Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Tue, 12 Sep 2023 16:08:55 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: GitHub’s Latest Security Flaw Puts Over 4,000 Repositories at Risk of Repojacking:-
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/201ab0fde340
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #github #open_source #cybersecurity #repository_management #code_security
Medium
GitHub’s Latest Security Flaw Puts Over 4,000 Repositories at Risk of Repojacking:-
Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking Attack
8 views
Daily Writeups
β€· Title: RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 25 Feb 2026 07:36:33 +0000
════════════════════════
βŒ— Tags: #Malware #AI security #GitHub Codespaces #GitHub Copilot #GITHUB_TOKEN #Indirect Prompt Injection #Microsoft Security #Orca Security #repository takeover #RoguePilot #supply chain attack #Tech News 2026
Penetration Testing Tools
RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
A critical vulnerability has been unearthed within GitHub Codespaces, enabling the illicit hijacking of repositories through the integrated
19 views
Daily Writeups
β€· Title: Anthropic Issues Mass DMCA to Erase 8,100 Claude Code Repositories
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Fri, 03 Apr 2026 07:47:39 +0000
════════════════════════
βŒ— Tags: #Data Leak #AI security #Anthropic #Claude Code #Coding News 2026 #Copyright Infringement #DMCA #Github #Intellectual Property #Repository Takedown #Source Code Leak
Penetration Testing Tools
Anthropic Issues Mass DMCA to Erase 8,100 Claude Code Repositories
The GitHub platform has received a formal grievance under the Digital Millennium Copyright Act (DMCA) from the artificial
7 views
Daily Writeups
β€· Title: Critical Hardcoded Credential Bug Hits Nexus Repository 3
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 16 Apr 2026 14:05:47 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_5189 #DevSecOps #hardcoded credentials #OrientDB #Patch Alert #rce #Repository Management #Sonatype Nexus #Supply Chain Security #Vulnerability
Daily CyberSecurity
Critical Hardcoded Credential Bug Hits Nexus Repository 3
Sonatype Nexus Repository (CVE-2026-5189) faces a critical 9.2 CVSS flaw. A hardcoded database credential grants full host access. Patch to v3.71.0 now!
16 views
Daily Writeups
β€· Title: Trellix Investigates Unauthorized Breach of Internal Source Code Repository
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 04 May 2026 08:05:21 +0000
════════════════════════
βŒ— Tags: #Data Leak #Cyber attack 2026 #cybersecurity news #Data Theft #digital forensics #Endpoint Protection #Infosec #Repository Security #Source Code Breach #Supply Chain Risk #Trellix #XDR
Penetration Testing Tools
Trellix Investigates Unauthorized Breach of Internal Source Code Repository
Cybersecurity giant Trellix confirms an incursion into its internal code repository. Independent experts are investigating potential risks to XDR and endpoint logic.
16 views
Daily Writeups
β€· Title: Shuttering the Script: Canonical Announces End of Ubuntu Pastebin
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 26 May 2026 03:35:42 +0000
════════════════════════
βŒ— Tags: #Linux #Canonical paste.ubuntu.com shutdown 2026 #infrastructure modernization project #Linux link rot bug #open source data exfiltration #pastebinit package break #repository migration guide #text sharing snippet utility #Ubuntu One authentication #Ubuntu Pastebin decommissioning
Information Security News
Shuttering the Script: Canonical Announces End of Ubuntu Pastebin - Information Security News
Canonical is shutting down Ubuntu Pastebin. After severe user backlash over a one-week notice, the decommissioning has been delayed until late June 2026.
10 views
Daily Writeups
β€· Title: GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
════════════════════════
π€ͺ Author: Waqas
════════════════════════
β΄΅ Time: Tue, 07 Jul 2026 13:00:20 +0000
════════════════════════
βŒ— Tags: #Security #Agentic AI #Cybersecurity #GitHub #GitHub Actions #GitLost #Privacy #Repository #Vulnerability
Hackread
GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.
18 views