Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Sql’de Kullanılan Bazı Terimler 13-)
════════════════════════
𐀪 Author: Taner Özer
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 10:42:04 GMT
════════════════════════
⌗ Tags: #sql_injection #sql_hosting #sqlkavramlari
Medium
Sql’de Kullanılan Bazı Terimler 13-)
60-)SQL Injection
SQL Injection, kötü niyetli kişilerin veritabanı sorgularını manipüle ederek yetkisiz veri erişimi sağladığı bir güvenlik…
68 views
Daily Writeups
⤷ Title: WhatsApp by the Numbers: What Anonymized Metadata from a Security Flaw Reveals
════════════════════════
𐀪 Author: mh
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 16:36:23 +0000
════════════════════════
⌗ Tags: #Privacy #Vulnerability #metadata #security issue #WhatsApp
Mobile Hacker
WhatsApp by the Numbers: What Anonymized Metadata from a Security Flaw Reveals - Mobile Hacker
The dataset originates from metadata published in connection with a security study titled “Trivial WhatsApp Security Issue Exposed 3.5 Billion Phone Numbers.” That research demonstrated how a simple flaw could reveal phone numbers globally.
60 views
Daily Writeups
⤷ Title: ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 22:54:00 +0530
════════════════════════
⌗ Tags: No_Tags
63 views
Daily Writeups
⤷ Title: Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 22:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
63 views
Daily Writeups
⤷ Title: Everest Ransomware Says It Breached Brazilian Energy Giant Petrobras
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 17:41:34 +0000
════════════════════════
⌗ Tags: #Cyber Attacks #Security #Brazil #Cyber Attack #Cybersecurity #Everest #Petrobras #Ransomware #SAExploration #South America
Hackread
Everest Ransomware Says It Breached Brazilian Energy Giant Petrobras
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
78 views
Daily Writeups
⤷ Title: Android Quick Share Now Interoperable with AirDrop, Starting with Pixel 10!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 03:17:45 +0000
════════════════════════
⌗ Tags: #Android #AirDrop #android #Apple #File Transfer #Interoperability #ios #Pixel 10 #Quick Share #Rust #Tech War
Daily CyberSecurity
Android Quick Share Now Interoperable with AirDrop, Starting with Pixel 10!
Google's Quick Share now works with Apple AirDrop for seamless file transfer between Pixel 10 and iPhone/Mac. Built with secure Rust for peer-to-peer sharing.
52 views
Daily Writeups
⤷ Title: Chrome Testing Vertical Tabs: New UI Feature Spotted in Canary Build
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 03:14:45 +0000
════════════════════════
⌗ Tags: #Technology #Browser UI #chrome #Chrome Canary #Chromium #Feature Testing #Productivity #Vertical Tabs #web browser
Daily CyberSecurity
Chrome Testing Vertical Tabs: New UI Feature Spotted in Canary Build
A vertical tab feature, similar to Edge's, has appeared in the Chrome Canary build 144.0 for testing, hinting at a major UI and productivity update coming soon.
45 views
Daily Writeups
⤷ Title: OpenAI Rolls Out Group Chat Globally: Collaborate with up to 20 People in ChatGPT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 03:09:56 +0000
════════════════════════
⌗ Tags: #Technology #AI Assistant #ChatGPT #collaboration #Feature Rollout #Group Chat #OpenAI #Planning #Project Work #Social AI
Daily CyberSecurity
OpenAI Rolls Out Group Chat Globally: Collaborate with up to 20 People in ChatGPT
ChatGPT's new Group Chat feature is now available globally for all users. Share conversations with up to 20 people for planning or projects, separate from private memory.
33 views
Daily Writeups
⤷ Title: Google’s Nano Banana Pro Model Solves AI Image Text Rendering with Gemini 3 Pro
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 03:04:59 +0000
════════════════════════
⌗ Tags: #Technology #AI Image Generation #Gemini 3 Pro #Generative AI #google #image editing #Nano Banana Pro #SynthID #Text Rendering
Daily CyberSecurity
Google's Nano Banana Pro Model Solves AI Image Text Rendering with Gemini 3 Pro
Google released Nano Banana Pro, its new Gemini 3 Pro-powered image model, featuring clear, accurate text rendering, 4K export, and built-in editing tools.
21 views
Daily Writeups
⤷ Title: Salesforce Revokes Access Tokens: Gainsight App Breach May Have Exposed Customer Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 02:58:47 +0000
════════════════════════
⌗ Tags: #Data Leak #AppExchange #Cloud Security #CRM #Data Breach #Gainsight #OAuth Token #Salesforce #security alert #supply chain attack
Daily CyberSecurity
Salesforce Revokes Access Tokens: Gainsight App Breach May Have Exposed Customer Data
Salesforce revoked all Gainsight app tokens and removed the app from the AppExchange after finding unusual activity that may have exposed customer data via the connection.
29 views
Daily Writeups
⤷ Title: Sturnus Trojan Bypasses WhatsApp/Signal Encryption & Takes Over Android Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 00:11:30 +0000
════════════════════════
⌗ Tags: #Malware #Android trojan #banking malware #cybersecurity news #Device Takeover #Encrypted Messaging Bypass #mobile security #MTI Security #Sturnus #ThreatFabric
Daily CyberSecurity
Sturnus Trojan Bypasses WhatsApp/Signal Encryption & Takes Over Android Devices
The new Sturnus Android banking trojan bypasses end-to-end encryption on WhatsApp & Signal and enables full device takeover for hidden financial fraud.
25 views
Daily Writeups
⤷ Title: Critical WSUS RCE (CVE-2025-59287) Actively Exploited to Deploy ShadowPad Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 00:06:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #AhnLab #APT #backdoor #CVE_2025_59287 #cyber attack #rce #security advisory #ShadowPad #Windows Server #WSUS
Daily CyberSecurity
Critical WSUS RCE (CVE-2025-59287) Actively Exploited to Deploy ShadowPad Backdoor
Threat actors are actively exploiting a new WSUS RCE flaw (CVE-2025-59287) to gain SYSTEM shells and deploy the dangerous ShadowPad backdoor. Patch immediately!
60 views
Daily Writeups
⤷ Title: SonicWall Warns of New SonicOS SSLVPN Pre-Auth Buffer Overflow Vulnerability (CVE-2025-40601)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 00:01:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2025_40601 #Denial of Service #firewall #network_security #patch #SonicOS #SonicWall #SSLVPN
Daily CyberSecurity
SonicWall Warns of New SonicOS SSLVPN Pre-Auth Buffer Overflow Vulnerability (CVE-2025-40601)
SonicWall reports a pre-auth stack-based buffer overflow flaw (CVE-2025-40601) in SonicOS SSLVPN, allowing remote DoS attacks. Patches and mitigation are available.
90 views
Daily Writeups
⤷ Title: Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 11:02:00 +0530
════════════════════════
⌗ Tags: No_Tags
85 views
Daily Writeups
⤷ Title: NHS Warns of PoC Exploit for 7-Zip Symbolic Link–Based RCE Vulnerability
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 21:57:00 +0530
════════════════════════
⌗ Tags: No_Tags
80 views
Daily Writeups
⤷ Title: SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 13:35:00 +0530
════════════════════════
⌗ Tags: No_Tags
64 views
Daily Writeups
⤷ Title: Sneaky 2FA Toolkit Upgraded: Uses ‘Browser-in-the-Browser’ to Steal Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:57:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Browser In The Browser #Credential Theft #cybersecurity #Microsoft Phishing #phishing #Push Security #Sneaky 2FA #Social Engineering
Penetration Testing Tools
Sneaky 2FA Toolkit Upgraded: Uses 'Browser-in-the-Browser' to Steal Credentials
The Sneaky 2FA phishing toolkit now uses the Browser-in-the-Browser technique to create highly convincing fake login windows, making credential theft easier.
52 views
Daily Writeups
⤷ Title: LG Energy Solution Hacked: Akira Group Claims Theft of 1.7 TB of Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:53:48 +0000
════════════════════════
⌗ Tags: #Data Leak #Akira Ransomware #Battery Manufacturer #cyber attack #Data Theft #Extortion #FBI Advisory #LG Energy Solution #LG Energy Solution confirmed an overseas facility was hit by a cyber attack; the Akira ransomware group claims to have stolen a massive 1.7 TB of internal data. #Manufacturing Security
Penetration Testing Tools
LG Energy Solution Hacked: Akira Group Claims Theft of 1.7 TB of Data
LG Energy Solution confirmed an overseas facility was hit by a cyber attack; the Akira ransomware group claims to have stolen a massive 1.7 TB of internal data.
34 views
Daily Writeups
⤷ Title: Samsung AppCloud Sparks Privacy Fear: Accused of Being ‘Undeletable Spyware’
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:51:17 +0000
════════════════════════
⌗ Tags: #Malware #Android #AppCloud #Digital Rights #ironSource #pre_installed apps #Privacy Concern #Samsung Galaxy #Spyware #System Permissions
Penetration Testing Tools
Samsung AppCloud Sparks Privacy Fear: Accused of Being 'Undeletable Spyware'
Controversy hits Samsung's budget Galaxy phones over the pre-installed AppCloud service (from ironSource), which critics label "undeletable spyware" with system-level access.
25 views
Daily Writeups
⤷ Title: Cloudflare Outage: Internal Failure Shuts Down Sites, Exposing Hidden Security Gaps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:29:05 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bot Management #Cloudflare #cybersecurity #DDoS protection #internet infrastructure #Outage #Security Perimeter #Single Point of Failure
Penetration Testing Tools
Cloudflare Outage: Internal Failure Shuts Down Sites, Exposing Hidden Security Gaps
A database error in Cloudflare's Bot Management system caused a global outage, forcing sites to run without security filtering and renewing single point of failure risks.
29 views