Daily Writeups
@Daily_Writeups
3.61K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.61K subscribers
Daily Writeups
⤷ Title: The API Supply Chain: Your Biggest Security Risk Might Not Be Your Own Code
════════════════════════
𐀪 Author: Akansha Shukla
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:55:55 GMT
════════════════════════
⌗ Tags: #third_party_api #supply_chain #vendor_security #owasp_api_security_top_10 #api_security
Medium
The API Supply Chain: Your Biggest Security Risk Might Not Be Your Own Code
Today’s applications are not monolithic islands; they are complex ecosystems built on a foundation of third-party APIs. We rely on external services for everything: processing payments, validating…
50 views
Daily Writeups
⤷ Title: Malicious Firefox Extensions Unmasked: Fake Games, VPNs, & Calendar Tools Hijack Traffic, Steal Crypto & OAuth Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:29:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Affiliate Hijacking #Browser Extensions #cryptocurrency #cybersecurity #firefox #malware #OAuth Theft #phishing #Scams #Socket #threat intelligence #vpn
Daily CyberSecurity
Malicious Firefox Extensions Unmasked: Fake Games, VPNs, & Calendar Tools Hijack Traffic, Steal Crypto & OAuth Tokens
Socket uncovers a sprawling network of malicious Firefox extensions, masquerading as games, VPNs, and tools, to hijack affiliate links, steal OAuth tokens, and reroute traffic.
40 views
Daily Writeups
⤷ Title: Nobitex Hack Unveils Iran’s Crypto Blueprint: Sanctions Evasion & Surveillance Defiance Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:26:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blockchain #Crypto Exchange #cryptocurrency #cyberattack #geopolitics #hack #Iran #Nobitex #Predatory Sparrow #Sanctions Evasion #TRM Labs
Daily CyberSecurity
Nobitex Hack Unveils Iran's Crypto Blueprint: Sanctions Evasion & Surveillance Defiance Exposed
TRM Labs' analysis of the Nobitex hack reveals Iran's crypto exchange was engineered for sanctions evasion, featuring deep fiat integration and blockchain obfuscation to defy surveillance.
27 views
Daily Writeups
⤷ Title: IBM X-Force Uncovers Azure Arc Flaws: Hybrid-Cloud Tool Becomes Stealthy RCE & Privilege Escalation Vector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:19:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Azure Arc #cybersecurity #DPAPI_NG #Hardcoded Secrets #hybrid cloud #IBM X_Force #Microsoft Azure #persistence #privilege escalation #rce #Remote Code Execution #Service Principal #supply chain attack
Daily CyberSecurity
IBM X-Force Uncovers Azure Arc Flaws: Hybrid-Cloud Tool Becomes Stealthy RCE & Privilege Escalation Vector
IBM X-Force reveals Azure Arc can be exploited for RCE and privilege escalation via hardcoded secrets, recoverable credentials, and overscoped roles, turning it into a stealthy threat vector.
30 views
Daily Writeups
⤷ Title: “NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:12:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #APT_Q_95 #china #chisel #Cyberespionage #cybersecurity #Exchange Zero_Day #Fileless Malware #Microsoft Exchange #NightEagle #QiAnXin
Daily CyberSecurity
“NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
NightEagle APT (APT-Q-95) is exploiting an unknown Exchange zero-day to target China's strategic industries, using fileless malware and exfiltrating machineKey for remote email access.
32 views
Daily Writeups
⤷ Title: SHELLTER Evasion Framework Abused: Elite v11.0 Packages LUMMA, RHADAMANTHYS, ARECHCLIENT2 Infostealers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:07:26 +0000
════════════════════════
⌗ Tags: #Malware #Arechclient2 #cybersecurity #Elastic Security Labs #Evasion Framework #Infostealer #Lumma #malware #polymorphic #Red Team tool #Rhadamanthys #shellter
Daily CyberSecurity
SHELLTER Evasion Framework Abused: Elite v11.0 Packages LUMMA, RHADAMANTHYS, ARECHCLIENT2 Infostealers
Elastic Security Labs reveals SHELLTER Elite v11.0 is being abused to deploy LUMMA, RHADAMANTHYS, and ARECHCLIENT2 infostealers, leveraging advanced evasion techniques to bypass AV/EDR
32 views
Daily Writeups
⤷ Title: Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:00:20 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #CVE_2025_6019 #cybersecurity #libblockdev #PAM #privilege escalation #proof_of_concept #root access #sudo #udisksd #Vulnerability
Daily CyberSecurity
Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available
A critical Linux flaw (CVE-2025-6019) in udisksd/libblockdev allows local privilege escalation to root. PoC available. Update now to secure your system!
24 views
Daily Writeups
⤷ Title: Why Parrot Security OS is the Go-To Choice for Ethical Hacking
════════════════════════
𐀪 Author: ThamizhElango Natarajan
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:31:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #parrotos #pentest #cybersecurity #linux
Medium
Why Parrot Security OS is the Go-To Choice for Ethical Hacking
Ethical hacking has become an essential discipline in cybersecurity, with organizations actively seeking skilled professionals to identify…
24 views
Daily Writeups
⤷ Title: Secure Wireless Access Points by Fortinet: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:02:55 GMT
════════════════════════
⌗ Tags: #ai #fortinet #cloud_security #cybersecurity #network_security
Medium
Secure Wireless Access Points by Fortinet: A Comprehensive Guide
In today’s connected enterprise environment, secure wireless access has become a business-critical necessity. Fortinet, a global leader in…
32 views
Daily Writeups
⤷ Title: SecOps in Action: GoPhish Sim #2
════════════════════════
𐀪 Author: TheMachine
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:49:34 GMT
════════════════════════
⌗ Tags: #gophish #n8n #phishing #cybersecurity
Medium
SecOps in Action: GoPhish Sim #2
Ever get an email that feels a bit… off, but can’t quite put your finger on why? Maybe it’s an urgent message from your boss, or your boss’s boss. The layout is familiar, the language is on point…
42 views
Daily Writeups
⤷ Title: BTL1 Blue Team Level 1, the blue team OSCP?
════════════════════════
𐀪 Author: Seccult
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:33:26 GMT
════════════════════════
⌗ Tags: #securityblueteam #tryhackme #oscp #soc_analyst #btl1
Medium
BTL1 Blue Team Level 1, the blue team OSCP?
I recently completed the BTL1 course material, and challenged, and passed the associated exam with a perfect 100%!
45 views
Daily Writeups
⤷ Title: Dari Twitter ke X: Evolusi Platform Mikroblogging yang Mengubah Dunia
════════════════════════
𐀪 Author: RUBY8000 TERBAEEEK
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 23:42:47 GMT
════════════════════════
⌗ Tags: #twitter #xs #social_media
Medium
Dari Twitter ke X: Evolusi Platform Mikroblogging yang Mengubah Dunia
Twitter adalah salah satu platform media sosial paling berpengaruh dalam dua dekade terakhir. Dengan ikon burung biru yang khas dan batasan…
40 views
Daily Writeups
⤷ Title: ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:49:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #password reset #Production Environment #rce #Remote Code Execution #Scriptcase #Shell Injection #Synacktiv #Vulnerability
Daily CyberSecurity
ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published
Synacktiv unveils chained flaws in ScriptCase's prod console (CVE-2025-47227/47228) allowing pre-authenticated RCE via password reset & shell injection, risking web servers.
41 views
Daily Writeups
⤷ Title: Hpingbot: New Go-Based Botnet Leverages Pastebin & Hping3 for Stealthy Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:31:26 +0000
════════════════════════
⌗ Tags: #Malware #botnet #ddos #Distributed Denial of Service #Go Language #hping3 #Hpingbot #IoT security #Linux #malware #pastebin #SSH Brute_Force #windows
Daily CyberSecurity
Hpingbot: New Go-Based Botnet Leverages Pastebin & Hping3 for Stealthy Attacks
NSFOCUS uncovers Hpingbot, a rapidly evolving Go-based botnet using Pastebin for payloads and hping3 for DDoS. It targets Windows/Linux/IoT, focusing on stealth and persistence.
40 views
Daily Writeups
⤷ Title: State Secrets for Sale: China’s “Hack-for-Hire” Ecosystem Exposed in Massive VenusTech & Salt Typhoon Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:12:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Data Leak #APT #china #Cyberespionage #cybersecurity #DarkForums #data leak #Hack_for_Hire #Military Units #Salt Typhoon #SpyCloud #VenusTech
Daily CyberSecurity
State Secrets for Sale: China’s “Hack-for-Hire” Ecosystem Exposed in Massive VenusTech & Salt Typhoon Leaks
In a revelation from SpyCloud Labs, two confidential Chinese datasets—known as the VenusTech Data Leak and the Salt Typhoon Data Leak—surfaced for sale on DarkForums in late May. Though the leaks …
27 views
Daily Writeups
⤷ Title: APT36 Unleashes Linux Malware: Transparent Tribe Targets Indian Government with Go-Based Espionage Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:00:12 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT36 #BOSS Linux #cyber_espionage #cybersecurity #ELF #Go Language #Government #India #Linux #malware #phishing #Transparent Tribe
Daily CyberSecurity
APT36 Unleashes Linux Malware: Transparent Tribe Targets Indian Government with Go-Based Espionage Tools
A newly uncovered campaign by Pakistani threat actor APT36, also known as Transparent Tribe, reveals a significant evolution in their cyber-espionage playbook—this time, taking aim squarely at Lin…
23 views
Daily Writeups
⤷ Title: Taiwan Warns Public: Popular Chinese Apps (TikTok, WeChat, Rednote) Pose National Security Risk Via Data Transfer to China
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 01:50:14 +0000
════════════════════════
⌗ Tags: #Data Leak #Baidu Cloud #Chinese Apps #cybersecurity #Data Collection #Government Warning #national security #privacy #Rednote #Taiwan #TikTok #WeChat #Weibo
Daily CyberSecurity
Taiwan Warns Public: Popular Chinese Apps (TikTok, WeChat, Rednote) Pose National Security Risk Via Data Transfer to China
In a sweeping national security review, Taiwan’s National Security Bureau (NSB) has issued a warning to the public over the use of several popular China-developed mobile applications, citing…
40 views
Daily Writeups
⤷ Title: XWorm’s Shape-Shifting Arsenal: RAT Evolves to Deliver LockBit Ransomware, Evades Detection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 01:33:36 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #cybersecurity #DLL side_loading #ETW Tampering #LockBit #malware #Process injection #ransomware #rat #Remote Access Trojan #XWorm
Daily CyberSecurity
XWorm's Shape-Shifting Arsenal: RAT Evolves to Deliver LockBit Ransomware, Evades Detection
Splunk uncovers XWorm's evolution: a modular RAT now delivering LockBit ransomware. It uses flexible delivery, AMSI/ETW bypasses, and process injection to evade detection.
21 views
Daily Writeups
⤷ Title: HR: The New Perimeter of Cybersecurity
════════════════════════
𐀪 Author: B M Zahid ul Haque
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:28:03 GMT
════════════════════════
⌗ Tags: #digital_transformation #iso #cybersecurity #hr #social_engineering
Medium
HR: The New Perimeter of Cybersecurity
In today’s digital world, cyber threats don’t always hide behind complex codes or technical tricks. Often, they come through the front…
22 views
Daily Writeups
⤷ Title: What is OpenCTI and Why It Matters
════════════════════════
𐀪 Author: Codingjourney
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:27:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #docker
Medium
🔍 What is OpenCTI and Why It Matters
OpenCTI (Open Cyber Threat Intelligence) is an open-source platform designed to aggregate, manage, and visualize cyber threat intelligence in one unified system. Built by Filigran and originally…
24 views
Daily Writeups
⤷ Title: SillyPutty Malware Analysis
════════════════════════
𐀪 Author: Adrian Jenkins
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:25:52 GMT
════════════════════════
⌗ Tags: #malware_analysis #digital_forensics #cybersecurity
Medium
SillyPutty Malware Analysis
https://jenkins96.github.io/2025-07-06-SillyPutty-Malware-Analysis/
29 views