Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.49K subscribers

2 photos

128K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.49K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Wed, 08 Mar 2023 09:00:25 GMT
———————————————
✏️Title: Browser Extension Threats: Persistent Access and Data Theft, MITRE ID: T1176
———————————————
📎Link: https://medium.com/p/f1bcfc3f8777
———————————————
Tags: #persistent #threat_intelligence #mitre_attack_framework #threat_hunting #cybersecurity

Browser Extension Threats: Persistent Access and Data Theft, MITRE ID: T1176

Abstract: Adversaries may exploit Internet browser extensions to establish persistent access to victim systems, steal sensitive data, and…

7 views10:00

⤷ Title: AyySSHush: New Stealthy Botnet Backdoors ASUS Routers, Persists Through Firmware Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 31 May 2025 11:38:44 +0000
════════════════════════
⌗ Tags: #Malware #AiProtection #ASUS routers #AyySSHush #botnet #censys #cyberattack #firmware #GreyNoise #IoT security #network_security #persistent threat #ssh

Daily CyberSecurity

AyySSHush: New Stealthy Botnet Backdoors ASUS Routers, Persists Through Firmware Updates

AyySSHush is a new stealthy botnet backdooring ASUS routers via SSH keys, abusing legitimate features to persist across firmware updates and targeting residential networks globally.

45 views12:04

⤷ Title: SonicWall SMA 100 Devices Under Persistent Attack: UNC6148 Deploys Stealthy OVERSTEP Rootkit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 02:07:17 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #OVERSTEP #Persistent Access #rootkit #SMA 100 #SonicWall #threat intelligence #UNC6148 #zero_day

Penetration Testing Tools

SonicWall SMA 100 Devices Under Persistent Attack: UNC6148 Deploys Stealthy OVERSTEP Rootkit

Google's GTIG reports ongoing attacks on SonicWall SMA 100 devices by UNC6148, using stolen credentials and the new OVERSTEP rootkit for persistent, undetectable control.

17 views11:04

⤷ Title: Stealthy WordPress Backdoor Found Hiding in Must-Use Mu-Plugins Directory for Persistent Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 25 Jul 2025 21:30:42 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor #cybersecurity #malware #Mu_Plugins #Persistent Access #RCE #remote code execution #Sucuri #WordPress

Penetration Testing Tools

Stealthy WordPress Backdoor Found Hiding in Must-Use Mu-Plugins Directory for Persistent Access

A stealthy WordPress backdoor disguised as a system file in the mu-plugins directory grants attackers persistent access and remote code execution, creating fake admins and file managers.

22 views23:04

⤷ Title: Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 20 Sep 2025 17:33:33 GMT
════════════════════════
⌗ Tags: #bug_bounty #persistent_xss_via_cache #web_cache_poisoning #http_header_injection #cache_poisoning_attack

Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers

Learn how combining X-Forwarded-Host and X-Original-URL vulnerabilities can poison web caches, delivering persistent XSS to unsuspecting…

34 views18:04

⤷ Title: Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 08:23:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #persistent_xss_via_cache #web_cache_poisoning #http_header_injection #cache_poisoning_attack

Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers

Learn how combining X-Forwarded-Host and X-Original-URL vulnerabilities can poison web caches, delivering persistent XSS to unsuspecting…

16 views10:04

⤷ Title: The Designer in the Machine: How WordPress’s New AI Concierge is Killing Layout Frustration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 15:26:52 +0000
════════════════════════
⌗ Tags: #Technology #AI Site Editor #Automattic #Block Themes #CSS automation #Generative AI #Persistent AI Assistant #Site Editor #Tech News 2026 #web design #wordpress #WordPress Business

Daily CyberSecurity

The Designer in the Machine: How WordPress’s New AI Concierge is Killing Layout Frustration

WordPress.com launches a Persistent AI Assistant to handle CSS, font styling, and image editing. Turn natural language into a professional site design instantly.

30 views17:03

⤷ Title: Google Teases “Android Halo” to Track Invisible 24/7 AI Agents at a Glance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:07:35 +0000
════════════════════════
⌗ Tags: #Android #Android 17 Operating System #Android Halo Feature #Android Show 2026 #Background Agent Visibility #Contextual Polymorphism #Gemini Spark Status Tracker #Google I/O 2026 #Mobile UX Breakthrough #Persistent Ambient Telemetry #Status Bar AI Morphing

Daily CyberSecurity

Google Teases "Android Halo" to Track Invisible 24/7 AI Agents at a Glance

At Google I/O 2026, Google unveiled Android Halo—a persistent status bar interface coming to Android 17 to subtly track background AI agents.

11 views03:05