Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:28:46 +0000
════════════════════════
⌗ Tags: #Malware #Apple #google #Intellexa #Spyware Alerts #State_Linked Attacks #Surveillance Tech #Threat Analysis Group #Zero_Day Exploitation
Penetration Testing Tools
Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims
The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked
10 views
Daily Writeups
⤷ Title: “React2Shell” Crisis: Critical Vulnerability Triggers Global Cyberattacks by State-Sponsored Groups
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 00:19:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Vulnerability #CVE_2025_55182 #Deserialization #Next.js #rce #React Server Components #React2Shell #state_sponsored
Daily CyberSecurity
"React2Shell" Crisis: Critical Vulnerability Triggers Global Cyberattacks by State-Sponsored Groups
A Critical RCE (CVSS 10.0) flaw, React2Shell, in React/Next.js's Flight protocol allows unauthenticated system takeover. North Korean and Chinese state actors are actively exploiting the deserialization bug.
13 views
Daily Writeups
⤷ Title: Urgent: Apple Patches Two Critical WebKit Zero-Days Under Active Exploitation Against High-Risk Targets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 13 Dec 2025 01:52:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #CVE_2025_43529 #ios #iPadOS #memory corruption #Safari #State_Sponsored Spyware #use after free #WebKit #zero_day
Daily CyberSecurity
Urgent: Apple Patches Two Critical WebKit Zero-Days Under Active Exploitation Against High-Risk Targets
Apple patched two critical zero-days in WebKit (UAF & Memory Corruption) under active exploitation in extremely sophisticated attacks against targeted individuals. Update iOS 26 immediately.
29 views
Daily Writeups
⤷ Title: UK Sanctions 2 Chinese Firms: i-Soon & Integrity Tech Targeted for Cyberattacks on Allies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:51:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #China #Cyber Espionage #cyberattack #i_Soon #Integrity Tech #National Security #NCSC #State_Sponsored Hacking #UK Sanctions
Penetration Testing Tools
UK Sanctions 2 Chinese Firms: i-Soon & Integrity Tech Targeted for Cyberattacks on Allies
The United Kingdom has announced sanctions against two Chinese technology companies, accusing them of reckless and indiscriminate cyberattacks
18 views
Daily Writeups
⤷ Title: The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:06:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Browser Extensions #chrome #cyber_espionage #DarkSpectre #Edge #firefox #GhostPoster #KOI Security #malware #ShadyPanda #state_sponsored #Zoom Stealer
Daily CyberSecurity
The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
Koi Security unmasks DarkSpectre, a Chinese threat group that used 300+ browser extensions to spy on 8.8M users and steal corporate meeting data.
23 views
Daily Writeups
⤷ Title: Notepad++ Hijacked: State-Sponsored Actors Poisoned Updates for Months
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 07:55:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #Chinese hackers #cybersecurity #malware #notepad++ #Open Source Security #Patch Alert #state_sponsored #supply chain attack #Update Hijack #WinGUp
Daily CyberSecurity
Notepad++ Hijacked: State-Sponsored Actors Poisoned Updates for Months
Notepad++ confirms update infrastructure was compromised by state-sponsored actors targeting specific users. Update to version 8.8.9 immediately.
38 views
Daily Writeups
⤷ Title: Digital Siege: The “Pre-Positioning” Strategy Fueling 2.6 Million Daily Attacks on Taiwan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:37:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #China APT #Critical Infrastructure #DDoS #Forescout report #Onnara breach #pre_positioning #South Korea cyber defense #State_Sponsored Hacking #Taiwan cybersecurity #Tech News 2026
Penetration Testing Tools
Digital Siege: The "Pre-Positioning" Strategy Fueling 2.6 Million Daily Attacks on Taiwan
In 2025, adversarial syndicates orchestrated a global offensive spanning 178 nations, primarily preying upon governmental architectures, financial institutions,
22 views
Daily Writeups
⤷ Title: The Attribution Dilemma: Inside Palo Alto Networks’ “Shadow Operations” Report and the Unnamed Giant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 16:06:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #attribution #China cyber threat #Cyber Espionage #global infrastructure security #National Security #Palo Alto Networks #Shadow Operations #State_Sponsored Hacking #Tech News 2026 #TGR_STA_1030 #Unit 42
Penetration Testing Tools
The Attribution Dilemma: Inside Palo Alto Networks’ "Shadow Operations" Report and the Unnamed Giant
Palo Alto Networks has conspicuously tempered the rhetoric within its latest dossier regarding an extensive cyber-espionage campaign, eschewing
20 views
Daily Writeups
⤷ Title: Stealth & Persistence: MuddyWater’s New Rust-Based Payload Mimics Cloudflare and Reddit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 00:06:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Genians Report #infosec #Macro_based Attacks #MuddyWater APT #Operation Olalampo #RMM tool abuse #Rust malware #State_Sponsored Espionage #threat intelligence
Daily CyberSecurity
Stealth & Persistence: MuddyWater’s New Rust-Based Payload Mimics Cloudflare and Reddit
Genians report reveals MuddyWater APT's shift to Rust-based malware and RMM tool abuse for long-term espionage across government and critical infrastructure.
24 views
Daily Writeups
⤷ Title: The Chatbot Saboteur: How Claude Was Coerced into a 150GB Heist of Mexican State Intelligence
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 09:17:04 +0000
════════════════════════
⌗ Tags: #Data Leak #Anthropic #ChatGPT #Claude Opus 4.6 #Data Exfiltration #Gambit Security #Jalisco #Mexico Cyberattack #National Digital Agency #OpenAI #Prompt Engineering #State_Sponsored Hacking #Tech News 2026
Penetration Testing Tools
The Chatbot Saboteur: How Claude Was Coerced into a 150GB Heist of Mexican State Intelligence
An unidentified adversary manipulated the Claude chatbot, developed by Anthropic, to orchestrate a series of surgical strikes against
24 views
Daily Writeups
⤷ Title: Unit 42 Unmasks CL-STA-1087’s Years-Long Cyber Espionage Against Asian Militaries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AppleChris Backdoor #APT #CL_STA_1087 #cyber_espionage #cybersecurity #infosec #MemFun Backdoor #State_Sponsored Threat #threat intelligence #Unit 42
Daily CyberSecurity
Unit 42 Unmasks CL-STA-1087's Years-Long Cyber Espionage Against Asian Militaries
Unit 42 exposes CL-STA-1087, a suspected Chinese state-sponsored cyber espionage group using custom backdoors to infiltrate Asian military networks.
22 views
Daily Writeups
⤷ Title: Blurring the Lines: How Iranian State Hackers are Weaponizing RaaS and the Cybercriminal Underground
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 16:00:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #Check Point Research #Cybercrime #Handala #infosec #Iranian Cyber Espionage #RaaS #Rhadamanthys #State_Sponsored Hackers #threat intelligence #Void Manticore
Daily CyberSecurity
Blurring the Lines: How Iranian State Hackers are Weaponizing RaaS and the Cybercriminal Underground
Check Point Research reveals Iranian state hackers (Void Manticore) are weaponizing RaaS and criminal malware like Rhadamanthys for plausible deniability.
❤1
36 views
Daily Writeups
⤷ Title: Pandora’s Box: IBM X-Force Uncovers Likely AI-Generated “Slopoly” Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 02:11:19 +0000
════════════════════════
⌗ Tags: #Malware #AI security #artificial intelligence #Cyber Threats #cybersecurity #infosec #State_Sponsored Hackers #Threat Actors #threat intelligence #Weaponizable AI
Daily CyberSecurity
Pandora’s Box: IBM X-Force Uncovers Likely AI-Generated “Slopoly” Malware
Cybersecurity investigators at IBM X-Force have identified a disturbing new milestone in the evolution of digital threats: the discovery of a novel malware dubbed “Slopoly,” which rese…
26 views
Daily Writeups
⤷ Title: The EU Strikes Back: New Sanctions Target Chinese and Iranian Cyber Threat Actors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 06:32:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anxun Information Technology #cyber attacks #cybersecurity #Emennet Pasargad #EU Sanctions #infosec #Integrity Technology Group #Paris Olympics #State_Sponsored Hacking #threat intelligence
Daily CyberSecurity
The EU Strikes Back: New Sanctions Target Chinese and Iranian Cyber Threat Actors
The EU Council hits Chinese and Iranian cyber threat actors with severe sanctions for hacking critical infrastructure and spreading Olympic disinformation.
30 views
Daily Writeups
⤷ Title: The API Battlefield: Akamai’s 2026 Report Unmasks the Staggering 113% Surge in Interface Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 09:25:16 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI security #AISURU #Akamai #API Security #DDoSaaS #Kimwolf #Layer 7 DDoS #State of the Internet 2026 #Super_botnets #Vibe_Coding #Web Application Firewall
Penetration Testing Tools
The API Battlefield: Akamai’s 2026 Report Unmasks the Staggering 113% Surge in Interface Attacks
Akamai has promulgated its annual State of the Internet dossier, chronicling the landscape of applications, APIs, and distributed
14 views
Daily Writeups
⤷ Title: Disposable Code: Inside North Korea’s “Burn-on-Detection” Malware Assembly Line
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:40:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Andariel #Cyber Espionage #Infosec #Kimsuky #Lazarus Group #malware #North Korea #State_Sponsored Hacking #Supply Chain Security #threat intelligence 2026
Penetration Testing Tools
Disposable Code: Inside North Korea’s "Burn-on-Detection" Malware Assembly Line
North Korea has long since transmuted its malicious software development into a sophisticated assembly line, where each instrument
9 views
Daily Writeups
⤷ Title: China-Linked Hackers Deploy “TencShell” Backdoor via Faux Web Font Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:45:33 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL Threat Research #Donut Shellcode In_Memory Execution #Fileless Position_Independent Code #Rshell Framework Customization #State_Sponsored Cyber Espionage #Tencent API Impersonation #TencShell Backdoor Malware #Third_Party Identity Compromise #Web Font Masquerading #Windows Registry Persistence
Information Security News
China-Linked Hackers Deploy "TencShell" Backdoor via Faux Web Font Files - Information Security News
In April 2026, threat intelligence specialists at Cato CTRL neutralized a sophisticated network intrusion attempt targeting a major multinational manufacturing enterprise. The adversaries sought to establish a persistent foothold within the corporate perimeter…
21 views
Daily Writeups
⤷ Title: The Strategic Encroachment of Red Lamassu Across the Eurasian Telecommunications Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:37:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black Lotus Labs threat intelligence #command and control infrastructure #DLL side loading vulnerability #JFMBackdoor Windows exploit #proxy network routing #PwC Threat Intelligence #Red Lamassu cyber espionage #Showboat Linux malware #state sponsored hacking Asia #telecom supply chain attack
Information Security News
Red Lamassu Cyber Espionage: Malware Targets Telecom Cores
State-backed Red Lamassu cyber espionage operations weaponize Showboat and JFMBackdoor malware to quietly penetrate and control telecom network infrastructure.
9 views
Daily Writeups
⤷ Title: DOJ Charges 17 Iranians in Mabna Institute Cyber Theft
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 01:48:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #DOJ indictment #Iran cyber theft #IRGC #Mabna Institute #Spearphishing #State_Sponsored Hacking #university hacking
Daily CyberSecurity
DOJ Charges 17 Iranians in Mabna Institute Cyber Theft
At a glance Actor or group Mabna Institute (Iran-based), allegedly for the IRGC Activity type Spearphishing, credential theft, data exfiltration (hacking-for-hire) Targets Universities, private co…
18 views
Daily Writeups
⤷ Title: DOJ Revises QTFY Claim: Agencies Were Targets, Not Victims
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 15:08:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Chinese Hackers #Cyber Espionage #DOJ #QTFY #State_Sponsored Hacking
Information Security News
DOJ Revises QTFY Claim: Agencies Were Targets, Not Victims
The US Department of Justice has had to amend a resounding statement about the Chinese hacking group QTFY. After the first release, the impression formed that the attackers had successfully penetr…
12 views