Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.2K subscribers
106K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.2K subscribers
Daily Writeups
⤷ Title: Elastic Stack Under Fire: 7 New Flaws Expose Files & Crash Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:04:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #CVE_2026_0532 #Denial of Service #Elastic Stack #Elasticsearch #Kibana #LZ4 Vulnerability #Metricbeat #Packetbeat #Patch Alert #ssrf
Daily CyberSecurity
Elastic Stack Under Fire: 7 New Flaws Expose Files & Crash Servers
Elastic patches 7 high-severity flaws (CVSS 8.6) in Kibana & Elasticsearch. CVE-2026-0532 allows SSRF & file theft. Update to v8.19.10 now.
12 views
Daily Writeups
⤷ Title: Malicious Chrome Extension Drains Crypto via Secret API Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:01:12 +0000
════════════════════════
⌗ Tags: #Malware #API Key Theft #Chrome Extension Malware #crypto security #Cryptocurrency Scam #MEXC Exchange #Russian cybercrime #Socket Threat Research #Wallet drainer
Daily CyberSecurity
Malicious Chrome Extension Drains Crypto via Secret API Keys
Malicious Chrome extension "MEXC API Automator" hijacks API keys to drain crypto wallets. Russian-linked malware hides withdrawal permissions. Remove now.
11 views
Daily Writeups
⤷ Title: Masscan vs. Nmap: Port Scanning Guide for Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:02:50 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #reconnaissance #hacking #technology
Medium
Masscan vs. Nmap: Port Scanning Guide for Bug Bounty
Learn how to combine Masscan and Nmap for efficient Bug Bounty reconnaissance. Optimize your offensive security pipeline.
19 views
Daily Writeups
⤷ Title: SBOMs vs Asset Inventories: Bridging the Visibility Gap in Software Security
════════════════════════
𐀪 Author: Praveen Malhan
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:48:21 GMT
════════════════════════
⌗ Tags: #sbom #open_source_security #asset_inventory #supply_chain_security #application_security
Medium
SBOMs vs Asset Inventories: Bridging the Visibility Gap in Software Security
Introduction
16 views
Daily Writeups
⤷ Title: Malware Development with NIM — Malicious Self-Replication
════════════════════════
𐀪 Author: Edgar Huemac Sanchez Hernandez
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:47:18 GMT
════════════════════════
⌗ Tags: #infosec #programming #cybersecurity #nim #malware
Medium
Malware Development with NIM — Malicious Self-Replication
Hello, I’m back. I’m sorry for not having posted anything for months, but to be fair (and, even if this apology is mainly directed to…
19 views
Daily Writeups
⤷ Title: Atomic Bird Goes Purple #2 notes — TryHackMe
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 01:42:49 GMT
════════════════════════
⌗ Tags: #purple_team #tryhackme #threat_hunting #powershell
Medium
Atomic Bird Goes Purple #2 notes — TryHackMe
Time to simulate hunting and detecting activities to sharpen your purple teaming skills.
28 views
Daily Writeups
⤷ Title: HackTheBox: Password Attacks — Credential Hunting in Network Shares
════════════════════════
𐀪 Author: Daniel Hruska
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 01:32:30 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup
Medium
HackTheBox: Password Attacks — Credential Hunting in Network Shares
Use the credentials mendres:Inlanefreight2025! to connect to the target either by RDP or WinRM, then use the tools and techniques taught…
29 views
Daily Writeups
⤷ Title: Exposing the Invisible: Inspect Web Security with the Scrapfly Anti-bot Detector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:53:42 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Akamai #Anti_bot Detector #CAPTCHA #Chrome extension #Cloudflare #Cybersecurity 2026 #DevTools #fingerprinting #Manifest V3 #Scrapfly #Web scraping
Penetration Testing Tools
Exposing the Invisible: Inspect Web Security with the Scrapfly Anti-bot Detector
Scrapfly’s 2026 Anti-bot Detector for Chrome helps researchers identify Cloudflare, DataDome, and CAPTCHAs while exposing hidden fingerprinting tech.
27 views
Daily Writeups
⤷ Title: The Olympic Ultimatum: Cloudflare Threatens Italy Exit Over €14M Fine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:48:51 +0000
════════════════════════
⌗ Tags: #Technology #AGCOM #Cloudflare #Digital Sovereignty #DNS Blocking #Internet Censorship #Italy #Matthew Prince #Piracy Shield #Serie A #Tech News 2026 #Winter Olympics 2026
Penetration Testing Tools
The Olympic Ultimatum: Cloudflare Threatens Italy Exit Over €14M Fine
Matthew Prince, the Chief Executive of Cloudflare, has issued a formidable ultimatum to terminate the corporation’s operations in
21 views
Daily Writeups
⤷ Title: The Invisible Insider: How North Korean Operatives Are Infiltrating Your Remote Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:33:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Deepfakes #Cybersecurity 2026 #DPRK #FBI Advisory #financial sanctions #identity theft #Insider Threat #Laptop Farms #North Korea #remote work #Silent Push
Penetration Testing Tools
The Invisible Insider: How North Korean Operatives Are Infiltrating Your Remote Teams
For years, the concept of the “insider threat” was synonymous with the disgruntled employee or the inadvertent contractor.
19 views
Daily Writeups
⤷ Title: Armenia Under Siege: Hacker Claims Sale of 8 Million Government Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:26:22 +0000
════════════════════════
⌗ Tags: #Data Leak #Armenia #Armenia Security #cabinet.armlex.am #Cybercrime 2026 #Dark Web #data breach #dk0m #Government Leak #Infosec News #Judicial Data #phishing
Penetration Testing Tools
Armenia Under Siege: Hacker Claims Sale of 8 Million Government Records
Disclosures regarding the illicit sale of a database purportedly linked to Armenia’s state postal and notification services have
13 views
Daily Writeups
⤷ Title: Digital Eclipse: Iran Implements “Whitelist” Web as Death Toll Mounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:23:44 +0000
════════════════════════
⌗ Tags: #Technology #cyber warfare #Donald Trump #HRANA #human rights #Internet Blackout #Iran #NetBlocks #Protests 2026 #Starlink #Tehran #Whitelist Architecture
Penetration Testing Tools
Digital Eclipse: Iran Implements "Whitelist" Web as Death Toll Mounts
For the fourth consecutive day, Iran remains almost entirely severed from the global digital landscape. Domestic authorities persist
12 views
Daily Writeups
⤷ Title: 900GB Under Siege: Everest Collective Claims Massive Nissan Data Heist
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:20:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Automotive Security #Cyberattack 2026 #data breach #Double Extortion #Everest Collective #Hackmanac #Intellectual Property #Nissan #ransomware #Supply Chain
Penetration Testing Tools
900GB Under Siege: Everest Collective Claims Massive Nissan Data Heist
The Everest collective has asserted responsibility for a cyber incursion against the Japanese automotive titan Nissan Motor Co.,
11 views
Daily Writeups
⤷ Title: The Ghost Window: Trellix Warns of “Perfect” Facebook Phishing Traps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:18:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BitB #Browser In The Browser #Credential Theft #Cybersecurity 2026 #facebook #Meta #Netlify #phishing #Social Engineering #Trellix #Vercel
Penetration Testing Tools
The Ghost Window: Trellix Warns of "Perfect" Facebook Phishing Traps
Adversaries have intensified their offensives against Facebook users by deploying one of the most inconspicuous and treacherous phishing
8 views
Daily Writeups
⤷ Title: The Port Hack: 7-Year Sentence for Smuggler Who Targeted Rotterdam & Antwerp
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:16:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Legal News #Amsterdam Court of Appeal #cybercrime #Europol #Logistics Security #malware #Narcotics Trafficking #Port of Antwerp #Port of Rotterdam #Sky ECC #USB Attack
Penetration Testing Tools
The Port Hack: 7-Year Sentence for Smuggler Who Targeted Rotterdam & Antwerp
The Amsterdam Court of Appeal has sentenced a 44-year-old Dutch national to seven years of imprisonment for a
6 views
Daily Writeups
⤷ Title: Possessed in the Outlands: Apex Legends Hacked as “RSPN Admin” Seizes Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:12:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ALGS #anti_cheat #Apex Legends #Apex Legends Breach #Battle Royale News #EA Security #Game Hack 2026 #Respawn Entertainment #RSPN Admin #Server Security
Penetration Testing Tools
Possessed in the Outlands: Apex Legends Hacked as "RSPN Admin" Seizes Control
Inhabitants of the renowned online shooter Apex Legends encountered profound disruptions during matches this past weekend. Several participants
9 views
Daily Writeups
⤷ Title: n8mare on Auth Street: First n8n Supply Chain Attack Steals OAuth Tokens
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:10:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Community Nodes #Cybersecurity 2026 #Endor Labs #Google Ads #Infosec #n8n #npm #OAuth Theft #Stripe #supply chain attack #Workflow Automation
Penetration Testing Tools
n8mare on Auth Street: First n8n Supply Chain Attack Steals OAuth Tokens
A sophisticated supply chain offensive recently compromised the n8n workflow automation ecosystem, as adversaries infiltrated the npm repository
15 views
Daily Writeups
⤷ Title: The Great AI Purge: New PowerShell Script Wipes AI from Windows 11
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:00:28 +0000
════════════════════════
⌗ Tags: #Windows #Copilot #Debloat Windows #Github #Meredith Whittaker #Microsoft Recall #PowerShell #Privacy 2026 #Remove Windows AI #Signal #Windows 11 25H2 #zoicware
Penetration Testing Tools
The Great AI Purge: New PowerShell Script Wipes AI from Windows 11
As Microsoft increasingly saturates Windows with artificial intelligence, a burgeoning faction of users and developers has transitioned from
11 views
Daily Writeups
⤷ Title: Meet Your New Coworker: Anthropic’s Claude Now Controls Your Mac
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 02:56:03 +0000
════════════════════════
⌗ Tags: #Technology #Agentic AI #AI Assistant #Anthropic #Automation #Claude Cowork #Claude Max #File Management #macOS #Productivity #Tech News 2026
Daily CyberSecurity
Meet Your New Coworker: Anthropic’s Claude Now Controls Your Mac
Anthropic launches Claude Cowork, a desktop agent that can autonomously organize files, extract data, and navigate the web directly on your Mac.
14 views
Daily Writeups
⤷ Title: Metaverse Retreat: Meta Cuts 1,000 Staff to Pivot Toward AI Wearables
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 02:50:48 +0000
════════════════════════
⌗ Tags: #Technology #AI Wearables #Andrew Bosworth #Layoffs 2026 #Mark Zuckerberg #Meta #metaverse #Ray_Ban Meta #Reality Labs #Smart Glasses #Tech Strategy #Virtual Reality
Daily CyberSecurity
Metaverse Retreat: Meta Cuts 1,000 Staff to Pivot Toward AI Wearables
Meta cuts 1,000+ Reality Labs staff in January 2026, shifting focus from expensive VR headsets to AI-powered smart glasses and mobile wearables.
17 views
Daily Writeups
⤷ Title: Medical Memory: OpenAI Acquires Torch to Unify Your Health Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 02:46:57 +0000
════════════════════════
⌗ Tags: #Technology #Acquisition 2026 #ChatGPT Health #digital health #health tech #Healthcare AI #Ilya Abyzov #Medical Records #OpenAI #Sam Altman #Torch #Unified Medical Memory
Daily CyberSecurity
Medical Memory: OpenAI Acquires Torch to Unify Your Health Data
OpenAI acquires medical startup Torch for up to $100M to build a "Unified Medical Memory," ending data fragmentation within ChatGPT Health.
9 views