Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: Microsoft Patches Three Zero-Days Including Active Cloud Files UAF to SYSTEM and Copilot RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 01:51:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Cloud Files UAF #GitHub Copilot #Microsoft Patch Tuesday #powershell #rce #SYSTEM Privilege #zero_day
Daily CyberSecurity
Microsoft Patches Three Zero-Days Including Active Cloud Files UAF to SYSTEM and Copilot RCE
Microsoft patched 72 flaws, including three zero-days. Fixes target a Cloud Files UAF exploited for SYSTEM privileges and an RCE in GitHub Copilot. PowerShell gets a new security prompt.
18 views
Daily Writeups
⤷ Title: PATCH NOW: Microsoft Fixes 57 Flaws, Including Three Zero-Days Actively Exploited
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 04:44:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #CVE_2025_62221 #cybersecurity #GitHub Copilot #Microsoft #Patch Tuesday #PowerShell #RCE #Windows Security #zero_day
Penetration Testing Tools
PATCH NOW: Microsoft Fixes 57 Flaws, Including Three Zero-Days Actively Exploited
Microsoft has released its December security updates: Patch Tuesday brings fixes for 57 vulnerabilities, including three zero-days (one
21 views
Daily Writeups
⤷ Title: The Great Rewrite: Microsoft’s Radical 2030 Vision to Kill C/C++ with AI-Powered Rust
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:06:58 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #C++ #CoreAI #Future of Software Engineering #Garen Hunt #GitHub Copilot #memory safety #Microsoft #Rust #Technical Debt #Windows Kernel
Daily CyberSecurity
The Great Rewrite: Microsoft’s Radical 2030 Vision to Kill C/C++ with AI-Powered Rust
A recent job posting from Microsoft’s engineering team appears to hint at an ambitious, sweeping transformation now underway: by 2030, Microsoft aims to eliminate all C and C++ code from its codeb…
14 views
Daily Writeups
⤷ Title: AgentHopper Alert: How a Single Web Sentence Can Hijack Your AI Assistant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:26:36 +0000
════════════════════════
⌗ Tags: #Open Source Tool #38C3 #AgentHopper #AI Agents #ASCII Smuggling #Claude Code #GitHub Copilot #Infosec 2025 #Johann Rehberger #Prompt Injection #ZombAI
Information Security News
AgentHopper Alert: How a Single Web Sentence Can Hijack Your AI Assistant
At the recent Chaos Communication Congress in Germany, a new warning was issued about the risks associated with AI agents. According to information security specialist Johann Rehberger, a computer…
20 views
Daily Writeups
⤷ Title: RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 07:36:33 +0000
════════════════════════
⌗ Tags: #Malware #AI security #GitHub Codespaces #GitHub Copilot #GITHUB_TOKEN #Indirect Prompt Injection #Microsoft Security #Orca Security #repository takeover #RoguePilot #supply chain attack #Tech News 2026
Penetration Testing Tools
RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
A critical vulnerability has been unearthed within GitHub Codespaces, enabling the illicit hijacking of repositories through the integrated
20 views
Daily Writeups
⤷ Title: The Trojan Prompt: How an Autonomous AI Hijacked Aqua Trivy to Weaponize Developer Copilots
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 00:06:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Prompt Injection #Aqua Trivy #Claude #cybersecurity #DevSecOps #Gemini #GitHub Copilot #infosec #social engineering #Socket #supply chain attack #VS Code
Daily CyberSecurity
The Trojan Prompt: How an Autonomous AI Hijacked Aqua Trivy to Weaponize Developer Copilots
Socket reveals how an AI bot hijacked the Aqua Trivy VS Code extension, using prompt injection to turn developer AI assistants into stealthy data thieves.
15 views
Daily Writeups
⤷ Title: Extending BurpSuite with MCP: Leveraging GitHub Copilot for Offensive Security Automation
════════════════════════
𐀪 Author: Rio Darmawan
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 04:57:49 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #github_copilot #penetration_testing #red_team #ai_agent
Medium
Extending BurpSuite with MCP: Leveraging GitHub Copilot for Offensive Security Automation
Artificial Intelligence is no longer just a coding assistant or chatbot. In offensive security, AI is increasingly becoming part of the…
22 views
Daily Writeups
⤷ Title: Building an AI-Powered Pentesting Workflow with Burp MCP and GitHub Copilot
════════════════════════
𐀪 Author: Br0wn$t4n
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 08:31:03 GMT
════════════════════════
⌗ Tags: #ai #hacking #github_copilot #automation #information_security
Medium
Building an AI-Powered Pentesting Workflow with Burp MCP and GitHub Copilot
Modern security testing is increasingly moving toward AI-assisted workflows. Instead of manually inspecting every request, we can now…
48 views
Daily Writeups
⤷ Title: The Vibe Coding Paradox: Why Software Job Vacancies are Hitting a 3-Year High in the AI Era
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 01:48:35 +0000
════════════════════════
⌗ Tags: #Technology #AI Coding #Future of Work #Ghost Jobs #GitHub Copilot #Programming #Software Engineering #Tech Recruitment 2026 #Technical Debt #TrueUp Data #Vibe Coding
Daily CyberSecurity
The Vibe Coding Paradox: Why Software Job Vacancies are Hitting a 3-Year High in the AI Era
Software engineer vacancies have surged 30% in 2026. Discover how "vibe coding" and AI-generated technical debt are creating a massive new demand for human devs.
15 views
Daily Writeups
⤷ Title: The Infinite Factory: How “Vibe Coding” Sparked a 104% Explosion in AI-Generated Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:30:36 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #App Store #Appfigures 2026 #Apple Security #Claude Code #GitHub Copilot #Ledger Live Scam #Micro_apps #Mobile App Trends #Replit #Vibe Coding
Daily CyberSecurity
The Infinite Factory: How "Vibe Coding" Sparked a 104% Explosion in AI-Generated Apps
AI didn't kill the app—it became the production line. Discover how Vibe Coding fueled a 104% surge in new apps and the security risks facing Apple in 2026.
19 views
Daily Writeups
⤷ Title: Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 10:20:06 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Claude Code #Copilot #Cyber Attack #Cybersecurity #GitHub #GitHub Copilot #Indirect Prompt Injection #IPI #Vulnerability
Hackread
Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot.
19 views
Daily Writeups
⤷ Title: The End of Unlimited AI: GitHub Copilot Shifts to “Pay-as-You-Go” Credits to Power the Agentic Era
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:08:17 +0000
════════════════════════
⌗ Tags: #Technology #2026 Tech News #AI Agents #AI Credits #Claude 3.7 Opus #DevTools #FinTech #GitHub Copilot #GitHub Enterprise #software development #Token Throughput #Usage_Based Billing
Daily CyberSecurity
The End of Unlimited AI: GitHub Copilot Shifts to "Pay-as-You-Go" Credits to Power the Agentic Era
Effective June 1, 2026, GitHub Copilot transitions to usage-based billing. Learn how AI credits, token throughput, and model multipliers will impact your workflow.
22 views
Daily Writeups
⤷ Title: Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:39:53 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Harvesting Payload #Cryptographic Token Rotation #Developer Endpoint Isolation #Forensic Log Analysis #GitHub Copilot Leak #GitHub Enterprise Server #GitHub Source Code Breach #supply chain attack #TeamPCP Syndicate #VS Code Extension Worm
Daily CyberSecurity
Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
GitHub confirms a perimeter breach by TeamPCP. An administrative VS Code extension supply-chain worm exfiltrated 3,800 proprietary core source repositories.
11 views
Daily Writeups
⤷ Title: Connecting Burp Suite with GitHub Copilot via MCP Server
════════════════════════
𐀪 Author: Albert
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:02:28 GMT
════════════════════════
⌗ Tags: #penetration_testing #generative_ai_tools #burpsuite #mcp_server #github_copilot
Medium
Connecting Burp Suite with GitHub Copilot via MCP Server
How to bring AI directly into your web vulnerability analysis workflow.
44 views
Daily Writeups
⤷ Title: The Compute Crisis: Developers Revolt Against GitHub Copilot’s Metered Pricing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:31:26 +0000
════════════════════════
⌗ Tags: #Technology #AI coding agent costs #Copilot Pro+ billing changes #developer credit depletion #GitHub Copilot usage billing #open_source IDE alternatives #token_based pricing controversy
Information Security News
GitHub Copilot Usage Billing: Developer Protests
Discover why developers are protesting the new GitHub Copilot usage billing model. Learn about credit depletion rates and platform alternatives.
29 views
Daily Writeups
⤷ Title: Five Green Checkmarks I Typed Myself: Making GitHub’s Own Bot Vouch for a Failing Plugin
════════════════════════
𐀪 Author: _marwankhodair_
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:30:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #github #bug_bounty #penetration_testing #github_copilot
Medium
Five Green Checkmarks I Typed Myself: Making GitHub’s Own Bot Vouch for a Failing Plugin
A Markdown table injection in a pull_request_target workflow, and the bounty verdict that made it funnier.
6 views
Daily Writeups
⤷ Title: GitHub Outage Postmortem: Retry Storm and Copilot Auth Overload Explained
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 10:49:30 +0000
════════════════════════
⌗ Tags: #Technology #github #GitHub Copilot #Github outage #Istio #Postmortem #Retry Storm #Service Mesh
Daily CyberSecurity
GitHub Outage Postmortem: Retry Storm and Copilot Auth Overload Explained
Code hosting platform GitHub experienced a large-scale, prolonged outage this week, disrupting normal service for a substantial number of users. Following its standard practice, GitHub published a…
23 views
Daily Writeups
⤷ Title: AI Agent Finds GitHub Actions Bug, Reaches Snowflake’s Internal Jira
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 14:02:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Credential Exposure #GitHub Actions #GitHub Copilot #Shell Injection #Snowflake #Wiz
Information Security News
AI Agent Finds GitHub Actions Bug, Reaches Snowflake’s Internal Jira
An AI agent designed to hunt for vulnerabilities independently discovered a flaw within a public Snowflake repository and used it to gain access to the company’s internal Jira system. The vu…
36 views
Daily Writeups
⤷ Title: GitHub Copilot Runtime Migrated to Rust
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 13:15:49 +0000
════════════════════════
⌗ Tags: #Technology #Artificial intelligence #GitHub Copilot #Rust #Software Engineering
Information Security News
GitHub Copilot Runtime Migrated to Rust
GitHub has successfully rewritten the entire Copilot runtime environment, transitioning from TypeScript to Rust. Astonishingly, Copilot’s own artificial intelligence agents generated the vas…
15 views
Daily Writeups
⤷ Title: Triage Copilot Security Review Findings Before You Apply the Fixes
════════════════════════
𐀪 Author: The Review Surface
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 12:01:02 GMT
════════════════════════
⌗ Tags: #ai_coding #application_security #github_copilot #secure_coding #code_review
Medium
Triage Copilot Security Review Findings Before You Apply the Fixes
A finding-by-finding ledger for verifying evidence, fix scope, re-testing, and optional PR dispositions before Copilot security suggestions…
7 views