Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: New Tampered Chef Malware Campaigns Discovered in Productivity Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing #EvilAI #Info_Stealers #Malvertising #Productivity Software #Tampered Chef #threat intelligence
Daily CyberSecurity
New Tampered Chef Malware Campaigns Discovered in Productivity Software
Researchers uncover the Tampered Chef malware cluster disguised as PDF editors and tools. Learn how these stealthy threats bypass corporate defenses.
15 views
Daily Writeups
⤷ Title: CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
════════════════════════
𐀪 Author: phantom_hat
════════════════════════
ⴵ Time: Wed, 27 May 2026 23:02:16 GMT
════════════════════════
⌗ Tags: #vulnerability_research #command_injection #rce #vulnerability #code_review
Medium
CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
﷽
27 views
Daily Writeups
⤷ Title: New GitLab Security Updates Fix Critical Flaws in Duo AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 00:14:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Security #CVE_2026_4868 #Duo AI Workflows #GitLab CE #GitLab EE #GitLab Patch #SecOps
Daily CyberSecurity
New GitLab Security Updates Fix Critical Flaws in Duo AI
The latest GitLab security updates address high-severity bugs. Download the patch to ensure the Duo AI flaw fixed protects your DevSecOps pipeline.
15 views
Daily Writeups
⤷ Title: Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 30 May 2026 01:44:11 +0000
════════════════════════
⌗ Tags: #Malware #Code Security #dependency confusion #DevSecOps #JavaScript dropper #Microsoft Threat Intelligence #npm registry #supply chain attack
Daily CyberSecurity
Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems
Microsoft uncovers a massive npm dependency confusion attack targeting enterprise infrastructure. Learn how these malicious packages discovered run code.
19 views
Daily Writeups
⤷ Title: Fake RVTools Installer Deploys Modular Python RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:01:03 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing Abuse #Modular Python RAT #RVTools Scam #Sectigo Certificate #VBScript Obfuscation
Daily CyberSecurity
Fake RVTools Installer Deploys Modular Python RAT
A fake RVTools installer campaign distributes a modular Python RAT. Learn how this malware uses signed certificates to evade security controls.
18 views
Daily Writeups
⤷ Title: Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 06:20:43 +0000
════════════════════════
⌗ Tags: #Data Leak #Malware #Browser Extensions #ChatGPT Security #Claude #code_injection #data exfiltration #google chrome #Infosec Report #Malicious AI Extensions
Daily CyberSecurity
Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
The Dangerous Scope of Browser Data Exfiltration Artificial Intelligence has rapidly transformed how we work and communicate every single day. Therefore, millions of professionals now rely on auto…
10 views
Daily Writeups
⤷ Title: Sovereign Ascent: Anthropic Deploys Flagship Fable 5 Architecture
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 04:30:47 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic Fable 5 model #Claude subscription promo #code synthesis app #Mythos architecture update #Project Glasswing tech #vision processing tool
Daily CyberSecurity
Sovereign Ascent: Anthropic Deploys Flagship Fable 5 Architecture
Discover the new Anthropic Fable 5 model family. Learn how its advanced vision layer reverse-engineers code from pixels with zero cap access.
10 views
Daily Writeups
⤷ Title: You’re Probably Overpaying for the Tokens That Find Your Vulnerabilities
════════════════════════
𐀪 Author: Jost Faganel
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #anthropic_claude #frontier_models #application_security #agentic_workflow #code_vulnerability
Medium
You’re Probably Overpaying for the Tokens That Find Your Vulnerabilities
The most expensive, most sophisticated security model on our benchmark finished tenth. A model that costs a dollar to run beat it. Here’s…
13 views
Daily Writeups
⤷ Title: NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 01:01:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #Command Injection #CVE_2026_24155 #CVE_2026_24228 #CVE_2026_24252 #Deserialization #NeMo Framework #nvidia
Daily CyberSecurity
NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
NVIDIA has issued an urgent fix for its NeMo Framework, the popular open-source toolkit for building generative AI models. The update tackles an NVIDIA NeMo vulnerability set spanning three separa…
13 views
Daily Writeups
⤷ Title: Remote Code Execution via Custom JS Function in Flowise
════════════════════════
𐀪 Author: Ajith Prabhu
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:38:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_research #code_review #remote_code_execution #application_security
Medium
Remote Code Execution via Custom JS Function in Flowise
During a security review of Flowise v3.1.1, I identified a path that allows authenticated users capable of creating chatflows to achieve…
10 views
Daily Writeups
⤷ Title: [DEEP RESEARCH] When Software Trust Becomes a Rented Service
════════════════════════
𐀪 Author: Wes Young
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 14:46:00 GMT
════════════════════════
⌗ Tags: #infosec #malware #microsoft #code_signing #threat_intelligence
Medium
[DEEP RESEARCH] When Software Trust Becomes a Rented Service
The certificate looked legitimate because that was the product.
8 views
Daily Writeups
⤷ Title: Introducing the Secure Code Review Challenge (Practice Real-World Reviews)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 18:53:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #code_review #software_development #application_security
Medium
Introducing the Secure Code Review Challenge (Practice Real-World Reviews)
📢 I have some exciting news: I’m launching a new series called the Secure Code Review Challenge. Check out the video version of this story…
12 views
Daily Writeups
⤷ Title: Secure Software Development Lifecycle (SSDLC): Building Security into Every Stage
════════════════════════
𐀪 Author: Kunal Arora
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 04:59:22 GMT
════════════════════════
⌗ Tags: #devsecops #software_security #code_security #application_security
Medium
Secure Software Development Lifecycle (SSDLC): Building Security into Every Stage
As organizations develop more software applications to support digital transformation, security must become an integral part of the…
10 views
Daily Writeups
⤷ Title: Web Frameworks: Code Review | TryHackMe Walkthrough (A Beginner’s Guide )
════════════════════════
𐀪 Author: Hibullahi AbdulAzeez
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 14:15:32 GMT
════════════════════════
⌗ Tags: #code_review #tryhackme_walkthrough #cybersecurit #web_security #tryhackme
Medium
Web Frameworks: Code Review | TryHackMe Walkthrough (A Beginner’s Guide )
“Read web app source like an attacker: trace user input to dangerous sinks, triage with Semgrep.”
25 views
Daily Writeups
⤷ Title: SQL Injection Bypass: Why Network-Level Fixes Fail to Secure Vulnerable Applications
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:45:04 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #infosec #cybersecurity #code_review
Medium
SQL Injection Bypass: Why Network-Level Fixes Fail to Secure Vulnerable Applications
Executive Summary
7 views
Daily Writeups
⤷ Title: From Source Code Disclosure to a Hardcoded Backdoor: How I Achieved Full Authentication Bypass
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:31:00 GMT
════════════════════════
⌗ Tags: #code_review #infosec #web_security #cybersecurity #bug_bounty
Medium
From Source Code Disclosure to a Hardcoded Backdoor: How I Achieved Full Authentication Bypass
Executive Summary
9 views
Daily Writeups
⤷ Title: CVE-2026-15409: SonicWall SMA1000 SSRF Vulnerability (CVSS 10.0) Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 00:00:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #SMA1000 #SonicWall #ssrf
Daily CyberSecurity
CVE-2026-15409: SonicWall SMA1000 SSRF Vulnerability (CVSS 10.0) Exploited in the Wild
TL;DR SonicWall has released hotfixes for two actively exploited flaws in SMA1000 secure access appliances. The SonicWall SMA1000 SSRF vulnerability, tracked as CVE-2026-15409, carries a maximum C…
7 views
Daily Writeups
⤷ Title: NGINX Code Execution Vulnerability CVE-2026-42533 Patched Alongside Two Memory Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 02:04:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_42533 #CVE_2026_56434 #CVE_2026_60005 #F5 #nginx
Daily CyberSecurity
NGINX Code Execution Vulnerability CVE-2026-42533 Patched Alongside Two Memory Flaws
TL;DR F5 has patched three memory safety flaws in NGINX Plus and NGINX Open Source. The most severe, CVE-2026-42533, is an NGINX code execution vulnerability in the map directive. It scores 9.2 (C…
18 views
Daily Writeups
⤷ Title: Golden Gh0st RAT: Inside the DigiCert Certificate Theft
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:33:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code Signing #CylindricalCanine #DigiCert #Golden Gh0st RAT #GoldenEyeDog #SmartScreen
Information Security News
Golden Gh0st RAT: Inside the DigiCert Certificate Theft
Cybercriminals have found a way to weaponise Windows’ faith in digital signatures. They compromised the workstation of a DigiCert employee and intercepted certificates bound for the company&…
10 views
Daily Writeups
⤷ Title: Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 22:56:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #code_review #software_development #application_security
Medium
Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)
📢 The solution to Challenge #1: Schooled is live. Watch the video walkthrough here, or read the full write-up on GitHub.
5 views