Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Kimsuky APT Is Using Social Engineering and AppleSeed Malware to Spy on South Korea
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:58:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #AppleSeed malware #APT #cyber_espionage #Genians #Kimsuky #North Korea #social engineering #south korea
Daily CyberSecurity
Kimsuky APT Is Using Social Engineering and AppleSeed Malware to Spy on South Korea
A new report reveals that the North Korean Kimsuky APT is using social engineering on Facebook and Telegram to deliver AppleSeed malware to targets in South Korea.
16 views
Daily Writeups
⤷ Title: A Massive Coordinated Attack Is Probing Cisco ASA Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:51:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #botnet #cisco #Cisco ASA #cyber attack #cybersecurity #GreyNoise #reconnaissance #Vulnerability
Daily CyberSecurity
A Massive Coordinated Attack Is Probing Cisco ASA Devices
A new GreyNoise report warns of two massive scanning spikes targeting Cisco ASA devices, raising concerns that attackers may be preparing to exploit a new vulnerability.
14 views
Daily Writeups
⤷ Title: Acronis TRU Uncovers Surge in ScreenConnect Abuse with Dual-RAT Deployment
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:41:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Acronis #AsyncRAT #ConnectWise ScreenConnect #cybersecurity #malware #PureHVNC #Remote Access Trojan #RMM tool abuse #social engineering
Daily CyberSecurity
Acronis TRU Uncovers Surge in ScreenConnect Abuse with Dual-RAT Deployment
A new campaign is abusing the legitimate RMM tool ScreenConnect to deliver RATs like AsyncRAT and PureHVNC, a trend that is on the rise, targeting US organizations.
9 views
Daily Writeups
⤷ Title: CVE-2025-53187: Critical RCE in ABB ASPECT BMS with CVSS 9.8, No Prior Authentication
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:34:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABB #ASPECT BMS #Authentication Bypass #building management system #CVE_2025_53187 #CVSS 9.8 #Denial of Service #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
CVE-2025-53187: Critical RCE in ABB ASPECT BMS with CVSS 9.8, No Prior Authentication
A critical flaw in ABB ASPECT BMS (CVE-2025-53187) allows unauthenticated remote attackers to achieve RCE with a CVSS 9.8 score. Admins must patch or disconnect systems.
10 views
Daily Writeups
⤷ Title: Beyond Simple Scripts: A New XWorm Campaign Uses Multi-Stage Stealth
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 00:05:39 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #Cybercrime #cybersecurity #LNK File #malware #phishing #Trellix #windows #XWorm
Daily CyberSecurity
Beyond Simple Scripts: A New XWorm Campaign Uses Multi-Stage Stealth
A new report reveals a sophisticated XWorm backdoor campaign that uses .lnk files and a multi-stage infection chain to gain stealthy and persistent control of Windows systems.
14 views
Daily Writeups
⤷ Title: NotDoor: A New Backdoor by Russia’s APT28 Is Hiding in Microsoft Outlook Macros
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 00:00:07 +0000
════════════════════════
⌗ Tags: #Malware #APT28 #cybersecurity #DLL side_loading #Fancy Bear #malware #Microsoft Outlook #NotDoor #VBA Macro
Daily CyberSecurity
NotDoor: A New Backdoor by Russia's APT28 Is Hiding in Microsoft Outlook Macros
A new report reveals NotDoor, a backdoor by Russia's APT28 that hides in Microsoft Outlook macros and uses specific email triggers to exfiltrate data and execute commands.
9 views
Daily Writeups
⤷ Title: How AI-Powered Proxy Tools Helped Me Safeguard My Brand from Digital Threats
════════════════════════
𐀪 Author: Blanche X
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:55:45 GMT
════════════════════════
⌗ Tags: #proxy_server #ai #brand_protection #cybersecurity
Medium
How AI-Powered Proxy Tools Helped Me Safeguard My Brand from Digital Threats
As my business grew, so did the risks associated with maintaining an online presence. Brand impersonation, counterfeit websites, and…
7 views
Daily Writeups
⤷ Title: Running a Blockchain locally can help restore data from a ransomware attack using the IPFS File…
════════════════════════
𐀪 Author: Prabhu Perumal
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:53:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #ipfs #ransomware
Medium
Running a Blockchain locally can help restore data from a ransomware attack using the IPFS File System.
My Blog — https://www.praboo.in/
8 views
Daily Writeups
⤷ Title: Proactive Brand Protection: Leveraging AI-Driven Monitoring Tools for Digital Security
════════════════════════
𐀪 Author: Novada
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:48:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #proxy #novadax #brand_protection
Medium
Proactive Brand Protection: Leveraging AI-Driven Monitoring Tools for Digital Security
In the ever-evolving digital landscape, businesses face growing threats to their brand identity. From counterfeit websites to fake social…
4 views
Daily Writeups
⤷ Title: TryHackMe — The Valley Walkthrough
════════════════════════
𐀪 Author: spdr0x
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:48:29 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #pentesting #tryhackme_walkthrough #tryhackme
Medium
TryHackMe — The Valley Walkthrough
In this challenge, I took on The Valley room from TryHackMe, a scenario blending web exploitation, network forensics, and privilege…
5 views
Daily Writeups
⤷ Title: The Hidden Security Costs of AI for SMEs — and How to Stay Ahead
════════════════════════
𐀪 Author: Roger Millar
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:40:02 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #small_business_owner #ai #artificial_intelligence
Medium
The Hidden Security Costs of AI for SMEs — and How to Stay Ahead
AI can double productivity or double risk. The difference is governance, not hype.
5 views
Daily Writeups
⤷ Title: Bandit Level 0
════════════════════════
𐀪 Author: Nibal marazqah
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:17:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #overthewire #bandit #ctf #ctf_writeup
Medium
Bandit Level 0
OverTheWire
5 views
Daily Writeups
⤷ Title: AI Malware Hiding in Cute Panda Pics?! (Polyglot File EXPLAINED)
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:12:58 GMT
════════════════════════
⌗ Tags: #ai_hacking #cybersecurity #polyglot #chatgpt5 #ai_malware
Medium
AI Malware Hiding in Cute Panda Pics?! (Polyglot File EXPLAINED)
DON’T download this image! (contains hidden malware)
19 views
Daily Writeups
⤷ Title: Stop the Cloud Chaos
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:12:54 GMT
════════════════════════
⌗ Tags: #cloud #cloud_security #devops #cybersecurity #cyber_security_awareness
Medium
Stop the Cloud Chaos
How Code-to-Cloud Visibility Prevents Disasters Before They Go Live
13 views
Daily Writeups
⤷ Title: The Quantum Storm Is Coming and Why Post Quantum Security Matters Now
════════════════════════
𐀪 Author: Johnson William
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:02:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #future_of_technology #blockchain #quantum_computing #post_quantum_security
Medium
The Quantum Storm Is Coming and Why Post Quantum Security Matters Now
In the world of technology, threats often feel distant until they are suddenly at our doorstep. Right now, one of those looming threats is…
11 views
Daily Writeups
⤷ Title: A Practical Guide to Endpoint Detection and Response (EDR)
════════════════════════
𐀪 Author: Samina Perveen
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 00:52:52 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #cybersecurity #python_in_plain_english #edr
Medium
A Practical Guide to Endpoint Detection and Response (EDR)
How a Dorm Room Hack Taught Me to Protect My Devices—and My Future
13 views
Daily Writeups
⤷ Title: Windows Update Is Causing Unexpected UAC Prompts and App Installation Issues
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 03:59:53 +0000
════════════════════════
⌗ Tags: #Windows #CVE_2025_50173 #KB5063878 #Microsoft #UAC prompts #Windows 10 #Windows 11 #Windows Installer #Windows Update
Daily CyberSecurity
Windows Update Is Causing Unexpected UAC Prompts and App Installation Issues
Microsoft's August security updates are causing unexpected UAC prompts and app installation issues. The problem affects all Windows versions and stems from a fix for CVE-2025-50173.
11 views
Daily Writeups
⤷ Title: Poke Is Back: Facebook Revives a Classic Feature with a Gamified Twist
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 03:55:02 +0000
════════════════════════
⌗ Tags: #Technology #facebook #gamification #Mark Zuckerberg #Meta #Nostalgia #poke #Social Media
Daily CyberSecurity
Poke Is Back: Facebook Revives a Classic Feature with a Gamified Twist
11 views
Daily Writeups
⤷ Title: Cloudflare 1.1.1.1 Hit by 12 Unauthorized Certificates: Fina CA’s Misissuance Raises Microsoft Trust Concerns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 03:50:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #1.1.1.1 #Certificate Transparency #cloudflare #cybersecurity #dns #Fina RDC 2020 #Microsoft #TLS Certificates
Daily CyberSecurity
Cloudflare 1.1.1.1 Hit by 12 Unauthorized Certificates: Fina CA’s Misissuance Raises Microsoft Trust Concerns
Cloudflare’s 1.1.1.1 was hit by 12 unauthorized certificates from Fina CA, raising PKI concerns and spotlighting Microsoft’s continued trust.
6 views
Daily Writeups
⤷ Title: PoC Available: macOS Sequoia Flaw Allows Keychain Dump and TCC Bypass (CVSS 9.8)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 03:20:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #gcore vulnerability #Keychain #macOS Sequoia #privilege escalation #TCC Bypass
Daily CyberSecurity
PoC Available: macOS Sequoia Flaw Allows Keychain Dump and TCC Bypass (CVSS 9.8)
A critical macOS flaw (CVE-2025-24204) in gcore allows a user to read any process memory and bypass TCC. A PoC is public, and patching is urgent.
5 views