Daily Writeups
@Daily_Writeups
4.1K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.1K subscribers
Daily Writeups
⤷ Title: Red Canary Mac Monitor: advanced, stand-alone system monitoring tool tailor-made for macOS security research
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 07 Mar 2025 01:45:11 +0000
════════════════════════
⌗ Tags: #Malware Defense #Mac Monitor #macOS security research
Penetration Testing Tools
Red Canary Mac Monitor: advanced, stand-alone system monitoring tool tailor-made for macOS security research
Red Canary Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research, malware triage
34 views
Daily Writeups
⤷ Title: Fake Mac Fixes Distribute New Shamos Infostealer-A Wake-Up Call for macOS Users
════════════════════════
𐀪 Author: Chetan Seripally
════════════════════════
ⴵ Time: Sat, 23 Aug 2025 10:12:39 GMT
════════════════════════
⌗ Tags: #coe_security #compliance #macos_security #cybersecurity #data_protection
Medium
Fake Mac Fixes Distribute New Shamos Infostealer-A Wake-Up Call for macOS Users
Cybercriminals are leveraging fake system optimization tools to target macOS users with a new malware strain called Shamos Infostealer…
11 views
Daily Writeups
⤷ Title: GlassWorm’s macOS Gambit: The Invisible Worm Draining Developer Wallets via Open VSX
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:05:20 +0000
════════════════════════
⌗ Tags: #Malware #Crypto_Stealer #GlassWorm #Koi Security #macOS Security #Open VSX #Prettier Pro #Solana C2 #supply chain attack #Vibe_Coding #VS Code #ZOMBI RAT
Penetration Testing Tools
GlassWorm’s macOS Gambit: The Invisible Worm Draining Developer Wallets via Open VSX
A new wave of malicious extensions has been uncovered in the Open VSX extension marketplace, which is used
22 views
Daily Writeups
⤷ Title: macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:17:01 +0000
════════════════════════
⌗ Tags: #Malware #AES_256_CBC #AppleScript #Developer Tools #GlassWorm #Hardware Wallets #KOI Security #Ledger #macOS security #malware #supply chain attack #Trezor #VS Code Extensions
Daily CyberSecurity
macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
The resilient “GlassWorm” threat actor, known for embedding malicious code into Visual Studio Code extensions, has returned with a sophisticated fourth wave of attacks. A new report fr…
13 views
Daily Writeups
⤷ Title: “Can You Hear Me?” BlueNoroff Hackers Use Fake Audio Glitch to Breach macOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:20:32 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #BlueNoroff #Crypto Heist #Daylight Security #GhostCall #Keychain Theft #Lazarus Group #macOS security #malware #Microsoft Teams #social engineering
Daily CyberSecurity
"Can You Hear Me?" BlueNoroff Hackers Use Fake Audio Glitch to Breach macOS
BlueNoroff hackers use fake "audio issues" on Teams calls to trick macOS users. The "fix" runs terminal commands that steal Keychains. Watch out.
14 views
Daily Writeups
⤷ Title: Open VSX Hijacked: “GlassWorm” Malware Poisons VS Code Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:06:26 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #macOS security #malware #oorzc #Open VSX #Socket Research #Solana C2 #supply chain attack #VS Code Extensions
Daily CyberSecurity
Open VSX Hijacked: "GlassWorm" Malware Poisons VS Code Extensions
GlassWorm malware found in Open VSX extensions. Hackers stole AWS & SSH keys from macOS devs using Solana C2. 22k+ downloads affected. Check your tools.
17 views
Daily Writeups
⤷ Title: Fake CleanMyMac Site Unleashes SHub Stealer to Drain macOS Crypto Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:45:06 +0000
════════════════════════
⌗ Tags: #Malware #CleanMyMac Phishing #ClickFix #Cryptocurrency Theft #cybersecurity #infosec #MAC Malware #macOS security #SHub Stealer #social engineering #threat intelligence
Daily CyberSecurity
Fake CleanMyMac Site Unleashes SHub Stealer to Drain macOS Crypto Wallets
A fake CleanMyMac website is using ClickFix tactics to trick macOS users into installing SHub Stealer, a potent malware targeting passwords and crypto.
17 views
Daily Writeups
⤷ Title: Shattering the Myth of the “Serene Harbor”: Trojans and Info-Stealers Now Dominate macOS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:23:16 +0000
════════════════════════
⌗ Tags: #Malware #Apple Security #Cryptojacking #Cybersecurity 2026 #enterprise security #Information Stealer #Jamf 2026 #Mac malware #macOS Security #trojan #zero_day
Penetration Testing Tools
Shattering the Myth of the "Serene Harbor": Trojans and Info-Stealers Now Dominate macOS
Apple computers have long since ceased to be a “serene harbor,” a reality underscored by the latest findings
14 views
Daily Writeups
⤷ Title: Apple 26.4 Security Update: What to Verify After Patch Day
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:28:53 GMT
════════════════════════
⌗ Tags: #penetration_testing #apple_security #cybersecurity #macos_security #web_security
Medium
Apple 26.4 Security Update: What to Verify After Patch Day
Apple 26.4 Release Week: What Security Teams Must Verify After Patch Day
12 views
Daily Writeups
⤷ Title: The Script Editor Shift: How ClickFix Evades macOS 26.4 Security to Deliver Atomic Stealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:00:49 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #Atomic Stealer #ClickFix #cybersecurity #Infostealer #Jamf #macOS 26.4 #macOS security #malware #Script Editor #social engineering
Daily CyberSecurity
The Script Editor Shift: How ClickFix Evades macOS 26.4 Security to Deliver Atomic Stealer
Jamf identifies a macOS ClickFix pivot: attackers now use the Script Editor to bypass Terminal scans and deliver Atomic Stealer. Learn how to stay protected.
8 views
Daily Writeups
⤷ Title: OpenAI’s Silent Breach: Why You Must Update Your macOS ChatGPT App Before May 8
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:10:56 +0000
════════════════════════
⌗ Tags: #Malware #Axios #Certificate Revocation #ChatGPT #Codex #cybersecurity #Data Privacy #macOS security #OpenAI #software update #supply chain attack
Daily CyberSecurity
OpenAI’s Silent Breach: Why You Must Update Your macOS ChatGPT App Before May 8
OpenAI revokes legacy macOS certificates after a malicious @Axios library incursion. Update ChatGPT and Codex by May 8, 2026, to avoid software failure.
16 views
Daily Writeups
⤷ Title: North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 14:28:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlueNoroff #ClickFix #Crypto theft #cybersecurity #Deepfakes #Fake Meetings #infosec #Lazarus Group #macOS security #North Korea #social engineering #UNC1069 #Web3 #Windows Defender
Daily CyberSecurity
North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
North Korea's UNC1069 uses fake video calls and "ClickFix" prompts to drain crypto assets and record victims for deepfakes. Audit your meetings now!
46 views
Daily Writeups
⤷ Title: The “JobStealer” Trojan Hijacking Crypto Wallets via Fake Meetings
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 09:11:03 +0000
════════════════════════
⌗ Tags: #Malware #Crypto theft #Cybercrime #Doctor Web #infosec #JobStealer #Juseo #macOS security #malware #MeetLab #phishing #social engineering #Windows malware
Daily CyberSecurity
The "JobStealer" Trojan Hijacking Crypto Wallets via Fake Meetings
Job seekers beware: The JobStealer trojan poses as video meeting apps to hijack 300+ crypto wallets and Telegram data. Learn how to spot this 2026 threat.
23 views
Daily Writeups
⤷ Title: OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 04:00:50 +0000
════════════════════════
⌗ Tags: #Data Leak #Atlas Browser #ChatGPT #Code_Signing Certificate #Codex #Cybersecurity 2026 #InfoSec News #macOS security #npm Supply Chain Attack #OpenAI #software update #TanStack
Daily CyberSecurity
OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
OpenAI rotates code signing certificates following the TanStack npm breach. macOS users must update ChatGPT and Codex manually before June 12, 2026.
21 views
Daily Writeups
⤷ Title: Critical Privilege Escalation Flaw Fixed in OpenVPN Connect for macOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 12:01:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #App Patch #CVE_2026_9560 #Local IPC #macOS security #OpenVPN Connect #privilege escalation
Daily CyberSecurity
Critical Privilege Escalation Flaw Fixed in OpenVPN Connect for macOS
Learn about the critical OpenVPN Connect macOS vulnerability (CVE-2026-9560) that allows local privilege escalation, and how to patch it now.
41 views
Daily Writeups
⤷ Title: Apple Restricts Full Disk Access for macOS AI Agents
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 12:59:48 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #Apple Privacy #Full Disk Access #macOS security
Daily CyberSecurity
Apple Restricts Full Disk Access for macOS AI Agents
As highly autonomous AI agents rapidly proliferate across desktop environments, Apple has officially sounded a severe security alarm regarding this escalating trend. In fact, Apple is now confront…
52 views
Daily Writeups
⤷ Title: Researcher Publishes Technical Details and PoC Exploit for macOS HFS+ Kernel Flaw CVE-2026-43682
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 00:28:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #CVE_2026_43682 #HFS+ #Kernel Heap Overflow #macOS #macOS security #proof_of_concept
Daily CyberSecurity
Researcher Publishes Technical Details and PoC Exploit for macOS HFS+ Kernel Flaw CVE-2026-43682
TL;DR Security researcher Peter Malone has published a full technical analysis and proof-of-concept code for CVE-2026-43682, a macOS HFS+ vulnerability rated CVSS 9.8. A malformed disk image can m…
29 views