Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: iOS 26 Beta 3: Apple Adds RCS Support, But Encryption Still Missing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:00:28 +0000
════════════════════════
⌗ Tags: #Apple #Android #cybersecurity #Encryption #end_to_end encryption #google #iOS 26 #Messages App #privacy #RCS #Rich Communication Services #Universal Profile 3.0
Penetration Testing Tools
iOS 26 Beta 3: Apple Adds RCS Support, But Encryption Still Missing
iOS 26 Beta 3 integrates RCS support but lacks end-to-end encryption for messages, leaving them exposed. Full encryption (RCS Universal Profile 3.0) is expected in future updates.
17 views
Daily Writeups
⤷ Title: Cursor AI IDE Hacked: Fraudulent Extension Steals $500K in Crypto from Russian Developer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:13:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto theft #cryptocurrency #Cursor AI #Extension #Infostealer #kaspersky #malware #Open VSX #PureLogs #ScreenConnect #Solidity #supply chain attack #visual studio code #VS Code
Daily CyberSecurity
Cursor AI IDE Hacked: Fraudulent Extension Steals $500K in Crypto from Russian Developer
A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.
15 views
Daily Writeups
⤷ Title: CVE-2025-53833 (CVSS 10): Critical SSTI Flaw in LaRecipe Threatens Millions of Laravel Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:01:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_53833 #cybersecurity #Laravel #LaRecipe #php #rce #Remote Code Execution #Server Side Template Injection #ssti #Vulnerability #web framework
Daily CyberSecurity
CVE-2025-53833 (CVSS 10): Critical SSTI Flaw in LaRecipe Threatens Millions of Laravel Apps
A critical SSTI flaw (CVE-2025-53833, CVSS 10.0) in LaRecipe allows unauthenticated RCE on affected servers via template injection. Update to v2.8.1 immediately!
16 views
Daily Writeups
⤷ Title: Google Confirms Major OS Merger: Android & ChromeOS to Become a Single Unified Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 01:53:48 +0000
════════════════════════
⌗ Tags: #Android #android #chromebooks #ChromeOS #Cross_Platform #google #Operating System #OS Merger #Sameer Samat #tablets #Tech News #Unification
Daily CyberSecurity
Google Confirms Major OS Merger: Android & ChromeOS to Become a Single Unified Platform
Google officially confirmed plans to unify Android and ChromeOS into a single platform, aiming for seamless cross-device experiences and streamlined development for its AI-driven future.
12 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:55:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #Exploited in Wild #FTP Server #Huntress #Lua #Null Byte Injection #rce #Remote Code Execution #Vulnerability #Wing FTP Server
Daily CyberSecurity
CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
CISA adds critical Wing FTP Server RCE flaw (CVE-2025-47812, CVSS 10.0) to KEV. Actively exploited via null byte and Lua code injection; patch to 7.4.4 immediately!
13 views
Daily Writeups
⤷ Title: ImageMagick Flaw (CVE-2025-53101): Stack Buffer Overflow Allows Potential Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:38:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_53101 #cybersecurity #Image Manipulation #ImageMagick #memory corruption #open_source #rce #Remote Code Execution #Stack Buffer Overflow #Vulnerability
Daily CyberSecurity
ImageMagick Flaw (CVE-2025-53101): Stack Buffer Overflow Allows Potential Remote Code Execution
A flaw (CVE-2025-53101) in ImageMagick allows stack buffer overflows via filename templates, risking memory corruption and remote code execution. Patch now!
10 views
Daily Writeups
⤷ Title: XORIndex: North Korea’s Evolving Supply Chain Malware Targets npm Ecosystem Again
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:26:06 +0000
════════════════════════
⌗ Tags: #Malware #APT #BeaverTail #Contagious Interview #cryptocurrency #cybersecurity #HexEval #Infostealer #InvisibleFerret #malware #North Korea #npm #Socket #supply chain attack #XORIndex
Daily CyberSecurity
XORIndex: North Korea’s Evolving Supply Chain Malware Targets npm Ecosystem Again
North Korean APTs are using XORIndex malware in a new npm supply chain attack, infiltrating developers via 67 malicious packages to steal crypto wallets and credentials.
14 views
Daily Writeups
⤷ Title: HazyBeacon: Novel Backdoor Uses AWS Lambda for Stealthy C2, Targets Govts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:12:47 +0000
════════════════════════
⌗ Tags: #Malware #AWS Lambda #backdoor #C2 #Cloud Security #Command and Control #Cyberespionage #cybersecurity #DLL Sideloading #HazyBeacon #Unit 42
Daily CyberSecurity
HazyBeacon: Novel Backdoor Uses AWS Lambda for Stealthy C2, Targets Govts
Unit 42 uncovers HazyBeacon, a novel backdoor using AWS Lambda URLs for stealthy C2. It's deployed via DLL sideloading, targeting Southeast Asian govts for trade documents.
7 views
Daily Writeups
⤷ Title: CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Hijacking #CSRF #CVE_2025_43856 #cybersecurity #Immich #OAuth2 #open_source #Photo Management #Video Management #Vulnerability
Daily CyberSecurity
CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform
A flaw (CVE-2025-43856) in Immich allows account hijacking via a broken OAuth2 implementation (missing state parameter check). Update to v1.132.0 immediately!
15 views
Daily Writeups
⤷ Title: BlackSuit: New Royal/Conti Rebrand Hits With Speed, Stealth, & Data Exfiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:00:30 +0000
════════════════════════
⌗ Tags: #Malware #BlackSuit #Cobalt Strike #Conti #Cybereason #cybersecurity #data exfiltration #PsExec #ransomware #Rclone #Royal Ransomware #threat actor
Daily CyberSecurity
BlackSuit: New Royal/Conti Rebrand Hits With Speed, Stealth, & Data Exfiltration
BlackSuit, a rebranded Royal/Conti ransomware, unleashes destructive multi-stage attacks. It uses Cobalt Strike, rclone for data exfil, and deletes shadow copies for stealth and speed.
24 views
Daily Writeups
⤷ Title: Two-Factor Authentication (2FA) Vulnerabilities: Full Analysis
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:22:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #analysis #technology #vulnerability #bug_bounty
Medium
Two-Factor Authentication (2FA) Vulnerabilities: Full Analysis
Inside the logic flaws, weak sessions, and social engineering tactics defeating multi-factor authentication today.
26 views
Daily Writeups
⤷ Title: Automation in Bug Bounty Hunting: Best Tools and Techniques
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:19:05 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #vulnerability #bug_bounty #technology
Medium
Automation in Bug Bounty Hunting: Best Tools and Techniques
Streamline Your Bug Hunting Workflow with the Best Automation Tools and Strategies
21 views
Daily Writeups
⤷ Title: How a 2FA Bypass Vulnerability in Drugs.com Exposed User Accounts
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:49 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #penetration_testing #hacking #tips_and_tricks
Medium
How a 2FA Bypass Vulnerability in Drugs.com Exposed User Accounts
Exposing a Critical Flaw in Authentication Security
17 views
Daily Writeups
⤷ Title: What the Heck Is an XSS Attack? I Finally Understood It with This Silly Example
════════════════════════
𐀪 Author: Alex Joyel Raj
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:31:59 GMT
════════════════════════
⌗ Tags: #cyber #xss_vulnerability #cybersecurity #hacking #xss_attack
Medium
What the Heck Is an XSS Attack? I Finally Understood It with This Silly Example
If you’ve heard of XSS but still don’t get it, this is for you.
19 views
Daily Writeups
⤷ Title: INSTALLING UBUNTU IN A VIRTUAL BOX
════════════════════════
𐀪 Author: Roland Nii Ayi Aryee
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 01:43:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #homelab #hacking #ubuntu #information_technology
Medium
INSTALLING UBUNTU IN A VIRTUAL BOX
Running Ubuntu in VirtualBox is a safe and flexible way to explore Linux without altering your main system. This guide walks you through…
15 views
Daily Writeups
⤷ Title: RCE + ROOT-LEVEL ACCESS (CVSS 10.0):
════════════════════════
𐀪 Author: RABIU
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 12:15:28 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #web_security #bug_hunting #infosec
Medium
🚨 RCE + ROOT-LEVEL ACCESS (CVSS 10.0):
Today, I explain how I discovered a critical root-level RCE (CVSS 10.0) in a Fortune 500 company’s infrastructure using only Chrome and…
11 views
Daily Writeups
⤷ Title: New Cyber Threat: AI-Powered Phishing Scams-How to Stay Safe in 2025
════════════════════════
𐀪 Author: The News English India
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:48:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #alerts #students #scam #india
Medium
New Cyber Threat: AI-Powered Phishing Scams-How to Stay Safe in 2025
New Cyber Threat
13 views
Daily Writeups
⤷ Title: Zero to Trusted
════════════════════════
𐀪 Author: Suzette Becraft
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:44:34 GMT
════════════════════════
⌗ Tags: #tls_configuration #nginx #certificate_management #cybersecurity
Medium
Zero to Trusted
A Hands-On Guide to X.509 Certificates  and Nginx Web Server TLS Configuration
10 views
Daily Writeups
⤷ Title: TRiSM for Agentic AI
════════════════════════
𐀪 Author: Tal Eliyahu
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:42:34 GMT
════════════════════════
⌗ Tags: #agentic_ai #llm #cybersecurity #artificial_intelligence #security
Medium
TRiSM for Agentic AI
Agentic AI isn’t just about autonomy — it’s about coordination at scale. But when LLM-based agents share memory, call APIs, and reason…
11 views
Daily Writeups
⤷ Title: 7 Free WAF Solutions Compared: Which One Should You Use in 2025?
════════════════════════
𐀪 Author: AerieWhole123
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:37:14 GMT
════════════════════════
⌗ Tags: #beginners_guide #safeline_waf #cybersecurity #waf
Medium
7 Free WAF Solutions Compared: Which One Should You Use in 2025?
A Web Application Firewall (WAF) sits between your users and your app, analyzing HTTP/HTTPS traffic and blocking malicious activity. Unlike…
10 views