Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: Hollowise: New Windows Tool Enables Stealthy Code Execution via Process Hollowing & PPID Spoofing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 04:20:57 +0000
════════════════════════
⌗ Tags: #Open Source Tool #code analysis #cybersecurity #Debuggers #Hollowise #Network Analysis #Offensive Security #PPID Spoofing #Process Hollowing #Stealth Execution #windows
Penetration Testing Tools
Hollowise: New Windows Tool Enables Stealthy Code Execution via Process Hollowing & PPID Spoofing
Hollowise is a Windows tool enabling stealthy execution of debuggers and code/network analyzers by process hollowing suspended processes and spoofing their parent IDs.
16 views
Daily Writeups
⤷ Title: APT36 Unleashes Advanced Phishing Against Indian Defense Personnel: New Anti-Analysis Malware & NIC Impersonation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 04:17:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anti_Analysis #APT36 #Cloudflare #Credential Theft #Cyberespionage #CYFIRMA #Defense #DLL Sideloading #India #Keylogging #malware #phishing #Transparent Tribe
Penetration Testing Tools
APT36 Unleashes Advanced Phishing Against Indian Defense Personnel: New Anti-Analysis Malware & NIC Impersonation
APT36 is targeting Indian defense personnel with sophisticated phishing, using fake NIC documents and multi-layered malware to steal sensitive data and evade analysis.
18 views
Daily Writeups
⤷ Title: RapperBot Unleashed: Sophisticated Mirai Variant Targets DVRs, Launches HTTPS DDoS Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 04:12:08 +0000
════════════════════════
⌗ Tags: #Malware #BOTNET #cyberattack #cybersecurity #DDoS #DVR #Encrypted DNS #hacking #HTTPS DDoS #IoT Security #Mirai #NICT CSRI #RapperBot
Penetration Testing Tools
RapperBot Unleashed: Sophisticated Mirai Variant Targets DVRs, Launches HTTPS DDoS Attacks
RapperBot, an evolved Mirai variant, targets DVRs via brute-force and zero-days, launching sophisticated DDoS attacks with encrypted DNS and HTTPS-based traffic, as revealed by NICT CSRI.
16 views
Daily Writeups
⤷ Title: “Echo Chamber” Attack Uncovered: New Jailbreak Bypasses LLM Safeguards with Subtle Context Manipulation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 04:08:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Ethics #AI Moderation #AI security #Context Poisoning #cybersecurity #Echo Chamber #Jailbreaking #Large Language Model #LLM #NeuralTrust #Prompt Engineering
Penetration Testing Tools
"Echo Chamber" Attack Uncovered: New Jailbreak Bypasses LLM Safeguards with Subtle Context Manipulation
NeuralTrust uncovers "Echo Chamber," a new LLM jailbreaking technique bypassing safeguards via subtle, multi-stage context manipulation to generate prohibited content. Over 90% success in tests.
14 views
Daily Writeups
⤷ Title: UK Retail Cyberattacks Cost Up to £440M: Cyber Monitoring Centre Unveils First Damage Assessment
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 04:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CMC #Co_op #Cyber Monitoring Centre #Cyber Monitoring Matrix #cyberattack #cybersecurity #Economic Impact #Financial Loss #Marks & Spencer #Retail #UK
Penetration Testing Tools
UK Retail Cyberattacks Cost Up to £440M: Cyber Monitoring Centre Unveils First Damage Assessment
The UK's Cyber Monitoring Centre reveals cyberattacks on retail giants like M&S and Co-op caused £270-£440M in damages, marking its first official incident assessment.
13 views
Daily Writeups
⤷ Title: Bypass OTP for Multiple Accounts without Risk Using Temporary Numbers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 10:33:48 +0000
════════════════════════
⌗ Tags: #Technique
Daily CyberSecurity
Bypass OTP for Multiple Accounts without Risk Using Temporary Numbers
17 views
Daily Writeups
⤷ Title: Odyssey Stealer: macOS Under Attack by ClickFix-Driven Infostealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:20:30 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #Browser Data #ClickFix #cryptocurrency #cybersecurity #Cyfirma #Infostealer #Keychain #macOS #malware #Odyssey Stealer #passwords
Daily CyberSecurity
Odyssey Stealer: macOS Under Attack by ClickFix-Driven Infostealer
CYFIRMA uncovers "Odyssey Stealer," a new macOS malware using fake App Store prompts & typosquatting to steal crypto wallets, passwords, and browser data from Western users.
18 views
Daily Writeups
⤷ Title: Microsoft 365 “Direct Send” Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:11:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Direct Send #Email Security #Exchange Online #Microsoft 365 #phishing #Quishing #Smart Host #spoofing #threat actor #Varonis
Daily CyberSecurity
Microsoft 365 "Direct Send" Abused: Phishing Campaign Spoofs Internal Users, Bypasses Security
Varonis uncovers a widespread phishing campaign abusing Microsoft 365's Direct Send, spoofing internal users to bypass email security and harvest credentials.
19 views
Daily Writeups
⤷ Title: Silver Fox Strikes with Fake Installers: Sainbox RAT and Hidden Rootkit Target Chinese Speakers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:03:38 +0000
════════════════════════
⌗ Tags: #Malware #android #cybersecurity #DLL Sideloading #Gh0stRAT #Hidden Rootkit #malware #Netskope #phishing #Sainbox RAT #Silver Fox #srdi #windows
Daily CyberSecurity
Silver Fox Strikes with Fake Installers: Sainbox RAT and Hidden Rootkit Target Chinese Speakers
Netskope uncovers Sainbox RAT (Gh0stRAT variant) and Hidden rootkit delivered via fake software installers to Chinese users, leveraging DLL sideloading and sRDI for stealth.
19 views
Daily Writeups
⤷ Title: Leeds United and Reflectiz Partner to Share Insights on Proactive Web Security After Cyber Attack
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 11:30:57 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Leeds United and Reflectiz Partner to Share Insights on Proactive Web Security After Cyber Attack
Leeds, UK, 27th June 2025, CyberNewsWire
17 views
Daily Writeups
⤷ Title: Windows Security Alert: Secure Boot Certificates Expiring in 2026, Update Now
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 08:19:37 +0000
════════════════════════
⌗ Tags: #Technology #Certificate Expiration #cybersecurity #Digital Certificates #Microsoft #Secure Boot #Security Updates #UEFI #windows #Windows 10 #Windows 11 #Windows Server
Daily CyberSecurity
Windows Security Alert: Secure Boot Certificates Expiring in 2026, Update Now
Microsoft's 2011 Secure Boot certificates expire in 2026, impacting all supported Windows versions. Update now via Windows Update to avoid boot failures, especially on isolated systems.
17 views
Daily Writeups
⤷ Title: Google Ask Photos Relaunches: AI-Powered Search Now Faster, Smarter & Back for US Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 08:10:18 +0000
════════════════════════
⌗ Tags: #Technology #AI Search #artificial intelligence #Ask Photos #Gemini #Google Photos #Image Recognition #Natural Language Processing #Photo Management #Relaunch #Tech News
Daily CyberSecurity
Google Ask Photos Relaunches: AI-Powered Search Now Faster, Smarter & Back for US Users
Google's "Ask Photos" feature relaunches in the US, blending traditional image search with Gemini AI for faster, more contextual natural language queries within your photo library.
16 views
Daily Writeups
⤷ Title: Apple Overhauls EU App Store Policy: New Fees & Open External Purchases After €500M Fine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 08:06:23 +0000
════════════════════════
⌗ Tags: #Technology #App Store #Apple #Core Technology Fee #CTC #ctf #Developer Policy #Digital Markets Act #DMA #EU #European Union #External Purchases #Fees
Daily CyberSecurity
Apple Overhauls EU App Store Policy: New Fees & Open External Purchases After €500M Fine
Apple revised EU App Store policies, allowing external purchases and new fees (initial acquisition, service, CTC) after a €500M fine. Developers can now direct users to outside payment channels.
20 views
Daily Writeups
⤷ Title: MongoDB Hit by Pre-Auth Denial of Service Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 03:25:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #database #Denial of Service #dos #JSON Parsing #mongodb #nosql #pre_authentication #stack overflow
Daily CyberSecurity
MongoDB Hit by Pre-Auth Denial of Service Vulnerability
MongoDB discloses CVE-2025-6710 (CVSS 7.5), a pre-authentication DoS flaw. Crafted JSON inputs can crash servers via stack overflow.
11 views
Daily Writeups
⤷ Title: CVE-2025-36038: Critical RCE Vulnerability Discovered in IBM WebSphere Application Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 03:14:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Server #CVE_2025_36038 #cybersecurity #Deserialization #Enterprise Security #IBM #rce #Remote Code Execution #Serialization #Vulnerability #WebSphere
Daily CyberSecurity
CVE-2025-36038: Critical RCE Vulnerability Discovered in IBM WebSphere Application Server
IBM warns of a critical RCE flaw (CVE-2025-36038) in WebSphere Application Server 8.5/9.0, allowing unauthenticated attackers to execute arbitrary code via serialization.
13 views
Daily Writeups
⤷ Title: Microsoft’s Major Shift: Moving Security Drivers Out of Windows Kernel to Prevent Future BSOD Disasters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 02:56:28 +0000
════════════════════════
⌗ Tags: #Windows #antivirus #BSOD #CrowdStrike #cybersecurity #endpoint protection #kernel #Microsoft #security #User Mode #windows #Windows Resiliency Initiative #WRI
Daily CyberSecurity
Microsoft's Major Shift: Moving Security Drivers Out of Windows Kernel to Prevent Future BSOD Disasters
Following the 2024 CrowdStrike BSOD incident, Microsoft's Windows Resiliency Initiative is moving security drivers out of the kernel into user mode to boost system stability.
14 views
Daily Writeups
⤷ Title: Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 02:48:19 +0000
════════════════════════
⌗ Tags: #Technology #Automation #Certificate Authority #cybersecurity #Digital Certificates #Free Certificates #IP Certificates #IP SAN #Let's Encrypt #open_source #SSL/TLS
Daily CyberSecurity
Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed
Let’s Encrypt is now testing IP-only digital certificates, offering a free alternative for securing IP addresses without domains, valid for six days with automated renewal.
21 views
Daily Writeups
⤷ Title: Notorious Hacker “IntelBroker” (Kai West) Arrested: Exposed by Crypto Transactions, Caused $25M in Damages
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 02:44:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BreachForums #Corporate Hacking #cryptocurrency #Cybercrime #cybercriminal #cybersecurity #Data Breach #fbi #Hacker Arrest #IntelBroker #Kai West
Daily CyberSecurity
Notorious Hacker "IntelBroker" (Kai West) Arrested: Exposed by Crypto Transactions, Caused $25M in Damages
Notorious hacker "IntelBroker" (Kai West) has been arrested, traced by the FBI through his crypto transactions. He's charged with stealing and selling data, causing $25M in damages.
22 views
Daily Writeups
⤷ Title: Windows 10 ESU: Any Activated PC Can Get Extended Security Updates, No Windows 11 Hardware Needed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 02:37:09 +0000
════════════════════════
⌗ Tags: #Windows #Activation #ESU #Extended Security Updates #Hardware Requirements #Microsoft #Security Updates #Tech News #Windows 10 #Windows 11
Daily CyberSecurity
Windows 10 ESU: Any Activated PC Can Get Extended Security Updates, No Windows 11 Hardware Needed
Microsoft confirms any activated Windows 10 PC can receive ESU updates, regardless of Windows 11 hardware compatibility. Get one year of security updates via payment or free options.
16 views
Daily Writeups
⤷ Title: HDMI 2.2 Officially Finalized: Doubles Bandwidth to 96Gbps for Next-Gen 4K/240Hz, 8K/60Hz, and 16K
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 02:33:38 +0000
════════════════════════
⌗ Tags: #Technology #16K #4K #8K #Bandwidth #Display #DSC #gaming #HDMI 2.2 #HDMI Forum #Home Theater #LIP #Tech News #Ultra96
Daily CyberSecurity
HDMI 2.2 Officially Finalized: Doubles Bandwidth to 96Gbps for Next-Gen 4K/240Hz, 8K/60Hz, and 16K
HDMI 2.2 is finalized, doubling bandwidth to 96Gbps for 4K@240Hz, 8K@60Hz, and 16K@60Hz (via DSC). Requires Ultra96 cables, with devices expected Q4 2025.
14 views
Daily Writeups
⤷ Title: PNG 3.0 Becomes W3C Standard: Brings HDR, Native APNG & EXIF Support to the Web
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 02:27:32 +0000
════════════════════════
⌗ Tags: #Technology #Animated PNG #APNG #EXIF #HDR #High Dynamic Range #Image Format #metadata #PNG #Portable Network Graphics #W3C #Web Standard #Web Technology
Daily CyberSecurity
PNG 3.0 Becomes W3C Standard: Brings HDR, Native APNG & EXIF Support to the Web
PNG 3.0 is now a W3C Recommendation, introducing HDR imaging, native APNG, and EXIF metadata support, significantly enhancing the visual quality and functionality of web images.
13 views