Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.21K subscribers
106K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.21K subscribers
Daily Writeups
⤷ Title: What Will Matter for API Security 2026: The Patterns Behind 2025’s Breaches and the Risks Teams Are…
════════════════════════
𐀪 Author: Akansha Shukla
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 21:28:20 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #secure_coding #api_development #api_security #secure_api
Medium
What Will Matter for API Security 2026: The Patterns Behind 2025’s Breaches and the Risks Teams Are…
APIs quietly run modern software. From payments and hiring platforms to internal tools and AI workflows, they sit behind nearly every…
25 views
Daily Writeups
⤷ Title: Security Analysis and Hardening of a Python Web Application
════════════════════════
𐀪 Author: William Azaria Simanjuntak
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 23:31:50 GMT
════════════════════════
⌗ Tags: #application_security #web_development #programming #cybersecurity #python
Medium
Security Analysis and Hardening of a Python Web Application
Assignment 1: Security Analysis and Program Hardening
27 views
Daily Writeups
⤷ Title: 30 Days of Red Team: Day 16 — Windows Privilege Escalation
════════════════════════
𐀪 Author: Maxwell Cross
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 22:32:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #infosec #windows #cybersecurity
Medium
30 Days of Red Team: Day 16 — Windows Privilege Escalation
From Limited User to SYSTEM: Proven Windows Privilege Escalation Techniques That Actually Work
22 views
Daily Writeups
⤷ Title: HTB Labs — Tier 1 — “Crocodile” Machine Walkthrough | By: CyberAlp0
════════════════════════
𐀪 Author: Mohamed Maher
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 23:21:09 GMT
════════════════════════
⌗ Tags: #crocodile #web_application_security #hackthebox_writeup #ftp_client #penetration_testing
Medium
HTB Labs — Tier 1 — “Crocodile” Machine Walkthrough | By: CyberAlp0
Hey Folks, this is CyberAlp0. Welcome to a new walkthrough powered by HTB, Tier 1, named “Crocodile”. Crocodile machine designed to…
24 views
Daily Writeups
⤷ Title: HPE Aruba Patches High-Severity DoS and Data Leak Flaws in Instant On Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:36:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Point Vulnerability #CVE_2025_37165 #CVE_2025_37166 #Denial of Service #firmware update #HPE Networking #Instant On #network_security #SMB Security
Daily CyberSecurity
HPE Aruba Patches High-Severity DoS and Data Leak Flaws in Instant On Devices
Critical HPE Instant On update fixes DoS flaw CVE-2025-37166 that forces hard resets. Firmware 3.3.2.0 also stops config leaks. Check your version now.
17 views
Daily Writeups
⤷ Title: Zoho Patches Critical “9.1” Flaw in ADSelfService Plus
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:31:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #active directory #ADSelfService Plus #CVE_2025_11250 #CVSS 9.1 #Identity Security #ManageEngine #Patch Alert #SSO Security
Daily CyberSecurity
Zoho Patches Critical "9.1" Flaw in ADSelfService Plus
ManageEngine patches critical ADSelfService Plus flaw CVE-2025-11250 (CVSS 9.1). Update to Build 6519 immediately to secure your Active Directory.
17 views
Daily Writeups
⤷ Title: SHADOW#REACTOR Malware Builds Remcos RAT via Text Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:27:15 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Fileless Malware #living_off_the_land #Malware Analysis #MSBuild #powershell #Remcos RAT #Securonix #SHADOW#REACTOR #Text_Based Payload
Daily CyberSecurity
SHADOW#REACTOR Malware Builds Remcos RAT via Text Files
Securonix reveals SHADOW#REACTOR: A stealthy framework using "text-only" fragments to deploy Remcos RAT in memory via MSBuild. Avoids disk detection.
12 views
Daily Writeups
⤷ Title: One API Call to Hijack: Critical Cal.com Flaw (CVE-2026-23478, CVSS 10) Bypasses 2FA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:22:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authentication Bypass #Cal.com #CVE_2026_23478 #CVSS 10 #JWT Manipulation #NextAuth #Open Source Security #Patch Alert #Scheduling Software
Daily CyberSecurity
One API Call to Hijack: Critical Cal.com Flaw (CVE-2026-23478, CVSS 10) Bypasses 2FA
Critical Cal.com flaw (CVE-2026-23478) allows full account takeover via a single API call. CVSS 10.0. Update self-hosted instances to v6.0.7 immediately.
15 views
Daily Writeups
⤷ Title: “Browser-in-the-Browser” Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:18:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BitB #Browser In The Browser #Credential Harvesting #Cyber Security #Facebook Security #Netlify #phishing #social engineering #Trellix #Vercel
Daily CyberSecurity
"Browser-in-the-Browser" Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing
Trellix warns: "Browser-in-the-Browser" phishing creates perfect fake Facebook login pop-ups. Learn how this invisible trap steals credentials.
15 views
Daily Writeups
⤷ Title: High-Severity Flaws in HPE Aruba Networking Expose Mobility Controllers to Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AOS_10 #AOS_8 #Arbitrary File Deletion #Command Injection #CVE_2025_37168 #CVE_2025_37169 #Denial of Service #HPE Aruba Networking #network_security #Patch Alert
Daily CyberSecurity
High-Severity Flaws in HPE Aruba Networking Expose Mobility Controllers to Attack
Critical Aruba AOS flaw CVE-2025-37168 (CVSS 8.2) allows unauthenticated file deletion & DoS. Multiple RCE bugs also patched. Upgrade AOS immediately.
10 views
Daily Writeups
⤷ Title: “Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:05:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credit card skimming #Cyber Crime #e_commerce security #JavaScript malware #Magecart #Online Shopping Security #Silent Push #Stripe Fraud #web skimming #WooCommerce
Daily CyberSecurity
"Magecart" Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
New Magecart campaign mimics Stripe forms to skim credit cards. Malware hides from admins & tricks users with fake errors. Active since 2022.
10 views
Daily Writeups
⤷ Title: Command Injection Alert: High-Severity Flaws Hit LoadMaster & MOVEit WAF
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:01:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Delivery #Command Injection #CVE_2025_13444 #CVE_2025_13447 #LoadMaster #MOVEit WAF #network_security #Patch Alert #Progress Software #Remote Code Execution
Daily CyberSecurity
Command Injection Alert: High-Severity Flaws Hit LoadMaster & MOVEit WAF
Progress patches high-severity RCE flaws (CVE-2025-13444/47) in LoadMaster & MOVEit WAF. Update UI/API endpoints immediately to prevent command injection.
11 views
Daily Writeups
⤷ Title: Case Study: Digital Forensics Investigation of an Insider Data Breach
════════════════════════
𐀪 Author: William Azaria Simanjuntak
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 23:54:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_analysis #digital_forensics #case_study #infosec
Medium
Case Study: Digital Forensics Investigation of an Insider Data Breach
Assignment 1: Digital Forensics
20 views
Daily Writeups
⤷ Title: TryHackMe: Year of the Rabbit Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 01:39:11 GMT
════════════════════════
⌗ Tags: #pentesting #tryhackme #cybersecurity #information_security
Medium
TryHackMe: Year of the Rabbit Writeup
This box is rated easy difficulty on THM. It involves us brute forcing an FTP login after finding a password list from hidden image data…
18 views
Daily Writeups
⤷ Title: SilentButDeadly: New Tool Blinds EDR Without Killing Processes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:42:42 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Cybersecurity 2026 #EDR Bypass #EDR Silencing #Infosec #Network Isolation #Red Team #SilentButDeadly #Telemetry Blocking #WFP #Windows Filtering Platform
Penetration Testing Tools
SilentButDeadly: New Tool Blinds EDR Without Killing Processes
SilentButDeadly is a 2026 tool that uses the Windows Filtering Platform to blind EDR/AV by severing cloud links without stopping their processes.
12 views
Daily Writeups
⤷ Title: Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:32:37 +0000
════════════════════════
⌗ Tags: #Technology #Browser Updates 2026 #Copilot #CSV Export #Data Loss #Edge Collections #microsoft edge #Microsoft Edge Dev #Sunsetting #Tech News #Web Research
Daily CyberSecurity
Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears
Microsoft Edge is killing the Collections feature in Jan 2026. Users must export notes and images to CSV or face permanent data loss on Edge servers.
9 views
Daily Writeups
⤷ Title: Powering the Boom: Microsoft Agrees to Trump’s “Self-Funding” Energy Mandate
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:24:42 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Brad Smith #Community_First AI #data centers #Donald Trump #Energy Crisis 2026 #Microsoft #Power Grid #PUE #Truth Social #Utility Bills
Daily CyberSecurity
Powering the Boom: Microsoft Agrees to Trump’s "Self-Funding" Energy Mandate
Microsoft pledges to pay its own way for AI energy in January 2026 after President Trump demands tech giants stop shifting costs to U.S. households.
12 views
Daily Writeups
⤷ Title: The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:19:13 +0000
════════════════════════
⌗ Tags: #Data Leak #Android security #Anonymity #cybersecurity #iOS security #IP Leak #MTProto #Privacy Leak #Proxy Link #Telegram #Vulnerability 2026
Daily CyberSecurity
The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links
Telegram confirms a January 2026 flaw where clicking "proxy links" can leak your real IP. A new warning prompt is coming to protect Android & iOS users.
12 views
Daily Writeups
⤷ Title: CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:57:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_33206 #Developer Tools #Graphics Debugging #Linux Security #Nsight Graphics #nvidia #Patch Alert #privilege escalation
Daily CyberSecurity
CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux
NVIDIA patches high-severity command injection in Nsight Graphics for Linux (CVE-2025-33206). Update to v2025.5 to prevent code execution.
10 views
Daily Writeups
⤷ Title: The $24 Criminal Tool: Microsoft & Police Shut Down RedVDS Fraud Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:38:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crime_as_a_Service #cyber fraud #Cybercrime Takedown #Digital Crimes Unit #Europol #H2_Pharma #Microsoft #Online Safety #RedVDS #Virtual Machines
Daily CyberSecurity
The $24 Criminal Tool: Microsoft & Police Shut Down RedVDS Fraud Engine
Microsoft & police seize RedVDS, a service providing disposable VMs for crime. The takedown stops a network responsible for over $40M in fraud losses.
7 views
Daily Writeups
⤷ Title: Palo Alto Networks Firewalls Hit by Unauthenticated GlobalProtect DoS Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:12:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_0227 #Denial of Service #firewall security #GlobalProtect #infosec #Maintenance Mode #network_security #Palo Alto Networks #PAN_OS #Patch Alert
Daily CyberSecurity
Palo Alto Networks Firewalls Hit by Unauthenticated GlobalProtect DoS Flaw
Palo Alto warns: CVE-2026-0227 forces GlobalProtect firewalls into maintenance mode. Unauthenticated DoS risk. Update PAN-OS immediately.
8 views