Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Click-to-Compromise: PowerShell-Only RAT Campaign Targets Israeli Organizations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:38:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyberattack #cybersecurity #FortiMail #Israel #MuddyWater #phishing #powershell #rat #social engineering #threat intelligence
Daily CyberSecurity
Click-to-Compromise: PowerShell-Only RAT Campaign Targets Israeli Organizations
A targeted phishing campaign against Israeli organizations uses a PowerShell-based RAT and compromised internal emails for delivery, making detection difficult.
10 views
Daily Writeups
⤷ Title: PoisonSeed’s MFA-Resistant Phishing Kit Exposed: A Deep Dive into Precision-Validated Credential Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:30:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #adversary_in_the_middle #AiTM #Credential Theft #CryptoChameleon #Cryptocurrency Fraud #cybersecurity #MFA Bypass #NVISO #phishing #PoisonSeed #Scattered Spider
Daily CyberSecurity
PoisonSeed’s MFA-Resistant Phishing Kit Exposed: A Deep Dive into Precision-Validated Credential Theft
A new advanced phishing kit, PoisonSeed, bypasses MFA with AitM techniques to steal credentials and launch cryptocurrency scams. NVISO uncovers the tactics.
13 views
Daily Writeups
⤷ Title: GitHub Malware Campaign: SmartLoader Poses as Game Cheats to Steal Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:23:56 +0000
════════════════════════
⌗ Tags: #Malware #AhnLab #cybersecurity #github #Infostealer #Lumma Stealer #malware #phishing #RedLine #Rhadamanthys #SmartLoader #social engineering
Daily CyberSecurity
GitHub Malware Campaign: SmartLoader Poses as Game Cheats to Steal Data
A new large-scale malware campaign is using GitHub repositories disguised as game cheats and software cracks to distribute SmartLoader and steal user data.
11 views
Daily Writeups
⤷ Title: Chrome Stable Update 139 Blocks High-Severity Exploits in V8, libaom, and ANGLE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:17:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ANGLE #chrome #CVE_2025_8879 #CVE_2025_8880 #CVE_2025_8901 #cybersecurity #google chrome #libaom #security update #V8 #Vulnerability
Daily CyberSecurity
Chrome Stable Update 139 Blocks High-Severity Exploits in V8, libaom, and ANGLE
Google's latest Chrome update patches three high-severity flaws, including heap overflow in libaom and a race condition in V8. Update your browser now!
13 views
Daily Writeups
⤷ Title: FortiSIEM CVE-2025-25256 (CVSS 9.8): Remote Unauthenticated Command Injection with Exploit in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:10:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_25256 #cybersecurity #Exploit #FortiSIEM #Remote Code Execution #security vulnerability #zero_day
Daily CyberSecurity
FortiSIEM CVE-2025-25256 (CVSS 9.8): Remote Unauthenticated Command Injection with Exploit in the Wild
Critical FortiSIEM flaw (CVE-2025-25256) allows remote unauthenticated command injection. Exploit code active in the wild—patch immediately.
23 views
Daily Writeups
⤷ Title: Understanding DOM-Based XSS in Acronis Promo Page: A Deep Dive
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:07:20 GMT
════════════════════════
⌗ Tags: #xss_attack #penetration_testing #javascript #tips_and_tricks #bug_bounty
Medium
Understanding DOM-Based XSS in Acronis Promo Page: A Deep Dive
Exploring How to Detect and Exploit DOM-Based XSS
21 views
Daily Writeups
⤷ Title: Breaking GenAI: Offensive Security for Modern AI Systems — My Blackhat Experience
════════════════════════
𐀪 Author: Utku Yildirim
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 01:51:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #llm #hacking #ethical_hacking
Medium
Breaking GenAI: Offensive Security for Modern AI Systems — My Blackhat Experience
What an incredible experience at Black Hat USA 2025!
18 views
Daily Writeups
⤷ Title: The Cybersecurity Disaster No One Saw Coming: How a Small Business Got Hacked Across 3 Operating…
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:04:14 GMT
════════════════════════
⌗ Tags: #hacking #cyber_security_awareness #life_lessons #small_business #cybersecurity
Medium
The Cybersecurity Disaster No One Saw Coming: How a Small Business Got Hacked Across 3 Operating…
The Curious Case of X Business: How a Bizarre 2025 Cybersecurity Breach Almost Crippled a Small Business
21 views
Daily Writeups
⤷ Title: Hacking Instagram & LinkedIn: Costs, Tactics, and How to Defend Against Them
════════════════════════
𐀪 Author: 0trust0day
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 01:04:12 GMT
════════════════════════
⌗ Tags: #instagram_hack #infosec #hacker #hack_linkdein #cybersecurity
Medium
Hacking Instagram & LinkedIn: Costs, Tactics, and How to Defend Against Them
From phishing to AiTM Proxies and Infostealers — Real Tactics, Prices and Defense Strategies
26 views
Daily Writeups
⤷ Title: LinkedIn Security Tips
════════════════════════
𐀪 Author: Matthew.Rosenquist
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 01:43:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #social_media #linkedin #phishing #social_engineering
Medium
LinkedIn Security Tips
Protect from Fraud, Social Engineering, and Hacking
13 views
Daily Writeups
⤷ Title: EXIF Metadata: The Invisible Photo Data That Could Reveal Your Location
════════════════════════
𐀪 Author: Ngoc Nguyen Nhu
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 01:32:43 GMT
════════════════════════
⌗ Tags: #photography_privacy #online_safety #exif_metadata #digital_forensics #cybersecurity
Medium
EXIF Metadata: The Invisible Photo Data That Could Reveal Your Location
Introduction
EXIF metadata might sound like technical jargon, but it’s quietly hiding in nearly every photo you take — especially with a…
11 views
Daily Writeups
⤷ Title: TryHackMe — Void Execution Write-up: Binary Analysis/Exploitation
════════════════════════
𐀪 Author: チェインズ・ナバーロ
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 01:22:40 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #binary_exploitation #exploitation #cybersecurity #reverse_engineering
Medium
TryHackMe — Void Execution Write-up: Binary Analysis/Exploitation
Overview: Void Execution is a binary exploitation challenge where we must execute custom shell-code on a target system. The challenge…
27 views
Daily Writeups
⤷ Title: The Poisson Distribution: A Cybersecurity Defender’s Ally in Detecting Brute-Force Attacks
════════════════════════
𐀪 Author: Patrick Lefler
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 01:10:09 GMT
════════════════════════
⌗ Tags: #incident_response #probability #cybersecurity
Medium
The Poisson Distribution: A Cybersecurity Defender’s Ally in Detecting Brute-Force Attacks
Cybersecurity is a constant battle of wits, and staying ahead of attackers requires both technical expertise and a smart approach to data…
18 views
Daily Writeups
⤷ Title: Part 1: Inside Windows: Windows Core Concepts: Processes, Threads, and the Foundations You Can’t…
════════════════════════
𐀪 Author: DarKVoicE
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:12:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber #cybersecurity_training #cyber_security_awareness #windows
Medium
Part 1: Inside Windows: Windows Core Concepts: Processes, Threads, and the Foundations You Can’t Ignore
A deep dive into essential window processes, from threads and services to window stations and APIs, with more than enough detail to get you…
19 views
Daily Writeups
⤷ Title: Part 2: Inside Windows: Windows Core Concepts: API, Win32 Subsystem and the Layers You Didn’t Know…
════════════════════════
𐀪 Author: DarKVoicE
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:11:52 GMT
════════════════════════
⌗ Tags: #windows #cybersecurity_training #cyber_security_awareness #cyber #cybersecurity
Medium
Part 2: Inside Windows: Windows Core Concepts: API, Win32 Subsystem and the Layers You Didn’t Know You Were Using
A continued deep dive into essential window processes, from threads and services to window stations and APIs, with more than enough detail…
26 views
Daily Writeups
⤷ Title: Windows smss.exe (Session Manager Subsystem) Explained
════════════════════════
𐀪 Author: DarKVoicE
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 00:08:25 GMT
════════════════════════
⌗ Tags: #coding #tech #cybersecurity #technology
Medium
Windows smss.exe (Session Manager Subsystem) Explained
The first user-mode process Windows launches, and why it is far more important than the boring name suggests.
34 views
Daily Writeups
⤷ Title: AI Agents for Cybersecurity: Enhancing Automation & Threat Detection
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 03:54:45 GMT
════════════════════════
⌗ Tags: #threat_hunting #hacking #cybersecurity #ai #automation
Medium
AI Agents for Cybersecurity: Enhancing Automation & Threat Detection
Cybersecurity is no longer just about firewalls and antivirus software. Threat actors are faster, more adaptive, and often use automation…
30 views
Daily Writeups
⤷ Title: Hitachi Vantara Breach: When the Guardian of Data Gets Hit
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 03:31:42 GMT
════════════════════════
⌗ Tags: #akira_ransomware #cybersecurity #ransomware_attack #data_breach #hitachi_vantara
Medium
Hitachi Vantara Breach: When the Guardian of Data Gets Hit
In an era where data is the backbone of modern enterprise, the security of that data is paramount. But what happens when a titan in data…
21 views
Daily Writeups
⤷ Title: Security Debt in Smart Contracts: The Hidden Balance Sheet That Can Bankrupt You Overnight
════════════════════════
𐀪 Author: Olympix
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 03:28:18 GMT
════════════════════════
⌗ Tags: #smart_contracts #devsecops #defi #web3 #cybersecurity
Medium
Security Debt in Smart Contracts: The Hidden Balance Sheet That Can Bankrupt You Overnight
Smart contracts power billions of dollars in DeFi protocols, NFT marketplaces, and decentralized apps. But there’s a hidden problem lurking…
20 views
Daily Writeups
⤷ Title: Where to report OT/ICS Infrastructure Vulnerabilities
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 03:21:35 GMT
════════════════════════
⌗ Tags: #industrial_control_system #cybersecurity #vulnerability_management #operational_technology #cisa
Medium
Where to report OT/ICS Vulnerabilities
No security hardening present in Industrial Control Systems
22 views