Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: Malicious AI Models Are Behind a New Wave of Cybercrime, Cisco Talos
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 08:31:51 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Cyber Crime #AI #ChatGPT #Cisco Talos #Cyber Attack #Cybersecurity #Hugging Face #LLM #Vulnerability
Hackread
Malicious AI Models Are Behind a New Wave of Cybercrime, Cisco Talos
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
17 views
Daily Writeups
⤷ Title: New Stealthy Remcos Malware Campaigns Target Businesses and Schools
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 16:07:48 +0000
════════════════════════
⌗ Tags: #Security #Malware #Cyber Attack #Cybersecurity #Forcepoint #Phishing #Remcos
Hackread
New Stealthy Remcos Malware Campaigns Target Businesses and Schools
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
18 views
Daily Writeups
⤷ Title: Researchers Warn Free VPNs Could Leak US Data to China
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 10:31:59 +0000
════════════════════════
⌗ Tags: #Security #Privacy #App Store #Apple #China #Cybersecurity #Google #Play Store #TikTok #VPN
Hackread
Researchers Warn Free VPNs Could Leak US Data to China
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 23:36:40 +0000
════════════════════════
⌗ Tags: #Cyber Crime #BreachForums #Cybersecurity #data breach #FBI #France #IntelBroker #ShinyHunters
Hackread
How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
21 views
Daily Writeups
⤷ Title: Flowable Named in the latest Gartner® Market Guide for BPA Tools
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 14:41:48 +0000
════════════════════════
⌗ Tags: #Press Release #Technology #Flowable #Gartner
Hackread
Flowable Named in the latest Gartner® Market Guide for BPA Tools
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
18 views
Daily Writeups
⤷ Title: BreachForums: ShinyHunters Members Arrested, IntelBroker Identified as Kai West
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 09:28:52 +0000
════════════════════════
⌗ Tags: #Cyber Crime #BreachForums #Cybersecurity #data breach #France #IntelBroker #Kai West #ShinyHunters #United Kingdom
Hackread
BreachForums: ShinyHunters Members Arrested, IntelBroker Identified as Kai West
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
16 views
Daily Writeups
⤷ Title: Protecting Business Data From Unauthorized Encryption Threats
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 26 Jun 2025 07:51:39 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #Encryption
Hackread
Protecting Business Data From Unauthorized Encryption Threats
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
20 views
Daily Writeups
⤷ Title: New WordPress Malware Hides on Checkout Pages and Imitates Cloudflare
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 07:15:15 +0000
════════════════════════
⌗ Tags: #Security #Malware #Cyber Attack #Cybersecurity #Plugin #Scam #security #Wordfence #Wordpress
Hackread
New WordPress Malware Hides on Checkout Pages and Imitates Cloudflare
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
19 views
Daily Writeups
⤷ Title: SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 24 Jun 2025 19:57:22 +0000
════════════════════════
⌗ Tags: #Security #Android #Malware #App Store #China #Crypto #Cybersecurity #iOS #Play Store #SparkKitty #Spyware
Hackread
SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
14 views
Daily Writeups
⤷ Title: ZigStrike: New Zig-Based Shellcode Loader Revolutionizes EDR Evasion with Advanced Injection Techniques
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:14:58 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Anti_Sandbox #cybersecurity #EDR Bypass #malware #Offensive Security #Payload Delivery #Process injection #shellcode loader #Zig Language #ZigStrike
Penetration Testing Tools
ZigStrike: New Zig-Based Shellcode Loader Revolutionizes EDR Evasion with Advanced Injection Techniques
ZigStrike, a new shellcode loader in Zig, offers advanced injection techniques and anti-sandbox features to bypass EDR, providing stealthy execution via local/remote thread and memory mapping.
13 views
Daily Writeups
⤷ Title: Loki: Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:59:01 +0000
════════════════════════
⌗ Tags: #Open Source Tool #C2 #Loki #Node.js #Node.js C2
Penetration Testing Tools
Loki: Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
Loki is a stage-1 command and control (C2) framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015.
17 views
Daily Writeups
⤷ Title: CISA Warns: Critical AMI MegaRAC Firmware Flaw (CVE-2024-54085, CVSS 10.0) Actively Exploited for Server Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:48:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #AMI MegaRAC #authentication bypass #Baseboard Management Controller #BMC #CISA #CVE_2024_54085 #cybersecurity #Exploited in Wild #firmware #RCE #remote code execution #vulnerability
Penetration Testing Tools
CISA Warns: Critical AMI MegaRAC Firmware Flaw (CVE-2024-54085, CVSS 10.0) Actively Exploited for Server Takeover
CISA adds critical AMI MegaRAC firmware flaw (CVE-2024-54085, CVSS 10.0) to KEV, confirming active exploitation. Attackers can bypass authentication to gain full server control.
14 views
Daily Writeups
⤷ Title: Windows 11 Retires Blue Screen of Death: New Black Crash Screen Focuses on Faster Diagnostics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:45:33 +0000
════════════════════════
⌗ Tags: #Windows #Black Screen of Death #blue screen of death #BSOD #IT Administration #Microsoft #operating system #System Error #Tech News #UI Redesign #Windows 11
Penetration Testing Tools
Windows 11 Retires Blue Screen of Death: New Black Crash Screen Focuses on Faster Diagnostics
Microsoft is replacing Windows' iconic Blue Screen of Death with a new black-and-white interface this summer, removing the QR code and emoticon for faster IT diagnosis.
17 views
Daily Writeups
⤷ Title: North Korean APT Launches Massive npm Supply Chain Attack: Typosquatting & Fake Jobs Steal Crypto from Devs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:42:52 +0000
════════════════════════
⌗ Tags: #Malware #APT #BeaverTail #Crypto Theft #cybersecurity #developers #HexEval #Infostealer #InvisibleFerret #malware #North Korea #npm #Social Engineering #supply chain attack #Typosquatting
Penetration Testing Tools
North Korean APT Launches Massive npm Supply Chain Attack: Typosquatting & Fake Jobs Steal Crypto from Devs
North Korean APTs are using 35 typosquatted npm packages and fake job offers to spread HexEval, BeaverTail, and InvisibleFerret malware, stealing crypto and data from developers.
17 views
Daily Writeups
⤷ Title: EvilConwi Unmasked: Hackers Weaponize Signed ConnectWise ScreenConnect Installers for Malware Deployment
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:39:14 +0000
════════════════════════
⌗ Tags: #Malware #Authenticode Stuffing #ConnectWise ScreenConnect #cybersecurity #Digital Signature #EvilConwi #G DATA #malware #phishing #Remote Access #Social Engineering
Penetration Testing Tools
EvilConwi Unmasked: Hackers Weaponize Signed ConnectWise ScreenConnect Installers for Malware Deployment
Hackers are weaponizing legitimately signed ConnectWise ScreenConnect installers by using Authenticode stuffing to deploy malware and fake updates, leveraging social engineering.
21 views
Daily Writeups
⤷ Title: “OneClik” APT Unmasked: China-Linked Campaign Abuses Microsoft ClickOnce & AWS Cloud to Target Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:36:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #AWS #cloud security #Cyberespionage #cybersecurity #Energy Sector #Go Language #malware #Microsoft ClickOnce #Oil and Gas #OneClik #RunnerBeacon #Trellix
Penetration Testing Tools
"OneClik" APT Unmasked: China-Linked Campaign Abuses Microsoft ClickOnce & AWS Cloud to Target Energy Sector
Trellix uncovers "OneClik," a sophisticated APT campaign abusing Microsoft ClickOnce and AWS cloud services to deploy Go-language backdoors, targeting energy, oil, and gas sectors.
24 views
Daily Writeups
⤷ Title: French Police Bust BreachForums Organizers: “ShinyHunters,” “IntelBroker” & Others Arrested in Major Cybercrime Crackdown
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:32:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BreachForums #cybercrime #Cybercrime Forum #cybersecurity #data breach #French Police #Hacker Arrests #IntelBroker #Law Enforcement #ShinyHunters
Penetration Testing Tools
French Police Bust BreachForums Organizers: "ShinyHunters," "IntelBroker" & Others Arrested in Major Cybercrime Crackdown
French police arrested key BreachForums organizers, including "ShinyHunters" and "IntelBroker," dismantling the major cybercriminal hub and linking them to high-impact data breaches.
29 views
Daily Writeups
⤷ Title: Urgent Citrix NetScaler Alert: Critical Memory Overflow Flaw (CVE-2025-6543, CVSS 9.2) Actively Exploited
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:21:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #ADC #Citrix #CVE_2025_6543 #cybersecurity #Denial of Service #DoS #Exploited in Wild #Gateway #Memory Overflow #NetScaler #Security Patch #vulnerability
Penetration Testing Tools
Urgent Citrix NetScaler Alert: Critical Memory Overflow Flaw (CVE-2025-6543, CVSS 9.2) Actively Exploited
Citrix warns of a critical memory overflow flaw (CVE-2025-6543, CVSS 9.2) in NetScaler ADC/Gateway, actively exploited for DoS. Update to patched versions immediately!
18 views
Daily Writeups
⤷ Title: Notorious Hacker “IntelBroker” (Kai West) Arrested & Charged in US: $25M Damages, Traced by Crypto
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:16:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Data Leak #BreachForums #Corporate Hacking #cybercrime #cybersecurity #data breach #FBI #Hacker Arrest #IntelBroker #Kai West #National Security #US DOJ
Penetration Testing Tools
Notorious Hacker "IntelBroker" (Kai West) Arrested & Charged in US: $25M Damages, Traced by Crypto
Notorious hacker "IntelBroker" (Kai West) is charged in the US for orchestrating cyberattacks causing $25M in damages. He was traced by the FBI via crypto transactions.
15 views
Daily Writeups
⤷ Title: SonicWall Warns: Trojanized NetExtender VPN Client Stealing Credentials in Active Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 07:12:47 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #cybersecurity #Digital Signature #Fake Installer #malware #Microsoft Defender #NetExtender #SonicWall #trojan #VPN
Penetration Testing Tools
SonicWall Warns: Trojanized NetExtender VPN Client Stealing Credentials in Active Campaign
SonicWall and Microsoft uncover a campaign distributing a trojanized NetExtender VPN client that steals credentials by bypassing certificate validation. Download only from official sources
15 views