Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Oct 2025 00:07:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AI_Assisted Malware #APT36 #BOSS Linux #cyber_espionage #DeskRAT #Golang RAT #India #TransparentTribe
Daily CyberSecurity
Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems
Sekoia exposed TransparentTribe (Pakistan-linked APT) targeting Indian government with AI-assisted DeskRAT malware. The Golang RAT infects BOSS Linux via malicious .desktop files and staging servers.
29 views
Daily Writeups
⤷ Title: Are We One Security Flaw Away From Losing Trust in AI-Generated Code?
════════════════════════
𐀪 Author: Gadi Bashvitz
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 18:35:46 GMT
════════════════════════
⌗ Tags: #vibe_coding #ai_assisted_coding #api_security #devsecops #application_security
Medium
Are We One Security Flaw Away From Losing Trust in AI-Generated Code?
About this post:
25 views
Daily Writeups
⤷ Title: Water Saci Campaign Uses LLMs to Convert Malware to Python, Spreads Banking Trojan Via WhatsApp Worm
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 00:19:58 +0000
════════════════════════
⌗ Tags: #Malware #AI_Assisted Malware #Banking Trojan #Brazil #LLM Conversion #Trend Micro #Water Saci #WhatsApp Worm
Daily CyberSecurity
Water Saci Campaign Uses LLMs to Convert Malware to Python, Spreads Banking Trojan Via WhatsApp Worm
Trend Micro exposed Water Saci, a campaign using LLMs to convert malware from PowerShell to Python, accelerating its spread via a WhatsApp worm. The multi-stage attack deploys a trojan capable of VNC mirroring and overlay attacks.
12 views
Daily Writeups
⤷ Title: The 8-Minute Admin: How AI-Powered “LLMjacking” Crushed AWS Defenses in Record Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:47:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_assisted attack #Amazon Bedrock #AWS security #cloud breach 2026 #cybersecurity news #GPU resource abuse #IAM privilege escalation #LLMjacking #S3 bucket misconfiguration #Sysdig report
Penetration Testing Tools
The 8-Minute Admin: How AI-Powered "LLMjacking" Crushed AWS Defenses in Record Time
An adversary successfully infiltrated an Amazon Web Services cloud environment, escalating to full administrative privileges in a mere
27 views
Daily Writeups
⤷ Title: Operation Olalampo: MuddyWater Unleashes AI-Assisted Rust Malware and Telegram C2 in MENA Espionage Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 00:37:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AI_Assisted Malware #CHAR Backdoor #GhostBackDoor #GhostFetch #Group_IB #MENA Cyber Espionage #MuddyWater APT #Operation Olalampo #Telegram C2
Daily CyberSecurity
Operation Olalampo: MuddyWater Unleashes AI-Assisted Rust Malware and Telegram C2 in MENA Espionage Surge
Group-IB exposes Operation Olalampo: MuddyWater's new MENA campaign using AI-assisted Rust malware (CHAR) and Telegram bots for stealthy C2 communication.
34 views
Daily Writeups
⤷ Title: The “GitHub Killer”? OpenAI Secretly Building Its Own AI-Native Code Repository to Rival Microsoft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 04:04:25 +0000
════════════════════════
⌗ Tags: #Technology #AI_assisted programming #Cloud Infrastructure #code hosting #Codex #Developer Tools #github #Microsoft #OpenAI #tech rivalry 2026 #Version Control
Daily CyberSecurity
The "GitHub Killer"? OpenAI Secretly Building Its Own AI-Native Code Repository to Rival Microsoft
Frustrated by GitHub outages, OpenAI is reportedly building its own "agent-first" code-hosting platform. Is this the end of the Microsoft-OpenAI partnership?
17 views
Daily Writeups
⤷ Title: Me and My Claude: Bypassing Static Security Checks in Android Applications
════════════════════════
𐀪 Author: urhnrblpntstr
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 07:01:02 GMT
════════════════════════
⌗ Tags: #ai_assisted_hacking #penetration_testing #android_security #reverse_engineering #mobile_app_security
Medium
Me and My Claude: Bypassing Static Security Checks in Android Applications
A tactical guide to overcoming automated security barriers using AI in Android.
24 views
Daily Writeups
⤷ Title: Inside Canis C2: The ‘Wide Open’ Surveillance Engine Targeting Every Major OS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 03:00:53 +0000
════════════════════════
⌗ Tags: #Malware #AI_assisted development #AiTM #Android APK #Canis C2 #cyber_espionage #Hunt.io #iOS Malware #malware #Paidy #phishing #surveillance
Daily CyberSecurity
Inside Canis C2: The 'Wide Open' Surveillance Engine Targeting Every Major OS
Hunt.io discovers Canis C2, an AI-assisted surveillance framework targeting all major OSs. An exposed API revealed payloads and source code. Read more here.
12 views
Daily Writeups
⤷ Title: AI-Generated RAT “PHANTOMPULSE” Targets Crypto Sector via Social Engineering
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 07:40:38 +0000
════════════════════════
⌗ Tags: #Malware #AI_Assisted Malware #Blockchain C2 #crypto security #cybersecurity #Ethereum #LinkedIn #malware #Obsidian #PHANTOMPULSE #rat #REF6598 #social engineering
Daily CyberSecurity
AI-Generated RAT "PHANTOMPULSE" Targets Crypto Sector via Social Engineering
Elastic uncovers PHANTOMPULSE: A novel RAT abusing Obsidian plugins and blockchain C2. Stay safe from this AI-assisted campaign targeting crypto firms.
14 views
Daily Writeups
⤷ Title: Paper Werewolf Unleashed: Custom Stealers and AI-Assisted Loaders Target Global Industrial Hubs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 12:20:18 +0000
════════════════════════
⌗ Tags: #Malware #AI_Assisted Malware #BI.ZONE #Custom Malware #Cyber Security #EchoGather #Industrial Espionage #infosec #Mythic Framework #Paper Werewolf #PaperGrabber #phishing
Daily CyberSecurity
Paper Werewolf Unleashed: Custom Stealers and AI-Assisted Loaders Target Global Industrial Hubs
Paper Werewolf APT targets industrial sectors with PaperGrabber stealer and EchoGather RAT. Learn to detect their AI-assisted loaders and custom tools.
24 views
Daily Writeups
⤷ Title: Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 23 May 2026 02:03:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #sql_injection #ai_assisted #google_gemma
Medium
Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
AI-assisted SQL Injection testing against a deliberately vulnerable e-commerce application.
23 views
Daily Writeups
⤷ Title: Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 25 May 2026 09:11:08 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #sql_injection #ai_assisted #google_gemma
Medium
Testing SQL Injection Using Google gemma4:31b-cloud on PortSwigger’s Vulnerable Shop
AI-assisted SQL Injection testing against a deliberately vulnerable e-commerce application.
17 views
Daily Writeups
⤷ Title: APT42 TAMECAT Malware Grows with AI-Assisted Phishing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 06:26:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_assisted phishing #APT42 #Credential Phishing #cyber_espionage #Iranian Threat Actor #TA453 #TAMECAT
Daily CyberSecurity
APT42 TAMECAT Malware Grows with AI-Assisted Phishing
At a glance Actor or group APT42 (Iran-linked; also tracked as TA453) Activity type AI-assisted spear-phishing, credential theft, TAMECAT backdoor delivery Targets or victims Defense and governmen…
18 views
Daily Writeups
⤷ Title: How Puffin Air-Gaps Threats While Keeping the Browser Fast
════════════════════════
𐀪 Author: Danny Lin
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:37:11 GMT
════════════════════════
⌗ Tags: #browser_security #cybersecurity #infosec #cloudmosa #ai_assisted_attacks
Medium
How Puffin Air-Gaps Threats While Keeping the Browser Fast
In December 1924, executives from the world's leading lamp makers — Osram, Philips, Tungsram, Tokyo Electric, Associated Electrical…
30 views
Daily Writeups
⤷ Title: The Life and Death of Browser Security
════════════════════════
𐀪 Author: Danny Lin
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 07:54:13 GMT
════════════════════════
⌗ Tags: #browser_security #cloudmosa #infosec #cybersecurity #ai_assisted_threats
Medium
The Life and Death of Browser Security
The browser was never meant to become a battlefield.
16 views
Daily Writeups
⤷ Title: Linux Assisted-by Tag Dropped for AI Patches
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 07:02:00 +0000
════════════════════════
⌗ Tags: #Linux #AI_Assisted Coding #Assisted_by #checkpatch.pl #Kernel Development #Linus Torvalds #Linux Kernel #open_source
Daily CyberSecurity
Linux Assisted-by Tag Dropped for AI Patches
Kernel Maintainers Vote to Retire the Tag At the Linux Kernel Maintainers Summit on October 8, attendees agreed to scrap the Assisted-by tag in patches. On October 14, the related revert patch lan…
11 views
Daily Writeups
⤷ Title: Exposed Attacker Server Reveals AI Agent Toolkit and a Second PaperCut RCE Path
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 01:40:08 +0000
════════════════════════
⌗ Tags: #Malware #AI Agents #AI_assisted exploitation #CVE_2026_81578 #CVE_2026_82078 #Hunt.io #PaperCut #PaperCut RCE #reverse SOCKS5 #XML_RPC
Daily CyberSecurity
Exposed Attacker Server Reveals AI Agent Toolkit and a Second PaperCut RCE Path
At a glance Malware family Custom PaperCut exploit kit, Rust credential collectors, chisel-based reverse SOCKS5 tunnels Threat actor Unnamed; suspected Russian-speaking operator using AI coding ag…
9 views