Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The Trojan Horse in Your IDE: How AI Assistants Can Be Tricked into Hacking Your Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 04:38:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #Code Assistant #cybersecurity #data leak #GitHub Copilot #hacking #Prompt Injection #vulnerability
Penetration Testing Tools
The Trojan Horse in Your IDE: How AI Assistants Can Be Tricked into Hacking Your Code
Your AI coding assistant can be tricked into embedding backdoors and stealing data. A new report details the risks of indirect prompt injection and other vulnerabilities.
11 views
Daily Writeups
⤷ Title: GitHub Unveils Copilot CLI: A New AI Agent That Brings Coding Assistance to Your Terminal
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Sep 2025 03:47:44 +0000
════════════════════════
⌗ Tags: #Technology #AI #CLI #Copilot CLI #developers #Github #GitHub Copilot #Model Context Protocol #Terminal
Penetration Testing Tools
GitHub Unveils Copilot CLI: A New AI Agent That Brings Coding Assistance to Your Terminal
GitHub's new Copilot CLI brings AI to your terminal. The tool offers coding assistance, debugging, and project management—all executed with user confirmation.
17 views
Daily Writeups
⤷ Title: GitHub Copilot Zero-Click CamoLeak Exposed: CVE-2025-59145 (CVSS 9.6) Allowed Silent Data Theft from Private Repos
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 02:42:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #CamoLeak #CVE_2025_59145 #Data Exfiltration #GitHub Copilot #Prompt Injection #Supply Chain #Zero_Click
Penetration Testing Tools
GitHub Copilot Zero-Click CamoLeak Exposed: CVE-2025-59145 (CVSS 9.6) Allowed Silent Data Theft from Private Repos
A critical flaw (CVE-2025-59145, CVSS 9.6) in GitHub Copilot allowed zero-click data theft. Attackers injected hidden prompts into pull requests, which the agent obeyed to exfiltrate private code via the Camo image service.
16 views
Daily Writeups
⤷ Title: AI Coding Tools and Hidden Threats A DLL Malware Story
════════════════════════
𐀪 Author: Adnane Arharbi, Eng
════════════════════════
ⴵ Time: Mon, 20 Oct 2025 01:55:11 GMT
════════════════════════
⌗ Tags: #software_engineering #github_copilot #malware #ai_in_development #cybersecurity
Medium
AI Coding Tools and Hidden Threats A DLL Malware Story
Artificial Intelligence is revolutionizing software development. Tools like GitHub Copilot, Amazon CodeWhisperer, and other AI-powered…
29 views
Daily Writeups
⤷ Title: IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:10:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI_IDEs #Cursor #CVE #Data Exfiltration #GitHub Copilot #IDEsaster #Prompt Injection #RCE #Secure for AI #Supply Chain
Penetration Testing Tools
IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft
More than thirty vulnerabilities have been uncovered in popular AI-enhanced development environments, all of which allow attackers —
13 views
Daily Writeups
⤷ Title: Microsoft Patches Three Zero-Days Including Active Cloud Files UAF to SYSTEM and Copilot RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 01:51:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Cloud Files UAF #GitHub Copilot #Microsoft Patch Tuesday #powershell #rce #SYSTEM Privilege #zero_day
Daily CyberSecurity
Microsoft Patches Three Zero-Days Including Active Cloud Files UAF to SYSTEM and Copilot RCE
Microsoft patched 72 flaws, including three zero-days. Fixes target a Cloud Files UAF exploited for SYSTEM privileges and an RCE in GitHub Copilot. PowerShell gets a new security prompt.
18 views
Daily Writeups
⤷ Title: PATCH NOW: Microsoft Fixes 57 Flaws, Including Three Zero-Days Actively Exploited
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 04:44:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #CVE_2025_62221 #cybersecurity #GitHub Copilot #Microsoft #Patch Tuesday #PowerShell #RCE #Windows Security #zero_day
Penetration Testing Tools
PATCH NOW: Microsoft Fixes 57 Flaws, Including Three Zero-Days Actively Exploited
Microsoft has released its December security updates: Patch Tuesday brings fixes for 57 vulnerabilities, including three zero-days (one
21 views
Daily Writeups
⤷ Title: The Great Rewrite: Microsoft’s Radical 2030 Vision to Kill C/C++ with AI-Powered Rust
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:06:58 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #C++ #CoreAI #Future of Software Engineering #Garen Hunt #GitHub Copilot #memory safety #Microsoft #Rust #Technical Debt #Windows Kernel
Daily CyberSecurity
The Great Rewrite: Microsoft’s Radical 2030 Vision to Kill C/C++ with AI-Powered Rust
A recent job posting from Microsoft’s engineering team appears to hint at an ambitious, sweeping transformation now underway: by 2030, Microsoft aims to eliminate all C and C++ code from its codeb…
14 views
Daily Writeups
⤷ Title: AgentHopper Alert: How a Single Web Sentence Can Hijack Your AI Assistant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:26:36 +0000
════════════════════════
⌗ Tags: #Open Source Tool #38C3 #AgentHopper #AI Agents #ASCII Smuggling #Claude Code #GitHub Copilot #Infosec 2025 #Johann Rehberger #Prompt Injection #ZombAI
Information Security News
AgentHopper Alert: How a Single Web Sentence Can Hijack Your AI Assistant
At the recent Chaos Communication Congress in Germany, a new warning was issued about the risks associated with AI agents. According to information security specialist Johann Rehberger, a computer…
20 views
Daily Writeups
⤷ Title: RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 07:36:33 +0000
════════════════════════
⌗ Tags: #Malware #AI security #GitHub Codespaces #GitHub Copilot #GITHUB_TOKEN #Indirect Prompt Injection #Microsoft Security #Orca Security #repository takeover #RoguePilot #supply chain attack #Tech News 2026
Penetration Testing Tools
RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
A critical vulnerability has been unearthed within GitHub Codespaces, enabling the illicit hijacking of repositories through the integrated
19 views
Daily Writeups
⤷ Title: The Trojan Prompt: How an Autonomous AI Hijacked Aqua Trivy to Weaponize Developer Copilots
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 00:06:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Prompt Injection #Aqua Trivy #Claude #cybersecurity #DevSecOps #Gemini #GitHub Copilot #infosec #social engineering #Socket #supply chain attack #VS Code
Daily CyberSecurity
The Trojan Prompt: How an Autonomous AI Hijacked Aqua Trivy to Weaponize Developer Copilots
Socket reveals how an AI bot hijacked the Aqua Trivy VS Code extension, using prompt injection to turn developer AI assistants into stealthy data thieves.
14 views
Daily Writeups
⤷ Title: Extending BurpSuite with MCP: Leveraging GitHub Copilot for Offensive Security Automation
════════════════════════
𐀪 Author: Rio Darmawan
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 04:57:49 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #github_copilot #penetration_testing #red_team #ai_agent
Medium
Extending BurpSuite with MCP: Leveraging GitHub Copilot for Offensive Security Automation
Artificial Intelligence is no longer just a coding assistant or chatbot. In offensive security, AI is increasingly becoming part of the…
21 views
Daily Writeups
⤷ Title: Building an AI-Powered Pentesting Workflow with Burp MCP and GitHub Copilot
════════════════════════
𐀪 Author: Br0wn$t4n
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 08:31:03 GMT
════════════════════════
⌗ Tags: #ai #hacking #github_copilot #automation #information_security
Medium
Building an AI-Powered Pentesting Workflow with Burp MCP and GitHub Copilot
Modern security testing is increasingly moving toward AI-assisted workflows. Instead of manually inspecting every request, we can now…
47 views
Daily Writeups
⤷ Title: The Vibe Coding Paradox: Why Software Job Vacancies are Hitting a 3-Year High in the AI Era
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 01:48:35 +0000
════════════════════════
⌗ Tags: #Technology #AI Coding #Future of Work #Ghost Jobs #GitHub Copilot #Programming #Software Engineering #Tech Recruitment 2026 #Technical Debt #TrueUp Data #Vibe Coding
Daily CyberSecurity
The Vibe Coding Paradox: Why Software Job Vacancies are Hitting a 3-Year High in the AI Era
Software engineer vacancies have surged 30% in 2026. Discover how "vibe coding" and AI-generated technical debt are creating a massive new demand for human devs.
14 views
Daily Writeups
⤷ Title: The Infinite Factory: How “Vibe Coding” Sparked a 104% Explosion in AI-Generated Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:30:36 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #App Store #Appfigures 2026 #Apple Security #Claude Code #GitHub Copilot #Ledger Live Scam #Micro_apps #Mobile App Trends #Replit #Vibe Coding
Daily CyberSecurity
The Infinite Factory: How "Vibe Coding" Sparked a 104% Explosion in AI-Generated Apps
AI didn't kill the app—it became the production line. Discover how Vibe Coding fueled a 104% surge in new apps and the security risks facing Apple in 2026.
19 views
Daily Writeups
⤷ Title: Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 10:20:06 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Claude Code #Copilot #Cyber Attack #Cybersecurity #GitHub #GitHub Copilot #Indirect Prompt Injection #IPI #Vulnerability
Hackread
Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot.
19 views
Daily Writeups
⤷ Title: The End of Unlimited AI: GitHub Copilot Shifts to “Pay-as-You-Go” Credits to Power the Agentic Era
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:08:17 +0000
════════════════════════
⌗ Tags: #Technology #2026 Tech News #AI Agents #AI Credits #Claude 3.7 Opus #DevTools #FinTech #GitHub Copilot #GitHub Enterprise #software development #Token Throughput #Usage_Based Billing
Daily CyberSecurity
The End of Unlimited AI: GitHub Copilot Shifts to "Pay-as-You-Go" Credits to Power the Agentic Era
Effective June 1, 2026, GitHub Copilot transitions to usage-based billing. Learn how AI credits, token throughput, and model multipliers will impact your workflow.
20 views
Daily Writeups
⤷ Title: Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:39:53 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Harvesting Payload #Cryptographic Token Rotation #Developer Endpoint Isolation #Forensic Log Analysis #GitHub Copilot Leak #GitHub Enterprise Server #GitHub Source Code Breach #supply chain attack #TeamPCP Syndicate #VS Code Extension Worm
Daily CyberSecurity
Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
GitHub confirms a perimeter breach by TeamPCP. An administrative VS Code extension supply-chain worm exfiltrated 3,800 proprietary core source repositories.
11 views
Daily Writeups
⤷ Title: Connecting Burp Suite with GitHub Copilot via MCP Server
════════════════════════
𐀪 Author: Albert
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:02:28 GMT
════════════════════════
⌗ Tags: #penetration_testing #generative_ai_tools #burpsuite #mcp_server #github_copilot
Medium
Connecting Burp Suite with GitHub Copilot via MCP Server
How to bring AI directly into your web vulnerability analysis workflow.
43 views
Daily Writeups
⤷ Title: The Compute Crisis: Developers Revolt Against GitHub Copilot’s Metered Pricing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:31:26 +0000
════════════════════════
⌗ Tags: #Technology #AI coding agent costs #Copilot Pro+ billing changes #developer credit depletion #GitHub Copilot usage billing #open_source IDE alternatives #token_based pricing controversy
Information Security News
GitHub Copilot Usage Billing: Developer Protests
Discover why developers are protesting the new GitHub Copilot usage billing model. Learn about credit depletion rates and platform alternatives.
29 views