Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: DevSecOps in 2025: 11 Must-Have Tools to Build Fast and Stay Secure
════════════════════════
𐀪 Author: Sam Bishop
════════════════════════
ⴵ Time: Tue, 27 May 2025 13:23:36 GMT
════════════════════════
⌗ Tags: #devops_security #devops_tool #cyber_security_awareness #cybersecurity #devsecops_tool
Medium
DevSecOps in 2025: 11 Must-Have Tools to Build Fast and Stay Secure
Build Fast, Stay Secure: Why DevSecOps Is the Future of Software Development
14 views
Daily Writeups
⤷ Title: Exploitation of Continuous Integration Pipelines for Supply Chain Compromise and Backdoor Injection
════════════════════════
𐀪 Author: Aaishh
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 04:11:52 GMT
════════════════════════
⌗ Tags: #devops_security #cybersecurity #ci_cd_pipeline #supply_chain_attack #continuous_integration
Medium
Exploitation of Continuous Integration Pipelines for Supply Chain Compromise and Backdoor Injection
How much secure are the CI/CD pipelines that deliver your software? What happens when these tools designed to speed up development becomes…
19 views
Daily Writeups
⤷ Title: GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 26 Nov 2025 23:17:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CI/CD security #CVE_2024_9183 #CVE_2025_12571 #Denial of Service #DevOps Security #gitlab #security patch
Daily CyberSecurity
GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks
Critical GitLab updates (18.6.1/18.5.3) fix severe CI/CD credential theft (CVE-2024-9183) & unauthenticated DoS flaws. Upgrade immediately.
13 views
Daily Writeups
⤷ Title: Automation Crisis: Critical 9.9 CVSS Flaw Exposes 103K n8n Instances to Full Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:40:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #Censys #CVE_2025_68613 #Cybersecurity 2025 #DevOps Security #n8n #Node.js #Patch Alert #RCE #remote code execution #Sandbox Escape #Workflow Automation
Information Security News
Automation Crisis: Critical 9.9 CVSS Flaw Exposes 103K n8n Instances to Full Takeover
A critical vulnerability in the globally used workflow automation platform n8n allows attackers to execute arbitrary code remotely. Tracked as CVE-2025-68613, the flaw carries an exceptionally hig…
26 views
Daily Writeups
⤷ Title: The Worm in the Code: How the Shai-Hulud npm Attack Hijacked Trust Wallet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:20:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Theft #DevOps Security #Github #InfoSec 2026 #JavaScript #malware #npm #Shai_Hulud #supply chain attack #Trust Wallet
Penetration Testing Tools
The Worm in the Code: How the Shai-Hulud npm Attack Hijacked Trust Wallet
A large-scale supply chain compromise known as Shai-Hulud has been linked to the recent theft of approximately USD
14 views
Daily Writeups
⤷ Title: NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:16:11 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Theft #DevOps Security #Discord C2 #Malware Analysis #NodeCordRAT #npm #supply chain attack #Zscaler ThreatLabz
Daily CyberSecurity
NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord
The open-source ecosystem has once again been weaponized, this time targeting developers working with cryptocurrency libraries. In a new report released this week, Zscaler ThreatLabz revealed the …
26 views
Daily Writeups
⤷ Title: VoidLink: The “Cloud-First” Malware Hunting Your Linux Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:21:17 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #Chinese Threat Actor #Cloud Security #Cobalt Strike #container security #DevOps Security #eBPF #Kubernetes Security #Linux Malware #supply chain attack #VoidLink #Zig Programming Language
Daily CyberSecurity
VoidLink: The "Cloud-First" Malware Hunting Your Linux Servers
New "cloud-first" malware VoidLink targets Linux & containers with advanced stealth. Written in Zig, it mimics Cobalt Strike to evade EDR. Check your cloud.
27 views
Daily Writeups
⤷ Title: Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:44:03 +0000
════════════════════════
⌗ Tags: #Data Leak #.git folder #Credential Theft #data leak #DevOps Security #Git #misconfiguration #Mysterium VPN #source code exfiltration #Tech News 2026 #version control #web server hardening
Penetration Testing Tools
Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
Approximately five million web servers globally have been identified as misconfigured, exposing sensitive Git administrative metadata and precipitating
39 views
Daily Writeups
⤷ Title: GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 01:58:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_7659 #Denial of Service #DevOps Security #gitlab #graphql #Markdown Vulnerability #Patch Alert #Token Theft #Web IDE
Daily CyberSecurity
GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
GitLab fixes critical CVE-2025-7659 (CVSS 8.0). Unauthenticated attackers can steal tokens via Web IDE. Update to v18.8.4 now to secure your code.
21 views
Daily Writeups
⤷ Title: CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:01:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #automation server #CI/CD security #Cross_Site Scripting #CVE_2026_27099 #CVE_2026_27100 #DevOps Security #Information Disclosure #Jenkins #Patch Alert #XSS
Daily CyberSecurity
CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
Jenkins patches a high-severity stored XSS flaw (CVE-2026-27099) and an info disclosure bug. Update to version 2.551 or LTS 2.541.2 to secure pipelines.
32 views
Daily Writeups
⤷ Title: The Tag Trap: How a Single Commit Swap Turned Xygeni’s GitHub Action into a Clandestine Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:21:26 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Security #DevOps Security #GitHub Actions #GitHub Token Theft #malware #RCE #StepSecurity #supply chain attack #Tag Poisoning #Tech News 2026 #v5 tag #Xygeni
Penetration Testing Tools
The Tag Trap: How a Single Commit Swap Turned Xygeni’s GitHub Action into a Clandestine Backdoor
An imperceptible edit to a single tag transformed a ubiquitous security auditing instrument into a clandestine backdoor. A
❤1
10 views
Daily Writeups
⤷ Title: Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:52:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Code Integrity #CVE_2026_5173 #DevOps Security #gitlab #GitLab CE #GitLab EE #graphql #infosec #privilege escalation #security update #terraform
Daily CyberSecurity
Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
GitLab releases critical patches (18.10.3+) for WebSocket flaws, Terraform DoS, and unauthorized privilege demotions. Update your self-managed instances!
29 views
Daily Writeups
⤷ Title: Supply Chain Alert: Critical 9.4 CVSS RCE Hits Sonatype Nexus Repository Manager
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 03:35:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #DevOps Security #infosec #Nexus Repo 3 #Nexus Repository #rce #Remote Code Execution #Sonatype #Supply Chain Security #vulnerability management
Daily CyberSecurity
Supply Chain Alert: Critical 9.4 CVSS RCE Hits Sonatype Nexus Repository Manager
Sonatype patches a critical 9.4 CVSS RCE in Nexus Repository 3 (CVE-2026-3199). Secure your supply chain—upgrade to version 3.91.0 immediately!
18 views
Daily Writeups
⤷ Title: Linux File & Folder Protection + History Control (Practice Guide Only)
════════════════════════
𐀪 Author: DevOps voice
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:40:08 GMT
════════════════════════
⌗ Tags: #devsecops #audit #infosec #devops_security #cybersecurity
Medium
🔐 Linux File & Folder Protection + History Control (Practice Guide Only)
⚠️ For learning/practice only — DO NOT use direct in Dev/SIT/UAT/Prod environments
8 views
Daily Writeups
⤷ Title: New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:11:06 +0000
════════════════════════
⌗ Tags: #Malware #AWS Credentials #DevOps Security #eBPF Rootkit #Fileless Malware #infosec #Linux RAT #npm Security #PyPI #QLNX #Quasar Linux #supply chain attack #Trend Micro
Daily CyberSecurity
New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
Trend Micro uncovers QLNX, a fileless Linux RAT targeting AWS, NPM, and Kubernetes keys. Learn how its eBPF rootkit hides from even the deepest system scans.
17 views
Daily Writeups
⤷ Title: Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:16:40 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Harvesting #Cybersecurity 2026 #DevOps Security #Infosec #jenkins #Jenkins Marketplace #Malware Alert #Shai_Hulud #supply chain attack #TeamPCP
Penetration Testing Tools
Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
Unidentified adversaries have subverted the Checkmarx plugin for Jenkins, embedding deleterious code designed for credential exfiltration. This incursion
17 views
Daily Writeups
⤷ Title: GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 01:39:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CE #CVE_2026_7481 #Cyber Security #DevOps Security #dos #EE #gitlab #GitLab 18.11.3 #GitLab Security Patch #infosec #Patch Alert #XSS
Daily CyberSecurity
GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances
GitLab patches high-severity XSS (8.7 CVSS) and unauthenticated DoS flaws in versions 18.11.3, 18.10.6, and 18.9.7. Secure your DevOps pipeline now!
17 views
Daily Writeups
⤷ Title: Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:24:14 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #Composer Backdoor #Credential Harvesting #Cyber Security #DevOps Security #flipboxstudio #info_stealer #Laravel Lang #PHP RCE #supply chain attack
Daily CyberSecurity
Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
DevOps Alert: Over 700 laravel-lang localization package versions have been backdoored with a cross-platform 17-collector info-stealer. Audit your logs.
20 views
Daily Writeups
⤷ Title: Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 05 Sep 2026 15:45:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cloudflare #Coder #Credential Theft #DevOps Security #registry.coder.com #secret stealer #supply chain attack #terraform
Daily CyberSecurity
Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules
Attackers needed no counterfeit website to slip malicious Terraform modules to developers. Unknown intruders gained access to the Cloudflare infrastructure that Coder relies upon. They added their…
30 views
Daily Writeups
⤷ Title: CVE-2026-80462 CVSS 10.0: Progress Software Chef Automate Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 01:41:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chef Automate #CVE_2026_80462 #CVSS 10 #DevOps Security #Progress Software #Vulnerability
Daily CyberSecurity
CVE-2026-80462 CVSS 10.0: Progress Software Chef Automate Vulnerability
Progress Software published a critical security bulletin, disclosing a maximum-severity flaw. The newly identified Chef Automate vulnerability allows unauthenticated attackers to gain elevated pri…
30 views