Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: PentAGI: An AI Agent That Can Try to Hack Your Application Before Someone Else Does
════════════════════════
𐀪 Author: CodeWithYog
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 02:20:12 GMT
════════════════════════
⌗ Tags: #software_development #artificial_intelligence #penetration_testing #technology #programming
Medium
PentAGI: An AI Agent That Can Try to Hack Your Application Before Someone Else Does
I spend a lot of time thinking about how AI agents can help us write software. PentAGI made me think about the other side of development…
38 views
Daily Writeups
⤷ Title: The SBI Data Leak Is a Cybersecurity Wake Up Call for Every Software Team
════════════════════════
𐀪 Author: Appzlogic
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 08:35:17 GMT
════════════════════════
⌗ Tags: #software_development #application_security #cybersecurity #software_testing #data_breach
Medium
The SBI Data Leak Is a Cybersecurity Wake Up Call for Every Software Team
The recent data exposure involving the State Bank of India (SBI) has put an important cybersecurity question back in the spotlight. How…
21 views
Daily Writeups
⤷ Title: PHP2Shell Just Sent the Bill for a Decade of Convenient Defaults
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:56:21 GMT
════════════════════════
⌗ Tags: #hacking #programming #software_development #php #software_engineering
Medium
PHP2Shell Just Sent the Bill for a Decade of Convenient Defaults
We have seen this movie before, and it never gets less uncomfortable.
20 views
Daily Writeups
⤷ Title: A Nightmare Day for Cybersecurity, and Why Remade With Rust Exists
════════════════════════
𐀪 Author: Tim Almond
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 17:45:21 GMT
════════════════════════
⌗ Tags: #software_development #software_engineering #rust #malware #hacking
Medium
A Nightmare Day for Cybersecurity, and Why Remade With Rust Exists
The NSA disclosed massive backdoors today. PHP with two critical unauthenticated remote code execution bugs already being used. LiteLLM…
15 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #7: Blogger (One Raw Query Is All It Takes)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 19:04:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #code_review #software_engineering #software_development #application_security
Medium
The Secure Code Review Challenge — Solution #7: Blogger (One Raw Query Is All It Takes)
Blogger gets almost everything right: every edit and delete checks who owns the post, the database layer uses the Knex query builder (so…
19 views
Daily Writeups
⤷ Title: PHP2Shell: Your Website Can Be Attacked Before Your Code Even Runs
════════════════════════
𐀪 Author: Halil Özel
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 06:00:05 GMT
════════════════════════
⌗ Tags: #php #web_development #hacking #software_development #cybersecurity
Medium
PHP2Shell: Your Website Can Be Attacked Before Your Code Even Runs
Two critical PHP flaws, AI-assisted exploit research, and the runtime update your application dashboard may never show you.
22 views
Daily Writeups
⤷ Title: Investigation: Deconstructing the October 21, 2026 Global PHP Zero-Day Outbreak
════════════════════════
𐀪 Author: Charles Mwaniki
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 07:02:44 GMT
════════════════════════
⌗ Tags: #php #infosec #software_development #cybersecurity #zero_day_vulnerability
Medium
Investigation: Deconstructing the October 21, 2026 Global PHP Zero-Day Outbreak
1. Incident Overview & Global Impact Timeline
19 views
Daily Writeups
⤷ Title: The Tech Skill We Often Forget: Learning How to Protect What We Build
════════════════════════
𐀪 Author: TechyVerse
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 16:56:56 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #software_development
Medium
The Tech Skill We Often Forget: Learning How to Protect What We Build
We spend a lot of time learning how to build things.
7 views
Daily Writeups
⤷ Title: Mocking dependency responses that are tough to reproduce with VirtuProbe
════════════════════════
𐀪 Author: Jakub Stonavsky
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 18:18:03 GMT
════════════════════════
⌗ Tags: #test_automation #software_development #penetration_testing #quality_assurance #software_engineering
Medium
Mocking dependency responses that are tough to reproduce with VirtuProbe
A 503 the real service only throws under load, a 429 carrying a Retry-After, a body your parser has never seen - you know the branch is…
8 views
Daily Writeups
⤷ Title: Two platforms, two credential scares: what to rotate this week
════════════════════════
𐀪 Author: Harshit Anand
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 18:16:08 GMT
════════════════════════
⌗ Tags: #software_development #cybersecurity #devops #api_security #cloud_computing
Medium
Two platforms, two credential scares: what to rotate this week
Railway told every user to roll their secrets. A separate leak-site post claims a huge PingCAP/TiDB Cloud theft. One is a vendor…
13 views
Daily Writeups
⤷ Title: PHP Critical RCE Fix: Update to 8.5.12, 8.4.27, 8.3.36
════════════════════════
𐀪 Author: Dev Talk
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:51:31 GMT
════════════════════════
⌗ Tags: #software_development #cve #php #rce #backend_development
Medium
PHP Critical RCE Fix: Update to 8.5.12, 8.4.27, 8.3.36
On 21 October 2026 the PHP project released security updates for every supported branch, and the front page of php.net carries a banner…
11 views
Daily Writeups
⤷ Title: Can an AI Agent Replace Your Code Security Scanner? I Tested It.
════════════════════════
𐀪 Author: Yathish
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 21:30:11 GMT
════════════════════════
⌗ Tags: #software_development #artificial_intelligence #application_security #devsecops #cybersecurity
Medium
Can an AI Agent Replace Your Code Security Scanner? I Tested It.
I ran Snyk, Semgrep, Drogonsec and Claude Code on 39 planted bugs. The answer was more interesting than yes or no
15 views
Daily Writeups
⤷ Title: The Biggest Cybersecurity Issues This Week (October 2026): What Developers Need to Patch
════════════════════════
𐀪 Author: Sohamnayak
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 04:23:39 GMT
════════════════════════
⌗ Tags: #python #infosec #software_development #devops #cybersecurity
Medium
The Biggest Cybersecurity Issues This Week (October 2026): What Developers Need to Patch
PHP, GitLab, LiteLLM and a broken certificate authority, all in one week. Here’s what happened and exactly what to do.
11 views
Daily Writeups
⤷ Title: Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
════════════════════════
𐀪 Author: FlawPilot
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:57:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #open_source #application_security #software_development #artificial_intelligence
Medium
Anthropic’s OSS Scanner Trades Human Review for Speed. Here’s What Maintainers Should Know
The free service can find vulnerabilities and suggest patches, but enrolled projects must be ready to validate the results themselves.
10 views
Daily Writeups
⤷ Title: PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
════════════════════════
𐀪 Author: xC0D3F4TH3R
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:52 GMT
════════════════════════
⌗ Tags: #php_developers #cybersecurity #hacking #security #software_development
Medium
PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
github : https://github.com/xC0D3F4TH3R/PHP2SHELL-DEFENSIVE-KIT
16 views
Daily Writeups
⤷ Title: A Vulnerability Scan is Not an Application Security Program
════════════════════════
𐀪 Author: Arthur Steel | Contra Average
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 19:36:49 GMT
════════════════════════
⌗ Tags: #owasp #risk_management #software_development #cybersecurity #application_security
Medium
A Vulnerability Scan is Not an Application Security Program
Your scanner may be working perfectly. Your security strategy may still be dangerously incomplete.
15 views
Daily Writeups
⤷ Title: PHP2Shell Is A Forever Problem: Expect Daily Hacks Building Apps Without Memory Safety First Like…
════════════════════════
𐀪 Author: Tim Almond
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 20:39:23 GMT
════════════════════════
⌗ Tags: #rust #hacking #software_development #software_engineering #vibe_coding
Medium
PHP2Shell Is A Forever Problem: Expect Daily Hacks Building Apps Without Memory Safety First Like Rust
PHP2Shell is two critical flaws in PHP itself. CVE-2026–109618 and CVE-2026–109619 let an unauthenticated attacker reach remote code…
13 views
Daily Writeups
⤷ Title: Where your API key goes after you paste it into an AI dashboard
════════════════════════
𐀪 Author: Miles Builds
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #devops #cybersecurity #software_development #artificial_intelligence #api_security
Medium
Where your API key goes after you paste it into an AI dashboard
OpenCode’s breach last week exposed provider keys that users had saved in its web console. This is where a pasted key ends up, and four…
36 views
Daily Writeups
⤷ Title: Capcom Reset 196 Passwords After a Breach Touching 11.7 Million Accounts
════════════════════════
𐀪 Author: Prashant Thakur
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 18:13:51 GMT
════════════════════════
⌗ Tags: #software_development #hacking #tech #technology #cybersecurity
Medium
Capcom Reset 196 Passwords After a Breach Touching 11.7 Million Accounts
Capcom says records tied to 11,774,247 accounts on its CAPCOM ID service were exposed, with users affected worldwide.
27 views
Daily Writeups
⤷ Title: The Vulnerabilities We Can See Aren’t the Ones That Worry Me
════════════════════════
𐀪 Author: Darren Bounds
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 12:21:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #software_development #infosec
Medium
The Vulnerabilities We Can See Aren’t the Ones That Worry Me
AI is making serious software vulnerabilities easier to discover than ever. The public CVE explosion may be just the tip of an iceberg, and…
25 views