Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: The Biggest Cybersecurity Issues This Week (October 2026): What Developers Need to Patch
════════════════════════
𐀪 Author: Sohamnayak
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 04:23:39 GMT
════════════════════════
⌗ Tags: #python #infosec #software_development #devops #cybersecurity
Medium
The Biggest Cybersecurity Issues This Week (October 2026): What Developers Need to Patch
PHP, GitLab, LiteLLM and a broken certificate authority, all in one week. Here’s what happened and exactly what to do.
11 views
Daily Writeups
⤷ Title: Your Company Doesn’t Need Another AI Assistant. It Needs a Connector.
════════════════════════
𐀪 Author: Ferhat Talha BULANIK
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 06:29:30 GMT
════════════════════════
⌗ Tags: #api_security #software_architecture #claude #model_context_protocol #ai_agent
Medium
Your Company Doesn’t Need Another AI Assistant. It Needs a Connector.
Most teams are wiring Claude to their systems with duct tape, or not at all. Here is how to build an MCP connector that survives…
28 views
Daily Writeups
⤷ Title: Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
════════════════════════
𐀪 Author: FlawPilot
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:57:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #open_source #application_security #software_development #artificial_intelligence
Medium
Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
The free service can find vulnerabilities and suggest patches, but enrolled projects must be ready to validate the results themselves.
10 views
Daily Writeups
⤷ Title: Stolen OAuth tokens: what DPoP fixes, and what it doesn’t
════════════════════════
𐀪 Author: Piotr Honik
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:54:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #software_architecture #oauth2 #dpop
Medium
Stolen OAuth tokens: what DPoP fixes, and what it doesn’t
Where DPoP is now the default, where it falls short, and how to choose.
38 views
Daily Writeups
⤷ Title: PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
════════════════════════
𐀪 Author: xC0D3F4TH3R
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:52 GMT
════════════════════════
⌗ Tags: #php_developers #cybersecurity #hacking #security #software_development
Medium
PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
github : https://github.com/xC0D3F4TH3R/PHP2SHELL-DEFENSIVE-KIT
16 views
Daily Writeups
⤷ Title: How security engineers actually assess AI-generated code
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #software_engineering #infosec #cybersecurity #security #vibe_coding
Medium
How security engineers actually assess AI-generated code
A mindset shift for the new era.
13 views
Daily Writeups
⤷ Title: Patch Node.js, Not Just Your npm Dependencies
════════════════════════
𐀪 Author: Rahul
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:14:56 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_engineering #devops #nodejs
Medium
Patch Node.js, Not Just Your npm Dependencies
The October 2026 security release is a reminder that runtime upgrades must be rebuilt, redeployed, and verified across every production…
17 views
Daily Writeups
⤷ Title: A Vulnerability Scan is Not an Application Security Program
════════════════════════
𐀪 Author: Arthur Steel | Contra Average
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 19:36:49 GMT
════════════════════════
⌗ Tags: #owasp #risk_management #software_development #cybersecurity #application_security
Medium
A Vulnerability Scan is Not an Application Security Program
Your scanner may be working perfectly. Your security strategy may still be dangerously incomplete.
15 views
Daily Writeups
⤷ Title: PHP2Shell Is A Forever Problem: Expect Daily Hacks Building Apps Without Memory Safety First Like…
════════════════════════
𐀪 Author: Tim Almond
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 20:39:23 GMT
════════════════════════
⌗ Tags: #rust #hacking #software_development #software_engineering #vibe_coding
Medium
PHP2Shell Is A Forever Problem: Expect Daily Hacks Building Apps Without Memory Safety First Like Rust
PHP2Shell is two critical flaws in PHP itself. CVE-2026–109618 and CVE-2026–109619 let an unauthenticated attacker reach remote code…
13 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and…
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:21:20 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_architecture #enterprise_architecture #cloud_security
Medium
Security Requirements That Actually Work — Part 3: From Requirements to Release: AWS Baselines and the PMO-Meets-ADM Engine
Part 3 of 3 in the series “Security Requirements That Actually Work”
11 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 2: Who Owns the “What,” the “How,” and the Risk?
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:19:36 GMT
════════════════════════
⌗ Tags: #enterprise_architecture #software_architecture #application_security #cloud_security #cybersecurity
Medium
Security Requirements That Actually Work — Part 2: Who Owns the “What,” the “How,” and the Risk?
Part 2 of 3 in the series “Security Requirements That Actually Work”
12 views
Daily Writeups
⤷ Title: Security Requirements That Actually Work — Part 1: “Encrypt Data at Rest” Is Not a Security…
════════════════════════
𐀪 Author: John Zhang
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:16:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_security #enterprise_architecture #software_architecture #application_security
Medium
Security Requirements That Actually Work — Part 1: “Encrypt Data at Rest” Is Not a Security Requirement
Part 1 of 3 in the series “Security Requirements That Actually Work”
10 views
Daily Writeups
⤷ Title: AI Coding Agents Pass Tests, Not Security Checks
════════════════════════
𐀪 Author: Emre Gültekir
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 11:09:03 GMT
════════════════════════
⌗ Tags: #programming #application_security #artificial_intelligence #ai_agent #software_testing
Medium
A Green Test Only Answers the Question You Asked
Coding agents pass up to 91% of functional tests but only 25% are also secure. Why green tests miss this and how to put attacks in the spec.
20 views
Daily Writeups
⤷ Title: Where your API key goes after you paste it into an AI dashboard
════════════════════════
𐀪 Author: Miles Builds
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #devops #cybersecurity #software_development #artificial_intelligence #api_security
Medium
Where your API key goes after you paste it into an AI dashboard
OpenCode’s breach last week exposed provider keys that users had saved in its web console. This is where a pasted key ends up, and four…
36 views
Daily Writeups
⤷ Title: I Removed the CAPTCHA. Could Customers Still Get Through?
════════════════════════
𐀪 Author: Tinguyen
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 15:01:04 GMT
════════════════════════
⌗ Tags: #web_development #software_engineering #application_security #accessibility
Medium
I Removed the CAPTCHA. Could Customers Still Get Through?
A hidden field can catch spam. The harder part is knowing whose request never reached you.
21 views
Daily Writeups
⤷ Title: Capcom Reset 196 Passwords After a Breach Touching 11.7 Million Accounts
════════════════════════
𐀪 Author: Prashant Thakur
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 18:13:51 GMT
════════════════════════
⌗ Tags: #software_development #hacking #tech #technology #cybersecurity
Medium
Capcom Reset 196 Passwords After a Breach Touching 11.7 Million Accounts
Capcom says records tied to 11,774,247 accounts on its CAPCOM ID service were exposed, with users affected worldwide.
27 views
Daily Writeups
⤷ Title: I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 00:00:51 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #application_security #static_analysis #mcps
Medium
I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
In the previous post in this series I built a 10-test harness for the MCP 2026–07–28 authorization rules. A quickstart-style server passed…
22 views
Daily Writeups
⤷ Title: The Vulnerabilities We Can See Aren’t the Ones That Worry Me
════════════════════════
𐀪 Author: Darren Bounds
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 12:21:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #software_development #infosec
Medium
The Vulnerabilities We Can See Aren’t the Ones That Worry Me
AI is making serious software vulnerabilities easier to discover than ever. The public CVE explosion may be just the tip of an iceberg, and…
25 views
Daily Writeups
⤷ Title: Hackers Did Not Need To Be Clever In October, Because We Kept Leaving Our Keys Lying Around
════════════════════════
𐀪 Author: Vivek Naskar
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 19:02:45 GMT
════════════════════════
⌗ Tags: #technology #software_engineering #hacking #ai #tech
Medium
Hackers Did Not Need To Be Clever In October, Because We Kept Leaving Our Keys Lying Around
A month of security breaches, exposed credentials, and vulnerabilities that were hiding in plain sight.
18 views
Daily Writeups
⤷ Title: Inside CVE-2022–22963: Exploring a Critical Spring Cloud Function Vulnerability
════════════════════════
𐀪 Author: Lwanyagaivan
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 08:36:47 GMT
════════════════════════
⌗ Tags: #software_engineering #ethical_hacking #penetration_testing #application_security #cybersecurity
Medium
Inside CVE-2022–22963: Exploring a Critical Spring Cloud Function Vulnerability
How an expression-injection flaw can expose a Java application to remote code execution.
14 views