Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Geo-Blocking Features in Next-Gen Firewalls: Why They Matter
════════════════════════
𐀪 Author: Akshay Chauhan
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:02:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #firewall #information_security #safeaeon
Medium
Geo-Blocking Features in Next-Gen Firewalls: Why They Matter
Some of the most effective cybersecurity decisions are also the simplest. Geo-blocking, a feature in next-generation firewalls (NGFWs), is…
25 views
Daily Writeups
⤷ Title: Blockchain Security Challenges and the Future with Quantum Computers
════════════════════════
𐀪 Author: Rodrigo M
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 22:42:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #quantum_computing #blockchain
Medium
Blockchain Security Challenges and the Future with Quantum Computers
Since Bitcoin burst onto the scene in 2009, blockchain technology has been a game-changer, offering a decentralized, transparent, and…
20 views
Daily Writeups
⤷ Title: Building an Effective Patch Management Strategy
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 22:16:56 GMT
════════════════════════
⌗ Tags: #careers #technology #programming #security #cybersecurity
Medium
Building an Effective Patch Management Strategy
Proactively Secure Your Infrastructure One Update at a Time
22 views
Daily Writeups
⤷ Title: Forged in Privacy, Sharpened by Cryptography: Why We Built Pinaka Shield
════════════════════════
𐀪 Author: Pinaka Shield
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 22:14:54 GMT
════════════════════════
⌗ Tags: #digital_transformation #european_union #cybersecurity #cryptography #startup
Medium
Forged in Privacy, Sharpened by Cryptography: Why We Built Pinaka Shield
In an era where data fuels economies and breaches dominate headlines, privacy isn’t just a technical requirement — it’s a human right.
35 views
Daily Writeups
⤷ Title: IPED Digital Forensic Tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:00:01 +0000
════════════════════════
⌗ Tags: #Data Forensics #Digital Forensic Tool
Penetration Testing Tools
IPED Digital Forensic Tool
IPED Digital Forensic ToolI is open-source software that can be used to process and analyze digital evidence, often seized at crime scenes
30 views
Daily Writeups
⤷ Title: XnlReveal: Chrome browser extension to show alerts for relfected query params, show hidden elements
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:25:31 +0000
════════════════════════
⌗ Tags: #Web AppSec #Chrome extension #Wayback Archive
Penetration Testing Tools
XnlReveal: Chrome browser extension to show alerts for relfected query params, show hidden elements
This is a Chrome Extension that can do the following: Show an alert for any query parameters that are reflected.
24 views
Daily Writeups
⤷ Title: Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:59:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_21605 #Denial of Service #dos #Redis #security advisory
Daily CyberSecurity
Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
High-severity Redis vulnerability (CVE-2025-21605) allows unauthenticated users to cause DoS. Upgrade to patched versions or apply mitigations to protect your server.
20 views
Daily Writeups
⤷ Title: GitLab Releases Security Update to Patch XSS and Account Takeover Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:46:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #CVE_2025_1763 #CVE_2025_1908 #CVE_2025_2443 #gitlab #security advisory #XSS
Daily CyberSecurity
GitLab Releases Security Update to Patch XSS and Account Takeover Flaws
GitLab releases critical security updates 17.11.1, 17.10.5, 17.9.7 to fix high-severity XSS, account takeover risks. Upgrade now to protect your GitLab instance.
15 views
Daily Writeups
⤷ Title: High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:35:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_32818 #Denial of Service #firewall #security advisory #SonicWall #SSLVPN
Daily CyberSecurity
High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing
Critical SonicWall flaw (CVE-2025-32818) in SSLVPN can crash firewalls, leading to DoS. Update your Gen7 devices now!
12 views
Daily Writeups
⤷ Title: CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cryptocurrency Security #CVE_2025_32965 #Key Exfiltration #NPM Backdoor #supply chain attack #Wallet Compromise #XRP Ledger #xrpl.js
Daily CyberSecurity
CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
CVE-2025-32965: A backdoor in xrpl.js SDK allows theft of crypto wallet keys. Users must upgrade and rotate compromised credentials immediately.
11 views
Daily Writeups
⤷ Title: CVE-2025-34028: Critical RCE Flaw in Commvault Command Center Scores CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:40:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Commvault #CVE_2025_34028 #cybersecurity #patch #Remote Code Execution
Daily CyberSecurity
CVE-2025-34028: Critical RCE Flaw in Commvault Command Center Scores CVSS 10
A critical vulnerability (CVE-2025-34028) in Commvault Command Center allows remote code execution. Patch immediately or isolate vulnerable instances.
11 views
Daily Writeups
⤷ Title: Ghost Tap: NFC Fraud Surge Linked to Chinese Cybercriminal Groups
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:36:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contactless Payment #Cybercrime #Ghost Tap #HCE Abuse #Mobile Payments #NFC Fraud #POS Terminal Exploits #Resecurity #Track2NFC #Z_NFC
Daily CyberSecurity
Ghost Tap: NFC Fraud Surge Linked to Chinese Cybercriminal Groups
Resecurity uncovers massive NFC fraud wave using Ghost Tap attacks, with Chinese cybercriminals targeting global payment systems and loyalty programs.
11 views
Daily Writeups
⤷ Title: CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:30:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Privilege Escalation #Authentication Bypass #Citrix Vulnerability #Critical CVE #CVE_2024_6235 #Internal API Exploit #NetScaler Console #Rapid7
Daily CyberSecurity
CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
Critical flaw CVE-2024-6235 in NetScaler Console lets attackers create admin accounts by abusing an internal API. Patch to version 14.1-25.53 now.
27 views
Daily Writeups
⤷ Title: Russian Hackers Abuse Microsoft 365 OAuth in Sophisticated Phishing Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:26:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #cyber_espionage #cybersecurity #Entra ID #Microsoft 365 #OAuth #OAuth Abuse #OAuth Phishing #phishing #Russian APT #Russian threat actors #social engineering #UTA0352 #UTA0355 #Volexity
Daily CyberSecurity
Russian Hackers Abuse Microsoft 365 OAuth in Sophisticated Phishing Attacks
Volexity uncovers Russian threat actors abusing Microsoft 365 OAuth flows via phishing, impersonation, and device registration to access email accounts.
19 views
Daily Writeups
⤷ Title: NVIDIA NeMo Framework: High-Risk Vulnerabilities Allow Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:22:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_23249 #CVE_2025_23250 #CVE_2025_23251 #NeMo #nvidia #Remote Code Execution
Daily CyberSecurity
NVIDIA NeMo Framework: High-Risk Vulnerabilities Allow Remote Code Execution
NVIDIA discloses 3 vulnerabilities in the NeMo Framework enabling remote code execution and data tampering. Update to version 25.02 to secure your AI development.
18 views
Daily Writeups
⤷ Title: Verizon DBIR 2025: Vulnerability Exploitation Surges, Third-Party Breaches Double
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:13:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Vulnerability #BYOD #Cyber Security #Data Breach #DBIR #GenAI #ransomware #third_party risk #Verizon #Vulnerability Exploitation
Daily CyberSecurity
Verizon DBIR 2025: Vulnerability Exploitation Surges, Third-Party Breaches Double
The Verizon 2025 DBIR reveals a surge in vulnerability exploitation and a doubling of third-party breaches. Learn key findings on ransomware, BYOD risks, and more.
14 views
Daily Writeups
⤷ Title: Grafana Patches CVE-2025-3260 and More in Critical Security Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:08:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authorization Bypass #CVE_2025_3260 #Dashboard Security #Data Source Proxy #Grafana #Grafana OSS #Open Source Monitoring #security patch #Trusted Types #XSS
Daily CyberSecurity
Grafana Patches CVE-2025-3260 and More in Critical Security Update
Grafana fixes critical CVE-2025-3260 and two medium bugs, urging users to update immediately to prevent unauthorized access and XSS exploits.
16 views
Daily Writeups
⤷ Title: FormBook Malware Spreads via Sophisticated Phishing Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:05:21 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2017_11882 #cybersecurity #Formbook #Infostealer #malware #phishing #Process Hollowing
Daily CyberSecurity
FormBook Malware Spreads via Sophisticated Phishing Attack
A new phishing campaign delivers FormBook malware via Word docs, exploiting CVE-2017-11882. The fileless attack uses process hollowing to evade detection.
12 views
Daily Writeups
⤷ Title: WormLocker Ransomware Reemerges with Updated Variants
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:00:57 +0000
════════════════════════
⌗ Tags: #Malware #ANY.RUN #Cyber Security #malware #ransomware #system utilities #threat analysis #WormLocker
Daily CyberSecurity
WormLocker Ransomware Reemerges with Updated Variants
WormLocker ransomware is evolving! Discover how version 2.0 abuses system utilities to take over systems, as revealed by ANY.RUN analysis.
9 views
Daily Writeups
⤷ Title: A list of search engines for OSINT investigators and ethical hackers(PART 2)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:36:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #search_engines #hacking #bug_bounty #tips
Medium
A list of search engines for OSINT investigators and ethical hackers(PART 2)
One of the must-read articles
12 views