Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: GlassWorm Malware Targets Developers Through OpenVSX Marketplace
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 10:22:48 +0000
════════════════════════
⌗ Tags: #Malware #Security #Blockchain #Cybersecurity #GlassWorm #Marketplace #OpenVSX #Solana #Visual Studio
Hackread
GlassWorm Malware Targets Developers Through OpenVSX Marketplace
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
19 views
Daily Writeups
⤷ Title: Rhadamanthys Infostealer Hides in Ren’Py Visual Novel Games, Deploys Malware via Fake 1 Million Second Loading Screen
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 00:01:24 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Fake Loading Screen #Gaming Malware #Infostealer #Python #Ren'Py #Rhadamanthys #Visual Novel
Daily CyberSecurity
Rhadamanthys Infostealer Hides in Ren’Py Visual Novel Games, Deploys Malware via Fake 1 Million Second Loading Screen
AhnLab exposed Rhadamanthys Infostealer hiding in games built with the Ren'Py engine. It uses a fake 1M-second loading screen to distract victims while injecting malware via a malicious Python script.
14 views
Daily Writeups
⤷ Title: Pinterest Launches AI Assistant: Transforming Search to Personalized Visual Discovery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 01 Nov 2025 08:32:06 +0000
════════════════════════
⌗ Tags: #Technology #AI #discovery #e_commerce #Generative AI #Pinterest #Recommendations #Visual Search
Daily CyberSecurity
Pinterest Launches AI Assistant: Transforming Search to Personalized Visual Discovery
Pinterest Assistant uses AI to analyze saved Pins and Boards, delivering highly personalized visual recommendations for open-ended queries. Now in US beta.
31 views
Daily Writeups
⤷ Title: Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:02:19 +0000
════════════════════════
⌗ Tags: #Malware #Eclipse Foundation #MSRC #Open VSX #security incident #Supply Chain #Token Security #Visual Studio Code #Wiz
Penetration Testing Tools
Token Leak: Eclipse Revokes Exposed Keys to Halt Open VSX Supply Chain Attacks
Eclipse revoked compromised Open VSX tokens found in repositories. New "ovsxp_" prefix and shorter validity periods will strengthen supply chain security.
5 views
Daily Writeups
⤷ Title: SleepyDuck: The Ethereum-Powered Malware That Redefines Command and Control
════════════════════════
𐀪 Author: C. Oscar Lawshea
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 19:10:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #visual_studio #blockchain #malware #smart_contracts
Medium
SleepyDuck: The Ethereum-Powered Malware That Redefines Command and Control
Introduction
26 views
Daily Writeups
⤷ Title: Google Launches Official Colab Extension for VS Code: Seamless ML Workflow!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:36:36 +0000
════════════════════════
⌗ Tags: #Google #Technology #AI #Cloud Computing #developer tools #Google Colab #GPU #Jupyter Notebooks #machine learning #ML #Visual Studio Code #VS Code
Penetration Testing Tools
Google Launches Official Colab Extension for VS Code: Seamless ML Workflow!
Google's official Colab extension for VS Code brings Colab's cloud resources (GPUs/TPUs) directly into the popular editor for a seamless ML development experience.
24 views
Daily Writeups
⤷ Title: Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 08:11:54 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #malware #OpenVSX #supply chain attack #Unicode Obfuscation #Visual Studio Marketplace #VS Code
Penetration Testing Tools
Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation
The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are now
10 views
Daily Writeups
⤷ Title: Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:13:13 +0000
════════════════════════
⌗ Tags: #Google #AI Agent #CharXiv #Document Understanding #Google Gemini 3 Pro #LaTeX #Multimodal AI #Screen Comprehension #Video Reasoning #Visual Reasoning
Penetration Testing Tools
Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code
Google has unveiled Gemini 3 Pro — a new generation of multimodal models that not only see images
15 views
Daily Writeups
⤷ Title: Malicious Visual Studio Code Extensions Hide Trojan in Fake PNG Files
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 17:12:15 +0000
════════════════════════
⌗ Tags: #Malware #Security #Cyber Attack #Cybersecurity #Developers #ReversingLabs #TROJAN #Visual Studio #VS Code
Hackread
Malicious Visual Studio Code Extensions Hide Trojan in Fake PNG Files
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
39 views
Daily Writeups
⤷ Title: The WhatsApp Worm: “Boto Cor-de-Rosa” Campaign Weaponizes Social Trust
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:21:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Cyber Attacks #Acronis #Astaroth #banking trojan #Boto Cor_de_Rosa #Brazil #Guildma #python #Social Engineering #Visual Basic #WhatsApp
Information Security News
The WhatsApp Worm: “Boto Cor-de-Rosa” Campaign Weaponizes Social Trust
A sophisticated malware campaign has surfaced in Brazil, leveraging the ubiquity of WhatsApp to propagate the Astaroth banking trojan. This delivery vector has proven exceptionally potent given th…
12 views
Daily Writeups
⤷ Title: Game Over: “RenEngine” Malware Hides in Pirated Visual Novels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:22:22 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #Cyber Crime #Data Theft #Game Security #kaspersky #Lumma Stealer #malware #Pirated Games #Ren'Py #RenEngine #Visual Novels
Daily CyberSecurity
Game Over: "RenEngine" Malware Hides in Pirated Visual Novels
Kaspersky warns: Pirated visual novels are spreading RenEngine malware. Attackers use fake downloads to install ACR Stealer. Protect your data now.
19 views
Daily Writeups
⤷ Title: The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:35:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Runner #CVE_2025_65715 #CVE_2025_65717 #data exfiltration #Live Server #Markdown Preview Enhanced #OX Security #rce #Remote Code Execution #Tech News 2026 #Visual Studio Code security #VS Code
Daily CyberSecurity
The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
Critical flaws in Live Server, Code Runner, and more expose 128M+ developers to file theft and remote code execution. Is your VS Code workspace secure?
22 views
Daily Writeups
⤷ Title: The Trust Trap: How Cyber Marauders Are Turning WhatsApp Into a Windows Infection Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 07:52:08 +0000
════════════════════════
⌗ Tags: #Malware #cloud security #Cybersecurity 2026 #Living_off_the_land #malware #Microsoft Defender #phishing #Social Engineering #Visual Basic #WhatsApp #Windows Security
Penetration Testing Tools
The Trust Trap: How Cyber Marauders Are Turning WhatsApp Into a Windows Infection Engine
In the waning days of February 2026, cyber adversaries inaugurated a nascent campaign characterized by an unorthodox stratagem:
6 views
Daily Writeups
⤷ Title: The Long Game: How North Korea’s UNC4736 Spent Six Months Infiltrating Drift for a $285M Payday
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:15:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AppleJeus #Blockchain Security #Crypto Hack 2026 #Drift Protocol #Golden Chollima #North Korea #Social Engineering #Solana #TestFlight Malware #UNC4736 #Visual Studio Code Exploit
Penetration Testing Tools
The Long Game: How North Korea’s UNC4736 Spent Six Months Infiltrating Drift for a $285M Payday
The recent incursion into the cryptocurrency sanctuary Drift, which culminated in the exfiltration of $285 million, has been
19 views
Daily Writeups
⤷ Title: OpenAI Unveils ChatGPT Images 2.0 with Native Reasoning and 2K Precision
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:42:28 +0000
════════════════════════
⌗ Tags: #Technology #2K Resolution #AI Image Generation #ChatGPT Images 2.0 #Codex #gpt_image_2 #Graphic Design 2026 #Multilingual AI #OpenAI #Thinking Mode #Visual Reasoning
Daily CyberSecurity
OpenAI Unveils ChatGPT Images 2.0 with Native Reasoning and 2K Precision
OpenAI launches ChatGPT Images 2.0! Discover the new "Thinking" mode, near-perfect multilingual text rendering, and flexible 2K resolutions for all users.
8 views
Daily Writeups
⤷ Title: The Trojan Update: How “GlassWorm” Developers are Using Sleeper Extensions to Hijack Workspaces
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:32:31 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #Developer Security #extension security #GlassWorm #malware #OpenVSX #Socket #supply chain attack #Trojan Update #Visual Studio Code #VS Code
Penetration Testing Tools
The Trojan Update: How "GlassWorm" Developers are Using Sleeper Extensions to Hijack Workspaces
The GlassWorm campaign has resurfaced within the developer community, though the adversaries have adopted a more surreptitious operational
4 views
Daily Writeups
⤷ Title: Skeletal Scans and Height Checks: Meta Deploys Radical “Visual Analysis” AI to Purge Underage Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:18:12 +0000
════════════════════════
⌗ Tags: #Technology #Age Verification #AI #Child Safety #Digital Services Act #European Union #facebook #Instagram #Meta #privacy #Skeletal Structure #Teen Accounts #Visual Analysis
Daily CyberSecurity
Skeletal Scans and Height Checks: Meta Deploys Radical "Visual Analysis" AI to Purge Underage Users
Meta is scanning user height and skeletal structure to find kids under 13. See how this "Visual Analysis" AI works to purge underage accounts on Instagram.
14 views
Daily Writeups
⤷ Title: Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:04:06 +0000
════════════════════════
⌗ Tags: #Malware #@antv Malicious Packages #atool Maintainer Account #CI/CD Secret Stealer #Claude Code Backdoor #OIDC Token Hijacking #Session P2P Network #Shai_Hulud npm Attack #Sigstore Provenance Forgery #Software Supply Chain Worm #Visual Studio Code Malware
Penetration Testing Tools
Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
The npm ecosystem has been subjected to a massive, highly coordinated supply-chain assault. Within a compressed one-hour envelope,
34 views
Daily Writeups
⤷ Title: Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:37:38 +0000
════════════════════════
⌗ Tags: #Malware #Bun JavaScript Runtime #Dangling Orphan Commit #DNS Tunneling Exfiltration #GitHub Token Theft #Multi_Stage Credential Harvester #Nx Console Extension Compromise #rwl.angular_console #Sigstore Supply Chain Poisoning #StepSecurity Forensic Audit #Visual Studio Code Marketplace
Penetration Testing Tools
Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
The highly popular Nx Console extension for Visual Studio Code has been compromised via a weaponized supply-chain injection.
10 views
Daily Writeups
⤷ Title: Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 11:08:18 +0000
════════════════════════
⌗ Tags: #Security #Malware #backdoor #Cryptocurrency #Cybersecurity #Scam #Siggen #Steam #Supply Chain #TROJAN #Visual Studio
Hackread
Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects
Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.
24 views