Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.21K subscribers
106K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.21K subscribers
Daily Writeups
⤷ Title: Doomsday for Hackers: 324,000 BreachForums Accounts Exposed in Massive Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:48:11 +0000
════════════════════════
⌗ Tags: #Data Leak #Anonymity #BreachForums #Cybercrime 2026 #Dark Web #data leak #Database Breach #Infosec #Law Enforcement #MyBB #PGP Key #ShinyHunters
Penetration Testing Tools
Doomsday for Hackers: 324,000 BreachForums Accounts Exposed in Massive Leak
A comprehensive database associated with BreachForums—one of the most notorious clearinghouses for exfiltrated data and illicit network access—has
8 views
Daily Writeups
⤷ Title: Rust in the Water: Iranian Hackers Deploy New “RustyWater” RAT Across Middle East
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:46:21 +0000
════════════════════════
⌗ Tags: #Malware #Archer RAT #CloudSEK #Iranian APT #Mango Sandstorm #Middle East Cyber Attacks #MuddyWater #Operation IconCat #Rust Malware #RUSTRIC #RustyWater #Seqrite Labs
Penetration Testing Tools
Rust in the Water: Iranian Hackers Deploy New "RustyWater" RAT Across Middle East
The Iranian threat collective MuddyWater has intensified its offensives against organizations across the Middle East, deploying a sophisticated
8 views
Daily Writeups
⤷ Title: The Discord Trojan: New NodeCordRAT Hijacks Bitcoin-Themed npm Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:45:36 +0000
════════════════════════
⌗ Tags: #Malware #Bitcoin #Crypto Theft #Discord C2 #Malware 2026 #MetaMask #Node.js #NodeCordRAT #npm #Remote Access Trojan #supply chain attack #Zscaler
Penetration Testing Tools
The Discord Trojan: New NodeCordRAT Hijacks Bitcoin-Themed npm Packages
Security researchers at Zscaler have unearthed a sophisticated campaign exploiting prevalent cryptocurrency themes. Three deleterious libraries were discovered
8 views
Daily Writeups
⤷ Title: $2,000 Bug Bounty: Turning a Peer Discovery Protocol Into a DDoS Weapon
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:34:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #penetration_testing #technology #bug_bounty
Medium
$2,000 Bug Bounty: Turning a Peer Discovery Protocol Into a DDoS Weapon
How a small logic gap enabled traffic amplification via UDP spoofing
9 views
Daily Writeups
⤷ Title: Hack Dead Rails
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:42:48 GMT
════════════════════════
⌗ Tags: #games #gamehanhdong #dead_rails #apkpure #hacking
Medium
Hack Dead Rails
Hack Dead Rails là hành trình sinh tồn đầy thử thách trong thế giới hậu tận thế tàn khốc. Game kết hợp yếu tố chiến thuật, hành động và…
6 views
Daily Writeups
⤷ Title: Unlocking the Power of Hydra: Advanced Credential Attacks for Real Pentesters
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:51:13 GMT
════════════════════════
⌗ Tags: #security #information_security #hacking #password_cracking #cybersecurity
Medium
Unlocking the Power of Hydra: Advanced Credential Attacks for Real Pentesters
Most beginners see Hydra as “that brute-force tool.” But professionals know it’s much more than typing a username and password list.
13 views
Daily Writeups
⤷ Title: Getting Started With Hydra: The Fast Track to Password Cracking Basics
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:50:18 GMT
════════════════════════
⌗ Tags: #password_cracking #security #information_security #cybersecurity #hacking
Medium
Getting Started With Hydra: The Fast Track to Password Cracking Basics
If you’re just stepping into the world of ethical hacking and password security testing, you might feel overwhelmed by the number of tools…
22 views
Daily Writeups
⤷ Title: Emerging Operator “0-P” Announces c0bra-ransomware
════════════════════════
𐀪 Author: Cybersec News
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:42:02 GMT
════════════════════════
⌗ Tags: #threat_intelligence #hacking #frontpage #cybersecurity
Medium
Emerging Operator “0-P” Announces c0bra-ransomware
No Known Attacks Yet — But Defenders Should Treat the Claim Seriously
22 views
Daily Writeups
⤷ Title: Lightning Strike: Testing Salesforce Security with the Auraditor Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:12:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Apex #API Testing #AppSec #Aura Framework #Auraditor #Burp Suite #IDOR #LWC #Penetration Testing #Salesforce Lightning #Salesforce Security #Security Audit
Penetration Testing Tools
Lightning Strike: Testing Salesforce Security with the Auraditor Extension
Auraditor for Burp Suite is the ultimate tool for Salesforce Lightning security audits, featuring Aura action editing and LWC endpoint discovery.
19 views
Daily Writeups
⤷ Title: The AI Alliance: Apple Taps Google Gemini to Power the New Siri
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:08:09 +0000
════════════════════════
⌗ Tags: #Apple #Google #Apple Intelligence #Gemini #Generative AI #google #iOS 26 #Private Cloud Compute #Siri #Sundar Pichai #Tim Cook #WWDC 2026
Penetration Testing Tools
The AI Alliance: Apple Taps Google Gemini to Power the New Siri
Apple has resolved to fortify its artificial intelligence capabilities through the most direct avenue possible: by leveraging the
15 views
Daily Writeups
⤷ Title: The Great VM Escape: MAESTRO Toolkit Breaks VMware Isolation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:07:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #BYOVD #CVE_2025_22224 #Cyber Security 2026 #ESXi #Huntress #hypervisor #MAESTRO #SonicWall #VM Escape #vmware #VSOCKpuppet #zero_day
Penetration Testing Tools
The Great VM Escape: MAESTRO Toolkit Breaks VMware Isolation
Virtual machines are often perceived as impenetrable bastions for risk assessment, operating under the assumption that the host
16 views
Daily Writeups
⤷ Title: The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:05:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blockchain Security #DeFi Hack 2026 #Ethereum #Halborn #Integer Overflow #SlowMist #Smart Contract Exploit #Tornado Cash #TRU Token #Truebit Protocol
Penetration Testing Tools
The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
In early January 2026, a sophisticated adversary identified a critical vulnerability within the purchase and minting contract of
8 views
Daily Writeups
⤷ Title: Kill it with Poison: The “Poison Fountain” Plan to Break AI for Good
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:03:11 +0000
════════════════════════
⌗ Tags: #Technology #Adversarial AI #AI Data Poisoning #AI safety #Anthropic Research #machine learning #Model Collapse #Poison Fountain #Tech Sabotage #The Register #Tor Network
Penetration Testing Tools
Kill it with Poison: The "Poison Fountain" Plan to Break AI for Good
A vanguard and decidedly audacious initiative has emerged within the artificial intelligence sector, designed to subvert the efficacy
6 views
Daily Writeups
⤷ Title: The Truman Show Scam: AI “Trust Factories” Creating Fake Investment Realities
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:01:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Fraud #Check Point Research #Crypto Fraud #deepfakes #Financial Security #identity theft #Investment Scams 2026 #OPCOPRO #Social Engineering #Truman Show Scam #WhatsApp Scams
Penetration Testing Tools
The Truman Show Scam: AI "Trust Factories" Creating Fake Investment Realities
Fraudulent investment stratagems are increasingly assuming a hyper-realistic façade, meticulously augmented by the advancements of artificial intelligence. Researchers
9 views
Daily Writeups
⤷ Title: Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:04:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Access Control #Cisco Talos #Denial of Service #Hikvision #IP Camera Security #Network Video Recorder #Physical Security #stack overflow
Daily CyberSecurity
Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws
High-severity Hikvision stack overflow flaws (CVE-2025-66176) allow attackers to crash cameras & NVRs via LAN. Update firmware now to prevent DoS.
6 views
Daily Writeups
⤷ Title: AI Identity Theft: Critical ServiceNow Flaw (CVE-2025-12420) Allows Unauthenticated Impersonation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:59:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #AppOmni #Cloud Security #CVE_2025_12420 #Identity Spoofing #Patch Alert #privilege escalation #SaaS Security #ServiceNow #Virtual Agent
Daily CyberSecurity
AI Identity Theft: Critical ServiceNow Flaw (CVE-2025-12420) Allows Unauthenticated Impersonation
Critical ServiceNow AI flaw (CVE-2025-12420) allows unauthenticated user impersonation. Self-hosted users: update Now Assist & Virtual Agent immediately.
9 views
Daily Writeups
⤷ Title: CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CVE_2024_55947 #CVE_2025_8110 #DevSecOps #Git Security #Gogs #KEV List #Remote Code Execution #vulnerability management #Wiz Research
Daily CyberSecurity
CISA "Must-Patch" Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild
CISA warns: Active exploits target Gogs Git service via CVE-2025-8110 (CVSS 8.7). Attackers use symlink bypass for RCE. Patch by Feb 2, 2026.
9 views
Daily Writeups
⤷ Title: Attackers Weaponize Legitimate RMM Tools via Fake PDFs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:12:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyber attacks #living_off_the_land #Malware Analysis #NinjaOne #NSIS #PDF Malware #phishing #RMM Abuse #ScreenConnect #SuperOps #Syncro
Daily CyberSecurity
Attackers Weaponize Legitimate RMM Tools via Fake PDFs
ASEC warns: Hackers abuse Syncro, SuperOps & NinjaOne RMM tools via fake PDF lures. Learn how this phishing campaign installs persistent backdoors.
13 views
Daily Writeups
⤷ Title: Remote Code Execution (RCE) Zafiyeti
════════════════════════
𐀪 Author: Halil Ibrahim Eroglu
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 05:04:56 GMT
════════════════════════
⌗ Tags: #penetration_testing #rce #vulnerability #cybersecurity #web_security
Medium
Remote Code Execution (RCE) Zafiyeti
Bazı zafiyetler can sıkar, bazıları sistemi yavaşlatır; ancak Remote Code Execution (RCE), bilgisayarınızı saldırgana teslim eder. Bir…
19 views
Daily Writeups
⤷ Title: Active Directory Hardening — Writeup
════════════════════════
𐀪 Author: Mahir
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 05:35:27 GMT
════════════════════════
⌗ Tags: #windows #tryhackme #cybersecurity #active_directory #tryhackme_writeup
Medium
Active Directory Hardening — Writeup
This is a short writeup for the TryHackMe room — Active Directory Hardening
24 views
Daily Writeups
⤷ Title: TryHackMe SOC Level 1 (2026 Update): Revamped Rooms + Cold Start Tickets + Full Video Walkthroughs
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 05:11:28 GMT
════════════════════════
⌗ Tags: #soc #tryhackme #soc_level_1 #the_cold_start #tryhackme_walkthrough
Medium
TryHackMe SOC Level 1 (2026 Update): Revamped Rooms + Cold Start Tickets + Full Video Walkthroughs
The TryHackMe SOC Level 1 learning path has been rebuilt into a more practical, job-aligned track for junior analysts focused on real SOC…
34 views