Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: The Billion-Dollar Invite: How UNC1069’s Fake Meetings Hijack Crypto Fortunes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 02:14:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlueNoroff #Cryptocurrency Security #cyber_espionage #macOS Malware #North Korea APT #phishing #Session Hijacking #social engineering #UNC1069 #Web3
Daily CyberSecurity
The Billion-Dollar Invite: How UNC1069’s Fake Meetings Hijack Crypto Fortunes
North Korean group UNC1069 (BlueNoroff) targets Web3 with fake Zoom/Teams links. 164 domains blocked. Secure your crypto assets and browser extensions now!
14 views
Daily Writeups
⤷ Title: Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:18:14 +0000
════════════════════════
⌗ Tags: #Technology #Chrome 146 #cybersecurity #DBSC #Device Bound Credentials #google chrome #infosec #InfoStealer malware #Secure Enclave #Session Hijacking #TPM #Web Security
Daily CyberSecurity
Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
Google launches DBSC in Chrome 146, binding session cookies to hardware like TPM. Neutralize infostealers and stop session hijacking with this new standard.
12 views
Daily Writeups
⤷ Title: 108 Coordinated Chrome Extensions Hijack Your Private Telegram Sessions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Malware #browser security #C2 Infrastructure #Chrome extensions #cybersecurity #Google OAuth #infosec #malware #Session Hijacking #Socket Research #Telegram
Daily CyberSecurity
108 Coordinated Chrome Extensions Hijack Your Private Telegram Sessions
Socket identifies 108 malicious Chrome extensions stealing Telegram sessions and Google IDs. 20,000 installs hit—audit your browser extensions immediately!
25 views
Daily Writeups
⤷ Title: FBI and Indonesian Authorities Dismantle Prolific “W3LL” Phishing Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 04:25:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime Takedown #FBI Atlanta #Indonesian National Police #MaaS #Malware_as_a_Service #MFA Bypass #Phishing_as_a_Service #Session Hijacking #W3LL Phishing Kit #W3LLSTORE
Daily CyberSecurity
FBI and Indonesian Authorities Dismantle Prolific "W3LL" Phishing Empire
The FBI and Indonesia dismantle W3LL, a $20M phishing kit that bypassed MFA and hijacked live sessions. Learn about the takedown of this MaaS powerhouse.
19 views
Daily Writeups
⤷ Title: JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 08:35:42 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #Brazil #DLL Sideloading #infosec #JanelaRAT #kaspersky #LATAM Cybercrime #Malware Analysis #Mexico #MFA Bypass #Session Hijacking
Daily CyberSecurity
JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts
JanelaRAT targets banking users in Brazil and Mexico using window monitoring and fake updates. Learn how this 2026 threat bypasses MFA to hijack sessions.
19 views
Daily Writeups
⤷ Title: GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:30:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4922 #CVE_2026_5816 #DevSecOps #gitlab #GraphQL API #infosec #Patch Alert #security update #Session Hijacking #Web IDE
Daily CyberSecurity
GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
GitLab fixes high-severity GraphQL CSRF and Web IDE vulnerabilities in versions 18.11.1, 18.10.4, and 18.9.6. Protect your sessions and projects—patch now!
22 views
Daily Writeups
⤷ Title: ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:11:34 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #ClickFix #Crypto theft #cybersecurity #Infostealer #macOS #macOS Tahoe #malware #Netskope #phishing #Session Hijacking #social engineering
Daily CyberSecurity
ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
Netskope uncovers a ClickFix macOS campaign that holds the UI hostage to steal system passwords, Keychains, and 200+ browser extensions.
11 views
Daily Writeups
⤷ Title: Mailcow Critical Alert: Unauthenticated XSS Threatens Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 13:55:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Dashboard #Autodiscover #CVE_2026_40872 #docker #Email Security #infosec #mailcow #Patch Alert #Redis #Session Hijacking #Stored XSS #Web Security
Daily CyberSecurity
Mailcow Critical Alert: Unauthenticated XSS Threatens Admin Takeover
The popular open-source groupware suite mailcow: dockerized is facing a high-stakes security challenge. A critical Stored Cross-Site Scripting (XSS) vulnerability has been discovered in the platfo…
21 views
Daily Writeups
⤷ Title: The AI-Powered Cybercrime Factory: Unmasking the Bluekit “All-in-One” Phishing Revolution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:30:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Phishing #Bluekit #Credential Theft #cybersecurity #infosec #Phishing_as_a_Service #Quishing #Session Hijacking #social engineering #Threat Intel #Varonis
Daily CyberSecurity
The AI-Powered Cybercrime Factory: Unmasking the Bluekit "All-in-One" Phishing Revolution
Varonis uncovers Bluekit, a new phishing-as-a-service kit using AI and 40+ templates to automate session hijacking and credential theft. See how it works.
30 views
Daily Writeups
⤷ Title: Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Malware #Chromium Browsers #Clipboard Hijacker #Control Flow Flattening #Cyber Security #Discord Token Stealer #Gremlin Stealer #infosec #Infostealer #MFA Bypass #Session Hijacking #Unit 42
Daily CyberSecurity
Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.
17 views
Daily Writeups
⤷ Title: phpBB Authentication Bypass Fixed in Version 3.3.17
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:35:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aikido Security #authentication bypass #Forum Security #phpBB #Session Hijacking #Web Vulnerability
Information Security News
phpBB Authentication Bypass Fixed in Version 3.3.17
A critical phpBB authentication bypass in 3.3.16 and earlier lets attackers hijack any user session with a single HTTP request. Update now.
12 views
Daily Writeups
⤷ Title: Payroll Pirate Hijacks Sessions to Steal Paychecks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 07:25:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM Phishing #Business Email Compromise #MFA Bypass #Payroll Fraud #Payroll Pirate #Session Hijacking
Information Security News
Payroll Pirate Hijacks Sessions to Steal Paychecks
BushidoToken details Payroll Pirate, an AiTM phishing campaign that hijacks authenticated sessions to redirect payroll payments to attackers.
12 views
Daily Writeups
⤷ Title: The Wristband Problem
════════════════════════
𐀪 Author: Sentinel Layer
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 03:01:02 GMT
════════════════════════
⌗ Tags: #web_security #authentication #application_security #cybersecurity #session_hijacking
Medium
The Wristband Problem
The Wristband Problem! A few years ago I stayed at an all-inclusive resort for a friend’s wedding. At check-in, they scanned my ID, took a photo, and clipped a paper wristband around my wrist …
14 views
Daily Writeups
⤷ Title: Kena Session Cookie Stealer: Reset PC Saja Ternyata Gak Cukup! Ini Langkah Pengamanan yang Benar
════════════════════════
𐀪 Author: rizko
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #session_hijacking #cookies_stealer #cookies #hacking
Medium
Kena Session Cookie Stealer: Reset PC Saja Ternyata Gak Cukup! Ini Langkah Pengamanan yang Benar
Pernah gak bayangin: PC kamu tiba-tiba kena malware infostealer seperti akun discord mengirim giveaway scam ke semua server atau teman…
19 views
Daily Writeups
⤷ Title: Session Hijacking: The Silent Takeover
════════════════════════
𐀪 Author: SH4D0W SL4V3
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 17:57:36 GMT
════════════════════════
⌗ Tags: #xss_attack #hacking #session_hijacking #oauth #account_takeover
Medium
Session Hijacking: The Silent Takeover
Why stealing a session can be more valuable than stealing a password.
17 views
Daily Writeups
⤷ Title: Session Hijacking
════════════════════════
𐀪 Author: Michele Grimaldi
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:02:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #hacking #session_hijacking #life_hacking
Medium
Session Hijacking
If you work with systems that expose APIs — whether a classic web application or a backend serving an LLM agent — there’s a class of bugs…
18 views
Daily Writeups
⤷ Title: Session Hijacking
════════════════════════
𐀪 Author: Reyza Maulana Putra
════════════════════════
ⴵ Time: Tue, 01 Sep 2026 16:57:06 GMT
════════════════════════
⌗ Tags: #owasp #session_hijacking #kali_linux #ethical_hacking
Medium
Session Hijacking
Session hijacking Adalah teknik serangan siber di mana penyerang mengambil alih atau membajak sesi aktif milik pengguna tanpa izin yang…
9 views
Daily Writeups
⤷ Title: Session Hijacking: How Attackers Steal and Abuse Sessions
════════════════════════
𐀪 Author: Stay Benign Secure
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 04:27:52 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #session_hijacking #privacy #che
Medium
Session Hijacking: How Attackers Steal and Abuse Sessions
SSession hijacking is an attack in which an attacker obtains or takes control of a valid user’s active session—usually by stealing…
10 views
Daily Writeups
⤷ Title: TA419 Phishing Campaign Poses as Anthropic Staff
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 13:57:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anthropic #Cyber Espionage #Evilginx #Microsoft 365 #phishing #Proofpoint #Session Hijacking #TA419
Information Security News
TA419 Phishing Campaign Poses as Anthropic Staff
A Chinese Spy Group Targets Trust, Not Bugs A Chinese cyber-espionage group has chosen a new way into the circle of American AI experts. It does not use a vulnerability. It uses trust. The group, …
20 views
Daily Writeups
⤷ Title: Apache Jackrabbit Fixes Critical WebDAV Session Hijack Flaw CVE-2026-92414
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 16:08:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Jackrabbit #CVE_2026_92414 #CVE_2026_92415 #java #Session Hijacking #WebDAV
Daily CyberSecurity
Apache Jackrabbit Fixes Critical WebDAV Session Hijack Flaw CVE-2026-92414
TL;DR The Apache Software Foundation has patched two Apache Jackrabbit vulnerabilities in its WebDAV components. The worst, CVE-2026-92414, scores 9.3 on CVSS 4.0 and lets an attacker hijack a cac…
19 views