Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: Free Cybersecurity Roadmap for Beginners (2025)
════════════════════════
𐀪 Author: Ghulam Mohiuddin
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:11:42 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #ethical_hacking #cybersecurity #cybersecurity_roadmap
Medium
Free Cybersecurity Roadmap for Beginners (2025)
Learn Ethical Hacking Step‑by‑Step with TryHackMe
21 views
Daily Writeups
⤷ Title: CESS Airdrop Join DeShare to Earn CESS Tokens
════════════════════════
𐀪 Author: Cess Network
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:12:32 GMT
════════════════════════
⌗ Tags: #cess_network #airdrop #web3 #crypto #xs
Medium
CESS Airdrop 🚀 Join DeShare to Earn CESS Tokens
Over 2 million wallets have already joined the Cess DeShare campaign, racing to collect points before the final snapshot. If you want to…
24 views
Daily Writeups
⤷ Title: ProtectMyTooling: Multi-Packer wrapper letting us daisy-chain various packers, obfuscators
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:29:52 +0000
════════════════════════
⌗ Tags: #Open Source Tool #ProtectMyTooling
Penetration Testing Tools
ProtectMyTooling: Multi-Packer wrapper letting us daisy-chain various packers, obfuscators
script wraps around a multitude of packers, protectors, obfuscators, shellcode loaders, encoders, and generators to produce complex protected Red Team
22 views
Daily Writeups
⤷ Title: Critical Flaw (CVE-2025-22470, CVSS 9.8) in SATO Industrial Label Printers Allow Remote Root Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:44:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_22469 #CVE_2025_22470 #cybersecurity #file upload #Industrial Printers #rce #SATO Corporation #Vulnerability
Daily CyberSecurity
Critical Flaw (CVE-2025-22470, CVSS 9.8) in SATO Industrial Label Printers Allow Remote Root Takeover
JPCERT/CC warns of critical flaws (CVSS 9.8) in SATO industrial label printers that allow unauthenticated remote attackers to upload malicious Lua scripts for root access.
24 views
Daily Writeups
⤷ Title: CISA Warns of “ToolShell”: Critical Exploit Chain Hits SharePoint Servers, Bypasses Authentication
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:42:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #cybersecurity #Exploit Chain #rce #Sharepoint #ToolShell #Vulnerability #webshell #zero_day
Daily CyberSecurity
CISA Warns of "ToolShell": Critical Exploit Chain Hits SharePoint Servers, Bypasses Authentication
CISA issues an urgent warning about "ToolShell," a sophisticated exploit chain targeting SharePoint servers with multiple vulnerabilities to install webshells and steal crypto keys.
15 views
Daily Writeups
⤷ Title: CVE-2025-52709: Critical PHP Object Injection Flaw in Everest Forms Plugin Affects 100,000+ Sites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:40:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_52709 #cybersecurity #Everest Forms #PHP Object Injection #rce #Vulnerability #wordpress
Daily CyberSecurity
CVE-2025-52709: Critical PHP Object Injection Flaw in Everest Forms Plugin Affects 100,000+ Sites
A critical PHP object injection flaw (CVE-2025-52709, CVSS 9.8) in Everest Forms allows RCE when an admin views form submissions on PHP versions below 7.1. Update to v3.2.3 immediately.
16 views
Daily Writeups
⤷ Title: NVIDIA: “No Backdoors, No Kill Switches,” Rejecting Calls for Government Hardware Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:36:47 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #Clipper Chip #cybersecurity #GPU #Hardware Integrity #Kill Switch #nvidia #Policy #Tech News
Daily CyberSecurity
NVIDIA: "No Backdoors, No Kill Switches," Rejecting Calls for Government Hardware Controls
NVIDIA states its GPUs have no backdoors or kill switches, arguing such controls are a security risk and would be a "gift to hackers," referencing the failed Clipper Chip.
13 views
Daily Writeups
⤷ Title: BYOVD Attack: A New AV Killer Exploits a Legitimate Driver to Neutralize Defenses for MedusaLocker Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:31:56 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #AV Killer #Brazil #BYOVD #cybersecurity #evasion #MedusaLocker #ransomware #ThrottleStop.sys #Windows Kernel
Daily CyberSecurity
BYOVD Attack: A New AV Killer Exploits a Legitimate Driver to Neutralize Defenses for MedusaLocker Ransomware
A recent incident response operation in Brazil has revealed a stealthy and destructive threat abusing the trusted architecture of the Windows kernel. In its latest analysis, Kaspersky Labs exposed…
18 views
Daily Writeups
⤷ Title: The WhatsApp Kill Switch: New npm Packages Use Developer’s Phone Number to Wipe Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:28:46 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Kill Switch #malware #npm #Remote Code Execution #supply chain attack #System Wipe #WhatsApp
Daily CyberSecurity
The WhatsApp Kill Switch: New npm Packages Use Developer’s Phone Number to Wipe Systems
Socket’s Threat Research Team has uncovered two malicious npm packages—naya-flore and nvlore-hsc—designed to target developers building WhatsApp integrations. Far from mere spyware or adware…
17 views
Daily Writeups
⤷ Title: CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:21:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #Critical Infrastructure #CVE_2025_7768 #cybersecurity #Hard_coded Credentials #hardcoded credentials #ICS #IOT #Solar #Solar Systems #Tigo Energy #Vulnerability
Daily CyberSecurity
CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
In a critical advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA), newly discovered vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) device could allow atta…
14 views
Daily Writeups
⤷ Title: Cryptocurrency Scams: How Fake Binance Ads Steal Your Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:15:13 +0000
════════════════════════
⌗ Tags: #Malware #Binance #cryptocurrency #cybersecurity #facebook #Infostealer #malware #phishing
Daily CyberSecurity
Cryptocurrency Scams: How Fake Binance Ads Steal Your Data
AhnLab Security Intelligence Center (ASEC) has uncovered a sophisticated multi-stage malware campaign that targets cryptocurrency users through malicious Facebook ads. The campaign uses fake Binan…
8 views
Daily Writeups
⤷ Title: The Candiru Files: New Infrastructure Exposes Stealthy Surveillance Clusters in Hungary, Saudi Arabia, and Indonesia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:11:11 +0000
════════════════════════
⌗ Tags: #Malware #Candiru #cyber_espionage #DevilsTongue #Entity List #Hungary #Indonesia #Mercenary Spyware #Saudi Arabia #spyware
Daily CyberSecurity
The Candiru Files: New Infrastructure Exposes Stealthy Surveillance Clusters in Hungary, Saudi Arabia, and Indonesia
In a reminder of the persistent threat posed by commercial spyware vendors, Insikt Group has uncovered new operational infrastructure tied to Candiru—the shadowy Israeli mercenary spyware company …
10 views
Daily Writeups
⤷ Title: CERT-UA Exposes UAC-0099: New Backdoor Toolkit Targets Ukraine’s Defense with Phishing & Stealthy Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:06:41 +0000
════════════════════════
⌗ Tags: #Malware #CERT_UA #cyberattack #Defense Industry #DRAGSTARE #malware #MATCHBOIL #MATCHWOK #phishing #UAC_0099 #Ukraine
Daily CyberSecurity
CERT-UA Exposes UAC-0099: New Backdoor Toolkit Targets Ukraine’s Defense with Phishing & Stealthy Malware
In a concerning escalation of cyber aggression, Ukraine’s National Cyber Security Incidents Response Team (CERT-UA) has uncovered a sophisticated new campaign by the threat group UAC-0099 targetin…
16 views
Daily Writeups
⤷ Title: The AK47 Project: New Report Ties Storm-2603 to LockBit and Warlock Ransomware, SharePoint Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:00:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AK47 C2 #china #cybersecurity #LockBit #Project AK47 #ransomware #Sharepoint #Storm_2603 #Unit 42 #Warlock
Daily CyberSecurity
The AK47 Project: New Report Ties Storm-2603 to LockBit and Warlock Ransomware, SharePoint Exploits
In a revelation, Unit 42 has exposed a financially motivated cyber threat actor cluster, dubbed CL-CRI-1040, with dangerous ties to known ransomware operations and links to the Storm-2603 actor pr…
16 views
Daily Writeups
⤷ Title: WebStrike Lab — Cyberdefenders
════════════════════════
𐀪 Author: Zen
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 01:59:32 GMT
════════════════════════
⌗ Tags: #wireshark #network_forensics #cybersecurity #walkthrough #cyberdefenders_writeup
Medium
WebStrike Lab — Cyberdefenders
Link to the lab. It’s a free one, all you need is an account.
17 views
Daily Writeups
⤷ Title: Helping Communities Stay Safe Online — Bruce Johnson, Cybersecurity Speaker
════════════════════════
𐀪 Author: Brucejohnsonspeaks
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 01:56:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #digital_safety #cyber_security_awareness #public_speaking #passwords
Medium
Helping Communities Stay Safe Online — Bruce Johnson, Cybersecurity Speaker
I’m Bruce Johnson, a cybersecurity sales engineer and public speaker based in Atherton, California. I help individuals, businesses, and…
13 views
Daily Writeups
⤷ Title: Wazuh Home Lab: SIEM and File Integrity Monitoring with Ubuntu and Windows.
════════════════════════
𐀪 Author: Roland Nii Ayi Aryee
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 01:53:38 GMT
════════════════════════
⌗ Tags: #homelab #security_operation_center #cybersecurity #infosec #wazuh
Medium
Wazuh Home Lab: SIEM and File Integrity Monitoring with Ubuntu and Windows.
This post walks through how I set up Wazuh using Ubuntu as the manager and Windows 11 as the agent,focusing on one of File Integrity…
9 views
Daily Writeups
⤷ Title: Surviving the 2025 Remote Job Scam Epidemic: Hard Truths for Real Job Seekers
════════════════════════
𐀪 Author: Justin
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 01:33:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #life_lessons #remote_work #career_advice #work_from_home
Medium
Surviving the 2025 Remote Job Scam Epidemic: Hard Truths for Real Job Seekers
In 2025, the promise of remote work is more vital than ever — especially for families like mine. I’m currently in the United States, separated from my wife and stepdaughter, who are back in Colombia…
14 views
Daily Writeups
⤷ Title: MCPoison: How a Trusted AI Feature in Cursor Became a Hacker’s Backdoor (CVE-2025–54136)
════════════════════════
𐀪 Author: Atharva Shirude
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 01:14:07 GMT
════════════════════════
⌗ Tags: #ai_security #cybersecurity #cve #generative_ai_tools #cursor_ai
Medium
MCPoison: How a Trusted AI Feature in Cursor Became a Hacker’s Backdoor (CVE-2025–54136)
MCP, short for Multi-Command Package, is a feature in the Cursor AI code editor designed to streamline developer workflows. Think of it as a way to automate common tasks — like testing, building, or…
16 views
Daily Writeups
⤷ Title: Dev(Sec)Ops: What game theory tells us about modern security best practices
════════════════════════
𐀪 Author: RJ Richardson
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 01:03:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #management_and_leadership #devsecops #game_theory
Medium
Dev(Sec)Ops: What game theory tells us about modern security best practices
How viewing security as a Stackelberg Game builds the case for DevSecOps.
20 views