Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Cross-Site Request Forgery (CSRF): Understanding and Defending Against a Silent Web Threat
════════════════════════
𐀪 Author: Emma Lateyron
════════════════════════
ⴵ Time: Sun, 17 Aug 2025 22:26:51 GMT
════════════════════════
⌗ Tags: #csrf #cybersecurity
Medium
Cross-Site Request Forgery (CSRF): Understanding and Defending Against a Silent Web Threat
Introduction: The Deceptive Nature of CSRF
30 views
Daily Writeups
⤷ Title: Understanding and Preventing Injection Attacks
════════════════════════
𐀪 Author: Emma Lateyron
════════════════════════
ⴵ Time: Sun, 17 Aug 2025 22:16:40 GMT
════════════════════════
⌗ Tags: #command_injection #cybersecurity #xss_vulnerability #sql_injection
Medium
Understanding and Preventing Injection Attacks
Injection Attacks: One of Cybersecurity’s Most Dangerous Foes
26 views
Daily Writeups
⤷ Title: ⭐30-Day Personal Pentesting Challenge Complete!⭐
════════════════════════
𐀪 Author: Chai
════════════════════════
ⴵ Time: Sun, 17 Aug 2025 22:02:18 GMT
════════════════════════
⌗ Tags: #30_day_challenge #tryhackme #personal_growth #ethical_hacking #pentesting
Medium
⭐30-Day Personal Pentesting Challenge Complete!⭐
A month ago, I decided to test my own limits by taking on a personal pentesting challenge: 30 days of ethically hacking, 29 TryHackMe…
29 views
Daily Writeups
⤷ Title: Dutch Traffic Cameras Go Dark After Major Cyberattack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:27:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Critical Infrastructure #cyberattack #cybersecurity #Government #IT systems #Netherlands #traffic cameras
Penetration Testing Tools
Dutch Traffic Cameras Go Dark After Major Cyberattack
A major cyberattack on the Dutch public prosecutor's office has forced the shutdown of traffic cameras and other systems, disrupting law enforcement services.
23 views
Daily Writeups
⤷ Title: Unmasking the New Sanctions: How a Crypto Exchange Evaded Authorities and Supported Ransomware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:24:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals
Penetration Testing Tools
Unmasking the New Sanctions: How a Crypto Exchange Evaded Authorities and Supported Ransomware
U.S. authorities sanction the crypto exchange Garantex again, accusing it of using a new platform to evade restrictions and launder over $100M for cybercriminals.
23 views
Daily Writeups
⤷ Title: Urgent Security Patches: Zoom and Xerox Address Critical Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:16:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE #cybersecurity #privilege escalation #RCE #Security Patch #vulnerability #Xerox #Zoom
Penetration Testing Tools
Urgent Security Patches: Zoom and Xerox Address Critical Flaws
Zoom and Xerox have patched critical vulnerabilities in their software, including a privilege escalation flaw in Zoom and a dangerous RCE bug in Xerox FreeFlow Core.
12 views
Daily Writeups
⤷ Title: PhantomCard: The New Android Malware Using NFC to Steal Your Money
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:11:05 +0000
════════════════════════
⌗ Tags: #Malware #Android #banking trojan #cybersecurity #Financial Fraud #malware #mobile security #NFC #PhantomCard
Penetration Testing Tools
PhantomCard: The New Android Malware Using NFC to Steal Your Money
A new Android malware campaign called PhantomCard is targeting banking customers with a sophisticated NFC relay attack to conduct contactless financial fraud.
13 views
Daily Writeups
⤷ Title: Windows 11 Finally Fixes Dark Mode Inconsistencies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 01:37:18 +0000
════════════════════════
⌗ Tags: #Windows #Dark Mode #File Explorer #Microsoft #User Interface #Windows 11 #Windows Update
Daily CyberSecurity
Windows 11 Finally Fixes Dark Mode Inconsistencies
Microsoft is finally fixing Windows 11's jarring dark mode inconsistencies by bringing a consistent dark theme to File Explorer's dialog windows.
12 views
Daily Writeups
⤷ Title: Beyond GPT-5: Inside Sam Altman’s Multibillion-Dollar Plan to Build an AI Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 01:31:52 +0000
════════════════════════
⌗ Tags: #Technology #AI #Brain_Computer Interface #ChatGPT #data centers #GPT_5 #Jony Ive #OpenAI #Sam Altman
Daily CyberSecurity
Beyond GPT-5: Inside Sam Altman’s Multibillion-Dollar Plan to Build an AI Empire
OpenAI CEO Sam Altman reveals a bold vision beyond GPT-5, including multi-trillion-dollar data center investments, a new AI hardware device with Jony Ive, and a BCI venture.
12 views
Daily Writeups
⤷ Title: New Firmware Flaw in AMI Aptio UEFI Threatens Persistent System Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:46:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AMI #CERT/CC #CVE #cybersecurity #firmware #SMM #Supply Chain #UEFI #Vulnerability
Daily CyberSecurity
New Firmware Flaw in AMI Aptio UEFI Threatens Persistent System Compromise
A new vulnerability in AMI Aptio UEFI firmware allows for arbitrary code execution in System Management Mode, a privileged environment that can bypass OS controls.
15 views
Daily Writeups
⤷ Title: Inside UAT-7237, a Chinese APT Group Targeting Taiwan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:42:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #Chinese APT #Cisco Talos #Cyberespionage #cybersecurity #Taiwan #UAT_5918 #UAT_7237
Daily CyberSecurity
Inside UAT-7237, a Chinese APT Group Targeting Taiwan
A new report from Cisco Talos details UAT-7237, a Chinese-speaking APT group targeting Taiwan's web infrastructure with customized open-source tools.
16 views
Daily Writeups
⤷ Title: CVE-2025-48387: Critical tar-fs Vulnerability Exposes Millions to Arbitrary File Writes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:40:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE #cybersecurity #Directory Traversal #Node.js #npm #rce #tar_fs #Vulnerability
Daily CyberSecurity
CVE-2025-48387: Critical tar-fs Vulnerability Exposes Millions to Arbitrary File Writes
A critical directory traversal vulnerability (CVE-2025-48387) in the popular NPM package tar-fs allows attackers to write arbitrary files and gain RCE.
21 views
Daily Writeups
⤷ Title: CrossC2 and ReadNimeLoader: Inside the Multi-Stage Intrusions Targeting Linux and Windows Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:34:34 +0000
════════════════════════
⌗ Tags: #Malware #BlackBasta #Cobalt Strike #CrossC2 #cybersecurity #JPCERT/CC #Linux #malware #ReadNimeLoader #windows
Daily CyberSecurity
CrossC2 and ReadNimeLoader: Inside the Multi-Stage Intrusions Targeting Linux and Windows Environments
A JPCERT/CC report reveals a new attack campaign using CrossC2 and a custom loader to compromise both Linux and Windows systems.
14 views
Daily Writeups
⤷ Title: PostgreSQL Issues Urgent Security Fixes for High-Severity RCE Flaws in Core Utilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:30:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE #database #pg_dump #PostgreSQL #rce #security update #sql injection #Vulnerability
Daily CyberSecurity
PostgreSQL Issues Urgent Security Fixes for High-Severity RCE Flaws in Core Utilities
A new security update for PostgreSQL fixes three vulnerabilities, including two critical flaws that could lead to remote code execution.
19 views
Daily Writeups
⤷ Title: Beyond Phishing: How AI and Deepfakes Are Powering a New Generation of Scams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:28:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #Crime #cybersecurity #Deepfakes #kaspersky #phishing #Scams #social engineering
Daily CyberSecurity
Beyond Phishing: How AI and Deepfakes Are Powering a New Generation of Scams
A new report from Kaspersky warns that cybercriminals are now using AI, deepfakes, and sophisticated social engineering to create nearly undetectable scams.
13 views
Daily Writeups
⤷ Title: REVENANT: The Experimental Framework That Infects AI Models and Evades Traditional Defenses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:20:25 +0000
════════════════════════
⌗ Tags: #Malware #AI security #Attack Framework #Cybercrime #cybersecurity #Cyfirma #malware #persistence #REVENANT
Daily CyberSecurity
REVENANT: The Experimental Framework That Infects AI Models and Evades Traditional Defenses
CYFIRMA's new report reveals REVENANT, a malware-free attack framework that can achieve long-term persistence by hiding in AI models and document fonts.
16 views
Daily Writeups
⤷ Title: CVE-2025-7353 (CVSS 9.8): Rockwell Automation Issues Urgent Warning for ControlLogix Modules
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:16:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ControlLogix #Critical Infrastructure #CVE_2025_7353 #cybersecurity #ICS #OT Security #RCE vulnerability #Rockwell Automation
Daily CyberSecurity
CVE-2025-7353 (CVSS 9.8): Rockwell Automation Issues Urgent Warning for ControlLogix Modules
A critical RCE vulnerability (CVSS 9.8) in Rockwell's ControlLogix modules poses a severe risk to industrial systems. Update immediately to firmware v12.001.
15 views
Daily Writeups
⤷ Title: Pakistan Under Cyberattack: Unmasking the Blue Locker Ransomware Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:12:02 +0000
════════════════════════
⌗ Tags: #Malware #Blue Locker #Critical Infrastructure #cyberattack #cybersecurity #NCERT #Pakistan #Proton #ransomware
Daily CyberSecurity
Pakistan Under Cyberattack: Unmasking the Blue Locker Ransomware Campaign
Pakistan's critical sectors have been hit by the Blue Locker ransomware. This sophisticated campaign is linked to the Proton malware family and exploits a recent holiday.
13 views
Daily Writeups
⤷ Title: Google Uses AI to Fight Ad Fraud, Reducing Invalid Traffic by 40%
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:09:21 +0000
════════════════════════
⌗ Tags: #Technology #Ad Fraud #Ad Traffic #advertising #AI #Digital Marketing #google #Invalid Traffic #LLMs
Daily CyberSecurity
Google Uses AI to Fight Ad Fraud, Reducing Invalid Traffic by 40%
Google is now using LLMs to combat invalid traffic, successfully reducing ad fraud by 40%. This enhances ad quality for advertisers and publishers.
11 views
Daily Writeups
⤷ Title: Dodi Repacks Malware: Why Your Adblocker Won’t Save You
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 00:08:41 +0000
════════════════════════
⌗ Tags: #Malware #Cybercrime #cybersecurity #Dodi Repacks #HijackLoader #information stealer #LummaC2 #malware #Pirated Games
Daily CyberSecurity
Dodi Repacks Malware: Why Your Adblocker Won’t Save You
A new report reveals a dangerous malware campaign on a popular game piracy site, proving that even with an adblocker, pirated software is a huge risk.
13 views