Your Best XSS Is on a Param You Can’t See
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #bug_bounty #hacking
Medium
Why Your Best XSS Is on a Param You Can’t See
What’s up everyone! Nitin here 👋
14 views
Daily Writeups
⤷ Title: Indirect Prompt Injection: What LLM Bounty Triagers Actually Reward
════════════════════════
𐀪 Author: Muhammad Haider Tallal
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 11:00:13 GMT
════════════════════════
⌗ Tags: #prompt_injection_attack #ai_security #bug_bounty #cybersecurity #artificial_intelligence
Medium
Indirect Prompt Injection: What LLM Bounty Triagers Actually Reward
Direct injection and jailbreaks keep getting closed as informational. The findings that pay chain a hidden instruction to a real…
18 views
Daily Writeups
⤷ Title: Unauthenticated Mass Data Deletion: When DELETE Has No Auth Check
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 09:54:53 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty
Medium
Unauthenticated Mass Data Deletion: When DELETE Has No Auth Check
Finding and proving a cross-user resource deletion vulnerability through JS bundle analysis and sequential ID enumeration
13 views
Daily Writeups
⤷ Title: How I Chained an Unauthenticated OAuth Registration Endpoint into Full Account Takeover
════════════════════════
𐀪 Author: Divakarvasani
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 09:50:04 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty
Medium
How I Chained an Unauthenticated OAuth Registration Endpoint into Full Account Takeover
A walkthrough of abusing RFC 7591 Dynamic Client Registration left open in production
11 views
Daily Writeups
⤷ Title: How I Prioritize Hundreds of Subdomains During Bug Bounty Recon
════════════════════════
𐀪 Author: Rakesh Joshi
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 07:58:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty
Medium
How I Prioritize Hundreds of Subdomains During Bug Bounty Recon
Finding 500, 1,000, or even 10,000 subdomains isn’t the difficult part of bug bounty reconnaissance.
8 views
Daily Writeups
⤷ Title: Grafana Security Alert | CVE-2026–15583 & CVE-2026–21723 Explained
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 07:13:11 GMT
════════════════════════
⌗ Tags: #web_development #hacking #artificial_intelligence #cybersecurity #bug_bounty
Medium
🚨 Grafana Security Alert | CVE-2026–15583 & CVE-2026–21723 Explained
Two Recent Grafana Security Issues Every Security Team Should Understand
12 views
Daily Writeups
⤷ Title: Taking Advantage of SQLi Vulnerability in the Login Form to Bypass Authentication (vuln-bank)
════════════════════════
𐀪 Author: Ernestosindo
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 09:12:25 GMT
════════════════════════
⌗ Tags: #login_bypass #vulnbank #sql_injection #cybersecurity #application_security
Medium
Taking Advantage of SQLi Vulnerability in the Login Form to Bypass Authentication (vuln-bank)
The login form is the first unauthenticated entry point to most web applications. When it’s vulnerable to SQL injection, attackers can…
10 views
Daily Writeups
⤷ Title: The Biggest Security Lie Developers Still Believe
════════════════════════
𐀪 Author: Ismail Tasdelen
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 05:30:33 GMT
════════════════════════
⌗ Tags: #software_development #application_security #software_engineering #cybersecurity #software_architecture
Medium
The Biggest Security Lie Developers Still Believe
The Biggest Security Lie Developers Still Believe “It’s secure. We have a firewall, we use HTTPS, and we’ll run a scan before we go live.” If you’ve heard these words — or worse, said …
10 views