Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: What If WhatsApp Could Read Your Mind… But Promised Not To Peek?
════════════════════════
𐀪 Author: Jojo S.
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 23:22:57 GMT
════════════════════════
⌗ Tags: #meta #cybersecurity #whatsapp #technology #artificial_intelligence
Medium
What If WhatsApp Could Read Your Mind… But Promised Not To Peek?
Explore how WhatsApp’s Private Processing lets AI summarize your chats without compromising your privacy or breaking encryption.
11 views
Daily Writeups
⤷ Title: How AI Is Reshaping Cybersecurity in the U.S. — And How Businesses Can Prepare
════════════════════════
𐀪 Author: Jazz Cyber Shield
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 23:09:15 GMT
════════════════════════
⌗ Tags: #data_protection #ai_in_security #cybersecurity #zero_trust #artificial_intelligence
Medium
How AI Is Reshaping Cybersecurity in the U.S. — And How Businesses Can Prepare
As cyberattacks grow more sophisticated in 2025, artificial intelligence (AI) is emerging as both a powerful defense mechanism and a new…
13 views
Daily Writeups
⤷ Title: Why Secure Data Transfer Matters
════════════════════════
𐀪 Author: Akshay Chauhan
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 23:04:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #safeaeon
Medium
Why Secure Data Transfer Matters
Every time you send a file, it moves through several checkpoints. If any one of those is unprotected, hackers can exploit it. Businesses of…
15 views
Daily Writeups
⤷ Title: How to Secure Your Supply Chain from Cyber Threats
════════════════════════
𐀪 Author: Akshay Chauhan
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 22:46:27 GMT
════════════════════════
⌗ Tags: #safeaeon #cybersecurity #information_security
Medium
How to Secure Your Supply Chain from Cyber Threats
The strength of your supply chain can determine the success of your business. But today, it’s not just logistics and timelines that matter…
18 views
Daily Writeups
⤷ Title: SSTI ve CSTI Zafiyetlerini Anlamak
════════════════════════
𐀪 Author: Hilmi Enginar
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 22:40:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #ssti #web_security #web_vulnerabilities #csti
Medium
SSTI ve CSTI Zafiyetlerini Anlamak
Web sitelerinin artık bize isimlerimizle hitap etmesi, kişiselleştirilmiş içerikler sunması harika, değil mi? İşte bu dinamizmi sağlamak…
21 views
Daily Writeups
⤷ Title: Coding For Kids: Encouraging Children to Explore Coding
════════════════════════
𐀪 Author: Savvy Cyber Kids
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 22:40:24 GMT
════════════════════════
⌗ Tags: #privacy #children #coding #cybersecurity #parenting
Medium
Coding For Kids: Encouraging Children to Explore Coding
By HackEDU
21 views
Daily Writeups
⤷ Title: Intro to Penetration Testing ~ Ethical Hacker
════════════════════════
𐀪 Author: 0b1d1
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 23:47:57 GMT
════════════════════════
⌗ Tags: #security_operation_center #security #ethical_hacking #ethical_non_monogamy #penetration_testing
Medium
Intro to Penetration Testing ~ Ethical Hacker🎭
Ethical hackers play a crucial role in cybersecurity. ~ 0b1d1
21 views
Daily Writeups
⤷ Title: How to Secure Your Next.js Application Against Common Threats
════════════════════════
𐀪 Author: Sonali Nogja
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 22:54:27 GMT
════════════════════════
⌗ Tags: #csrf #web_security #authentication #nextjs #xss_vulnerability
Medium
How to Secure Your Next.js Application Against Common Threats
Next.js is a powerful React framework that enables developers to build fast and scalable web applications. However, like any web…
29 views
Daily Writeups
⤷ Title: ShellcodeGenZ: Shellcode Generator to execute commands with winExec API
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:31:14 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Shellcode Generator
Penetration Testing Tools
ShellcodeGenZ: Shellcode Generator to execute commands with winExec API
ShellcodeGenZ, the dopest shellcode generator for commands, crafted by Zeyad Azima. This tool's straight-up slayin' the game by whippin' up clean shellcode
15 views
Daily Writeups
⤷ Title: Digital Forensics Lab: Free hands-on digital forensics labs for students and faculty
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:14:27 +0000
════════════════════════
⌗ Tags: #Data Forensics
Penetration Testing Tools
Digital Forensics Lab: Free hands-on digital forensics labs for students and faculty
Hands-on Digital Forensics Labs: designed for Students and Faculty. Linux-based lab: All labs are purely based on Kali Linux
16 views
Daily Writeups
⤷ Title: CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:55:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_10442 #DiskStation #DSM Security #Jack Dates #libsynobtrfsreplicacore #NAS Vulnerability #Pwn2Own #Remote Code Execution #RET2 Systems #Synology
Daily CyberSecurity
CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes
CVE-2024-10442 allows unauthenticated RCE on Synology DS1823xs+ via Replication Service flaw. Patch now to avoid exploit risk.
10 views
Daily Writeups
⤷ Title: CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:50:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #CVE_2025_29906 #Embedded Linux #Finit #Getty Vulnerability #Init System #Linux Security #security patch
Daily CyberSecurity
CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems
Finit's internal getty flaw lets users bypass /bin/login and access Linux systems without authentication. Patch to version 4.11 or use external getty.
11 views
Daily Writeups
⤷ Title: APT28 Cyber Espionage Campaign Targets French Institutions Since 2021
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:40:50 +0000
════════════════════════
⌗ Tags: #Cyber Security #ANSSI #APT28 #cyber_espionage #Fancy Bear #France #Nation_State Attack #russia #threat actor
Daily CyberSecurity
APT28 Cyber Espionage Campaign Targets French Institutions Since 2021
ANSSI reveals sustained cyber espionage by APT28 (Fancy Bear) targeting French institutions since 2021. Learn about their tactics and targets.
13 views
Daily Writeups
⤷ Title: CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:35:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Infrastructure #CVE_2025_32444 #LLM Security #Mooncake Integration #Open Source Security #Python Pickle #Remote Code Execution #vLLM #ZeroMQ
Daily CyberSecurity
CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
CVE-2025-32444 exposes vLLM’s Mooncake integration to RCE via insecure pickle deserialization over ZeroMQ. Patch to v0.8.5 now.
18 views
Daily Writeups
⤷ Title: CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:30:20 +0000
════════════════════════
⌗ Tags: #Malware #fake CAPTCHA #JavaScript malware #KongTuke #NodeJS Backdoor #RAT Malware #Remote Access Trojan #Trustwave SpiderLabs #TryCloudflare Abuse
Daily CyberSecurity
CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
Trustwave uncovers a fake CAPTCHA campaign delivering NodeJS backdoors via PowerShell and TryCloudflare, with SOCKS5 tunneling and RAT capabilities.
16 views
Daily Writeups
⤷ Title: Gremlin Stealer Malware Targets Browsers, Crypto Wallets, and VPNs in Telegram-Based Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:23:09 +0000
════════════════════════
⌗ Tags: #Malware #C# malware #Chrome cookie bypass #Cryptocurrency Theft #Gremlin Stealer #Info_Stealer Malware #Telegram malware #Unit 42 #VPN credential theft
Daily CyberSecurity
Gremlin Stealer Malware Targets Browsers, Crypto Wallets, and VPNs in Telegram-Based Campaign
Researchers at Palo Alto Networks’ Unit 42 have unveiled a new, actively developed malware strain dubbed Gremlin Stealer, a powerful C#-based infostealer that has rapidly gained traction since its…
16 views
Daily Writeups
⤷ Title: Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:15:17 +0000
════════════════════════
⌗ Tags: #Malware #crypto mining #Cybersecurity Threats #IRC botnet #kaspersky #Linux Malware #Outlaw botnet #Perl malware #SSH vulnerability #ssh_hardening #XMRig
Daily CyberSecurity
Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining
Outlaw botnet targets Linux servers via weak SSH, using Perl scripts and XMRig miners for crypto mining and backdoor access, Kaspersky warns.
19 views
Daily Writeups
⤷ Title: Sophisticated Attacks Employ Cobalt Strike, DLL Sideloading, and Evolving Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:10:10 +0000
════════════════════════
⌗ Tags: #Malware #Cobalt Strike #cyberattack #cybersecurity #DLL Sideloading #infosec #malware #Minhook #Threat Actors
Daily CyberSecurity
Sophisticated Attacks Employ Cobalt Strike, DLL Sideloading, and Evolving Tactics
Sophos researchers detail a complex campaign using Cobalt Strike, DLL sideloading, and clever techniques like expired certificates
14 views
Daily Writeups
⤷ Title: Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:03:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #ANEL #APT10 #cyber_espionage #DNS_over_HTTPS #Earth Kasha #Japan #NOOPDOOR #SharpHide #spear_phishing #Taiwan #Trend Micro
Daily CyberSecurity
Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan
Earth Kasha targets Taiwan and Japan in a March 2025 spear-phishing campaign using ANEL and NOOPDOOR backdoors for stealthy cyber espionage.
12 views
Daily Writeups
⤷ Title: Important tool for Pentesters & Bug hunters
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:37:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #ethical_hacking #penetration_testing #cybersecurity
Medium
Important tool for Pentesters & Bug hunters
Find secrets, parameters, and endpoints, hidden things of the APK
16 views