Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand
════════════════════════
𐀪 Author: Arvind Kumar
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 02:02:42 GMT
════════════════════════
⌗ Tags: #reverse_proxy #api_security #system_design_interview #forward_proxy #microservices
Medium
Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand
There are few networking components as critical — and as misunderstood — as forward proxies and reverse proxies. Both act as…
30 views
Daily Writeups
⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
Medium
Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…
26 views
Daily Writeups
⤷ Title: Security Fundamentals — Core concepts
════════════════════════
𐀪 Author: Suraj Bhandari
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 10:49:33 GMT
════════════════════════
⌗ Tags: #security #system_design_interview #api_security #software_architecture #microservices
Medium
Security Fundamentals — Core concepts
Microservices security in depth
46 views
Daily Writeups
⤷ Title: API Key vs OAuth vs mTLS — When to Use What
════════════════════════
𐀪 Author: Suraj Bhandari
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 10:09:34 GMT
════════════════════════
⌗ Tags: #information_technology #api_security #microservices #security #java
Medium
API Key vs OAuth vs mTLS — When to Use What
When we build or consume APIs, one of the first questions is:  “How should this API be secured?”
64 views
Daily Writeups
⤷ Title: Building a Cleaner Authentication to Turn JWT Payloads into Backend Ready Headers with APISIX
════════════════════════
𐀪 Author: Umair
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 15:04:28 GMT
════════════════════════
⌗ Tags: #software_engineering #cloud_computing #devops #microservices #api_security
Medium
Building a Cleaner Authentication to Turn JWT Payloads into Backend Ready Headers with APISIX
Working with APISIX often feels like working with a router that can think for itself. You send it a request, and instead of blindly…
40 views
Daily Writeups
⤷ Title: Authentication & Authorization Patterns for APIs, Microservices, MCP, and A2A
════════════════════════
𐀪 Author: QuarkAndCode
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 22:16:09 GMT
════════════════════════
⌗ Tags: #microservices_security #api_security #authentication #ai_agent_security #authorization
Medium
Authentication & Authorization Patterns for APIs, Microservices, MCP, and A2A
Authentication and authorization are at the heart of nearly every secure digital interaction, whether it is a basic login or an AI agent…
32 views
Daily Writeups
⤷ Title: Your API Can DDoS Itself
════════════════════════
𐀪 Author: Think Data
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 07:49:42 GMT
════════════════════════
⌗ Tags: #data_engineering #application_security #microservices #api #software_development
Medium
Your API Can DDoS Itself
Sometimes the most dangerous traffic doesn’t come from users. It comes from your own service.
26 views
Daily Writeups
⤷ Title: How WSO2 API Manager Helps Secure APIs in Microservices Architecture
════════════════════════
𐀪 Author: Nilakshi Madubashini
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 16:45:37 GMT
════════════════════════
⌗ Tags: #wso2 #api_security #microservices #api_management #software_architecture
Medium
How WSO2 API Manager Helps Secure APIs in Microservices Architecture
As someone still learning microservices, I didn’t expect API security to be such a big topic. But the deeper I went, the more I realized…
36 views
Daily Writeups
⤷ Title: Cybersecurity in Modern Backend Systems: Lessons from Real-World Engineering
════════════════════════
𐀪 Author: Türkan BASUT
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 12:23:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #backend #api_security #microservices
Medium
Cybersecurity in Modern Backend Systems: Lessons from Real-World Engineering
In today’s world, cybersecurity is no longer a specialized domain — it is a fundamental responsibility of every software engineer. Whether…
40 views
Daily Writeups
⤷ Title: Building Secure APIs at Scale: A Practical Guide to SSO, MFA, and RBAC
════════════════════════
𐀪 Author: Vaishnavius Apply
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 23:28:13 GMT
════════════════════════
⌗ Tags: #microservices #oauth #software_engineering #backend_development #api_security
Medium
Building Secure APIs at Scale: A Practical Guide to SSO, MFA, and RBAC
Learn how to design scalable and secure APIs using SSO, MFA, JWT, and RBAC in real-world distributed systems.
26 views
Daily Writeups
⤷ Title: Critical Authentication Bypass in Apache HttpClient 5.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:45:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HttpClient #Apache Software Foundation #CVE_2026_40542 #HTTP Components #infosec #Java security #Microservices Security #Mutual Authentication #Patch Alert #SCRAM_SHA_256
Daily CyberSecurity
Critical Authentication Bypass in Apache HttpClient 5.6
Apache HttpClient 5.6 reveals a critical auth flaw (CVE-2026-40542) in SCRAM-SHA-256. Secure your Java microservices—upgrade to 5.6.1 immediately.
31 views
Daily Writeups
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
Daily CyberSecurity
Critical Flaws in Apache Thrift Threaten Multi-Language
Apache Thrift v0.23.0 fixes critical Rust DoS, Java MitM, and Node.js path traversal flaws. Secure your cross-language microservices and upgrade immediately!
28 views
Daily Writeups
⤷ Title: API Security: Defenses Tested in the Wild, Not Just on Paper
════════════════════════
𐀪 Author: CodersWorld
════════════════════════
ⴵ Time: Mon, 18 May 2026 03:46:00 GMT
════════════════════════
⌗ Tags: #microservices #software_development #software_engineering #programming #api_security
Medium
API Security: Defenses Tested in the Wild, Not Just on Paper
APIs are under fire. Every single day. Not in theory. Not in slides. In production.
37 views
Daily Writeups
⤷ Title: Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
════════════════════════
𐀪 Author: Ujjawal Rohra
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:08:53 GMT
════════════════════════
⌗ Tags: #software_development #backend_development #api_security #spring_boot #microservices
Medium
Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
DDoS and abuse can crash your API. Rate limiting prevents it.
16 views
Daily Writeups
⤷ Title: Weaponizing Logs: How Attackers Crash Apps via Synchronous Logging (And How ELK Fixes It)
════════════════════════
𐀪 Author: Pau Dang
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 19:41:00 GMT
════════════════════════
⌗ Tags: #microservices #cybersecurity #nodejs #software_architecture #hacking
Medium
Weaponizing Logs: How Attackers Crash Apps via Synchronous Logging (And How ELK Fixes It)
When the very system designed to monitor your application becomes the vector that takes it down.
24 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
42 views
Daily Writeups
⤷ Title: Token Authentication in Microservices
════════════════════════
𐀪 Author: Bojjapavithradurga
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 07:20:57 GMT
════════════════════════
⌗ Tags: #authentication #microservices #software_architecture #jwt #api_security
Medium
Token Authentication in Microservices
Ever wondered how apps know who you are and what you’re allowed to do? Let’s break down token authentication from scratch — with real…
35 views
Daily Writeups
⤷ Title: Why the Top 5% of Engineers Think About API Security Very Differently Than Everyone Else?
════════════════════════
𐀪 Author: Lets Learn Now
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 13:41:01 GMT
════════════════════════
⌗ Tags: #software_development #microservices #security #software_engineering #api_security
Medium
Why the Top 5% of Engineers Think About API Security Very Differently Than Everyone Else?
How Fortune 100 Companies Really Secure Their APIs
26 views
Daily Writeups
⤷ Title: Every Company Has Hundreds of APIs. Why Are They Still So Hard to Manage?
════════════════════════
𐀪 Author: Ishan Madusanka
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 12:58:23 GMT
════════════════════════
⌗ Tags: #wso2 #api_security #software_architecture #microservices #api_management
Medium
Every Company Has Hundreds of APIs. Why Are They Still So Hard to Manage?
The problem nobody planned for
60 views
Daily Writeups
⤷ Title: Securing API Communication in Google Cloud: Best Practices for Internal, B2B, and Cross-Cloud…
════════════════════════
𐀪 Author: Nasim Kabi
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 22:23:49 GMT
════════════════════════
⌗ Tags: #google_cloud_platform #cybersecurity #microservices #api_security #cloud_architecture
Medium
Securing API Communication in Google Cloud: Best Practices for Internal, B2B, and Cross-Cloud Integrations
Understanding private networking, HTTPS, OAuth 2.0, API keys, workload identity, and mutual TLS (mTLS) for secure enterprise API…
22 views