Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Notepad Goes Private: Microsoft Adds On-Device AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 04:11:12 +0000
════════════════════════
⌗ Tags: #Windows #AI #Microsoft #notepad++ #NPU #on_device AI #privacy #Technology #Windows 11
Daily CyberSecurity
Notepad Goes Private: Microsoft Adds On-Device AI
Windows 11's Notepad now supports on-device AI, allowing for text generation and summarization without a Microsoft account or cloud connection.
14 views
Daily Writeups
⤷ Title: DLL Hijacking Flaw (CVE-2025-56383) Found in Notepad++, Allowing Arbitrary Code Execution, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:02:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2025_56383 #DLL hijacking #notepad++ #PoC #security #Vulnerability
17 views
Daily Writeups
⤷ Title: Urgent Patch: Notepad++ WinGUp Flaw Allowed Malware to Hijack Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 03:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE #cybersecurity #malware #notepad++ #software update #supply chain attack #Traffic Hijacking #Vulnerability #WinGUp
Daily CyberSecurity
Urgent Patch: Notepad++ WinGUp Flaw Allowed Malware to Hijack Updates
A Notepad++ flaw (now patched in v8.8.9) allowed attackers to hijack the WinGUp update process, serving malware instead of the legitimate executable. Manual update is urged.
24 views
Daily Writeups
⤷ Title: Notepad++ Fixes WinGUp Vulnerability Exploited to Deliver Reconnaissance Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:25:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #AutoUpdater.exe #Code Execution #cybersecurity #Notepad++ #reconnaissance #software update #supply chain attack #WinGUp
Penetration Testing Tools
Notepad++ Fixes WinGUp Vulnerability Exploited to Deliver Reconnaissance Malware
Notepad++ has released version 8.8.9 to remediate a weakness in its WinGUp (GUP.exe) update mechanism. Researchers and users
12 views
Daily Writeups
⤷ Title: Notepad++ Hijacked: State-Sponsored Actors Poisoned Updates for Months
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 07:55:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #Chinese hackers #cybersecurity #malware #notepad++ #Open Source Security #Patch Alert #state_sponsored #supply chain attack #Update Hijack #WinGUp
Daily CyberSecurity
Notepad++ Hijacked: State-Sponsored Actors Poisoned Updates for Months
Notepad++ confirms update infrastructure was compromised by state-sponsored actors targeting specific users. Update to version 8.8.9 immediately.
38 views
Daily Writeups
⤷ Title: Notepad++ Updates Delivered Malware After Hosting Provider Breach
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 17:24:49 +0000
════════════════════════
⌗ Tags: #Cyber Attacks #Malware #Security #Cyber Attack #Cybersecurity #Hosting #Notepad #Notepad++ #Privacy
Hackread
Notepad++ Updates Delivered Malware After Hosting Provider Breach
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
35 views
Daily Writeups
⤷ Title: The “Update” Trap: How State-Sponsored Hackers Hijacked Notepad++ Infrastructure for 6 Months
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 08:01:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese APT #Don Ho #Lotus Blossom #malware #Notepad++ #supply chain attack #Supply Chain Security #update hijack #Violet Typhoon #WinGUp #Zirconium
Penetration Testing Tools
The "Update" Trap: How State-Sponsored Hackers Hijacked Notepad++ Infrastructure for 6 Months
The lead developer of the ubiquitous text editor Notepad++ has disclosed a formidable security breach that compromised the
28 views
Daily Writeups
⤷ Title: The “Update” Trap: How State-Sponsored Hackers Hijacked Notepad++ Infrastructure for 6 Months
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:17:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Chinese APT #Chrysalis backdoor #Don Ho #Lotus Blossom #malware #Notepad++ #supply chain attack #Supply Chain Security #update hijack #Violet Typhoon #WinGUp #Zirconium
Penetration Testing Tools
The "Update" Trap: How State-Sponsored Hackers Hijacked Notepad++ Infrastructure for 6 Months
For nearly half a year, the ubiquitous text editor Notepad++ inadvertently disseminated malicious payloads rather than legitimate refinements.
11 views
Daily Writeups
⤷ Title: Can Notepad++ Be Hacked? How MSPs Identify Real vs Fake Threats
════════════════════════
𐀪 Author: SafeAeon Inc.
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 16:00:52 GMT
════════════════════════
⌗ Tags: #notepad_plus_plus #notepad_hacks #hacking #cyberattack #malware
Medium
Can Notepad++ Be Hacked? How MSPs Identify Real vs Fake Threats
Notepad++ update traffic was hacked starting in June 2025. The hack remained undisclosed until the Notepad++ hosting developer issued a…
19 views
Daily Writeups
⤷ Title: Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy “Chrysalis”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:32:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Chrysalis #DLL side_loading #Elise #Lotus Blossom #Malware Analysis #Microsoft Warbird #notepad++ #Rapid7 #Spring Dragon #supply chain attack
Daily CyberSecurity
Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy "Chrysalis"
Lotus Blossom compromises Notepad++ infrastructure to deploy "Chrysalis" malware. Rapid7 reveals the group using Microsoft Warbird to evade detection.
26 views
Daily Writeups
⤷ Title: Surgical Espionage: The “Chrysalis” Backdoor and the 6-Month Hijack of Notepad++
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:54:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Billbug #Bitdefender Submission Wizard #Chrysalis backdoor #Cyber Espionage #DLL side_loading #Lotus Blossom #Notepad++ #NSIS installer #Rapid7 #supply chain attack #Tech News 2026
Penetration Testing Tools
Surgical Espionage: The "Chrysalis" Backdoor and the 6-Month Hijack of Notepad++
Cybersecurity researchers persist in their investigation of a sophisticated incursion targeting the ubiquitous text editor Notepad++, which remained
16 views
Daily Writeups
⤷ Title: Notepad++ Supply Chain Hack Explained: How Conducted Hack via Hosting Provider
════════════════════════
𐀪 Author: IT_Engineer
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 14:35:16 GMT
════════════════════════
⌗ Tags: #supply_chain_solutions #security #cyber_security_awareness #notepad_plus_plus #hacking
Medium
Notepad++ Supply Chain Hack Explained: How Conducted Hack via Hosting Provider
The recent Notepad++ supply chain attack, reported by SecurityWeek, is another reminder that modern cyber threats don’t always start inside…
14 views
Daily Writeups
⤷ Title: Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:00:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AiTM #Chrysalis Backdoor #Cobalt Strike #cybersecurity #DLL side_loading #infosec #Lotus Blossom #notepad++ #Patch Alert #supply chain attack
Daily CyberSecurity
Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates
Lotus Blossom hijacked Notepad++ updates to target admins. The supply chain attack deployed Chrysalis backdoor. Update to v8.9.1 immediately.
20 views
Daily Writeups
⤷ Title: Double-Locked and Hardened: Inside the Notepad++ Fight Against the “Chrysalis” Supply Chain Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:53:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chrysalis backdoor #CVE_2025_15556 #CVE_2026_25926 #Don Ho #Lotus Panda #Notepad++ #Notepad++ 8.9.2 #Software Security #supply chain attack #Tech News 2026 #WinGUp update
Penetration Testing Tools
Double-Locked and Hardened: Inside the Notepad++ Fight Against the "Chrysalis" Supply Chain Attack
The architects of Notepad++ have disseminated security patch 8.9.2 to fortify vulnerabilities recently exploited by a sophisticated threat
17 views
Daily Writeups
⤷ Title: Notepad’s Metamorphosis: From Plain Text to Markdown-Powered Image Rendering in Windows 11
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 04:46:21 +0000
════════════════════════
⌗ Tags: #Windows #Copilot AI #Image Support #Markdown #Microsoft Update 2026 #notepad++ #Productivity Tools #Rich Text #Tech News #Windows 11 #WordPad Replacement
Daily CyberSecurity
Notepad’s Metamorphosis: From Plain Text to Markdown-Powered Image Rendering in Windows 11
Microsoft is turning Notepad into a powerful Markdown editor with new image support. Discover how the classic text tool is evolving for the Windows 11 era.
15 views
Daily Writeups
⤷ Title: The Copilot Retreat: Why Microsoft is Scrubbing Its AI Brand from Windows 11 Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:13:20 +0000
════════════════════════
⌗ Tags: #Windows #Advanced Features #AI Rebranding #Microsoft Copilot #Microsoft News #notepad++ #software updates #Tech Trends #User Experience #Windows 11 #Windows Insiders
Daily CyberSecurity
The Copilot Retreat: Why Microsoft is Scrubbing Its AI Brand from Windows 11 Apps
Microsoft is quietly rebranding Copilot features in Windows 11. Discover why Notepad’s AI is now called "Advanced Features" and what this means for the OS.
9 views
Daily Writeups
⤷ Title: Architectural Vulnerabilities in Notepad++: Arbitrary Code Execution Risks Unmasked
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
Information Security News
Notepad++ Config.xml Code Execution Flaw Patched: Update Now
Notepad++ patches a critical config.xml code execution flaw (CVE-2026-48778) alongside two other security bugs. Upgrade to version 8.9.6.1 immediately.
8 views
Daily Writeups
⤷ Title: Notepad++ Exploit Code and Flaws Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 01:11:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #notepad++ #Patch Update #proof_of_concept #Public Disclosure #Vulnerability
Daily CyberSecurity
Notepad++ Exploit Code and Flaws Publicly Disclosed
Learn about the new Notepad++ security flaws. Public Notepad++ exploit code triggers arbitrary code execution. Update to version v8.9.6.1 now.
29 views
Daily Writeups
⤷ Title: CVE-2026–48778 分析：Notepad++漏洞允許攻擊者執行任意指令
════════════════════════
𐀪 Author: segalee
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 02:01:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve_2026_48778 #notepad #blue_team #rce
Medium
CVE-2026–48778 分析：Notepad++漏洞允許攻擊者執行任意指令
漏洞摘要 該漏洞在 2026 年 5 月底揭露，根據 cybersecuritynews 報導，該漏洞是因為在 Notepad++ 在 v8.9.6（含）以前的版本中，存在設定檔解析缺乏輸入驗證的命令執行漏洞，由於標準安裝版會去讀取…
7 views
Daily Writeups
⤷ Title: Notepad++ v8.9.7 Fixes 5 Vulnerabilities, All With Public Details and PoC Exploit Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 02:28:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #notepad++ #Path Traversal #Zip Slip
Daily CyberSecurity
Notepad++ v8.9.7 Fixes 5 Vulnerabilities, All With Public Details and PoC Exploit Code
TL;DR Notepad++ v8.9.7 fixes five security flaws in the popular Windows editor. Technical details and proof-of-concept exploit code for all five Notepad++ vulnerabilities are public in the project…
9 views