Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.19K subscribers
107K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.19K subscribers
Daily Writeups
⤷ Title: Heartbleed Never Really Left: Why MongoBleed Is a Wake-Up Call
════════════════════════
𐀪 Author: Selorm Adjabeng
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 01:33:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
Heartbleed Never Really Left: Why MongoBleed Is a Wake-Up Call
Heartbleed Never Really Left: Why MongoBleed Is a Wake-Up Call More than a decade ago, Heartbleed shook the internet. It wasn’t flashy malware or a clever phishing campaign – it was something far …
22 views
Daily Writeups
⤷ Title: Integrating Flatsat with COSMOS C3: A Flexible Ground Segment for Hacking and Mission Ops
════════════════════════
𐀪 Author: PWNSAT
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 00:22:19 GMT
════════════════════════
⌗ Tags: #satellite #satellite_technology #hacking #aerospace
Medium
Integrating Flatsat with COSMOS C3: A Flexible Ground Segment for Hacking and Mission Ops
One of the core goals of PWNSAT Flatsat Edition is to behave like a realistic satellite platform while remaining flexible enough to support…
23 views
Daily Writeups
⤷ Title: CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 03:19:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS #AWS JavaScript SDK #CI/CD security #Cloud Security #CodeBreach #github #ID Eclipse #Regex Vulnerability #supply chain attack #Wiz Research
Daily CyberSecurity
CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover
Wiz reveals "CodeBreach": A regex typo in AWS CodeBuild could have let hackers hijack the AWS Console via the JS SDK. Issue is now patched.
14 views
Daily Writeups
⤷ Title: Keylogger Found Harvesting Credentials on Top US Bank’s Employee Store
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 03:05:43 +0000
════════════════════════
⌗ Tags: #Malware #banking security #Cyber Security #Data Breach #Digital Skimming #Employee Portal #infosec #Keylogger #Magecart #Sansec #supply chain attack
Daily CyberSecurity
Keylogger Found Harvesting Credentials on Top US Bank's Employee Store
Sansec uncovers a keylogger on a major US bank's employee portal. 200,000 staff at risk of credential theft via hidden "side door" malware.
14 views
Daily Writeups
⤷ Title: CVE-2025-60021: Apache bRPC Flaw Opens Door to Remote Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 02:58:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache bRPC #CVE_2025_60021 #Cyber Security #DevSecOps #Heap Profiler #Industrial Software #Patch Alert #remote command injection #RPC Framework
Daily CyberSecurity
CVE-2025-60021: Apache bRPC Flaw Opens Door to Remote Command Injection
Apache patches bRPC flaw CVE-2025-60021. Vulnerable heap profiler allows remote command injection. Upgrade to v1.15.0 to secure your infrastructure.
16 views
Daily Writeups
⤷ Title: The Ad Era Begins: OpenAI Launches $8 ChatGPT Go with Sponsored Answers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 02:42:42 +0000
════════════════════════
⌗ Tags: #Technology #AI Advertising #ChatGPT Go #ChatGPT Plus #Data Privacy #GPT_5.2 Instant #January 2026 #OpenAI #sponsored content #Subnoscription Tier #Tech News
Daily CyberSecurity
The Ad Era Begins: OpenAI Launches $8 ChatGPT Go with Sponsored Answers
OpenAI launches ChatGPT Go at $8/mo in Jan 2026. Get more messages with the new GPT-5.2 Instant model as ads arrive on the Free and Go tiers.
8 views
Daily Writeups
⤷ Title: The $8 Revolution: OpenAI Launches ChatGPT Go and Breaks the Ad Barrier
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 02:32:10 +0000
════════════════════════
⌗ Tags: #Technology #AI Advertising #AI Subnoscription #ChatGPT Go #ChatGPT Plus #ChatGPT Pro #Digital Marketing #GPT_5.2 Instant #January 2026 #OpenAI #Tech News
Daily CyberSecurity
The $8 Revolution: OpenAI Launches ChatGPT Go and Breaks the Ad Barrier
OpenAI launches ChatGPT Go at $8/mo in Jan 2026. Get 10x more messages with the new GPT-5.2 Instant model as ads arrive on the Free and Go tiers.
8 views
Daily Writeups
⤷ Title: The Silver Jubilee: Wikipedia Inks Landmark AI Deals with Meta, Microsoft, and Amazon
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 02:03:01 +0000
════════════════════════
⌗ Tags: #Technology #25th Anniversary #AI Training Data #Amazon #Digital Knowledge #machine_learning #Meta #Microsoft #Mistral AI #Perplexity #Wikimedia Enterprise #Wikimedia Foundation #Wikipedia
Daily CyberSecurity
The Silver Jubilee: Wikipedia Inks Landmark AI Deals with Meta, Microsoft, and Amazon
Wikipedia marks 25 years on Jan 15, 2026, by announcing major AI data deals with Microsoft, Meta, and Amazon to fund its non-profit human knowledge mission.
11 views
Daily Writeups
⤷ Title: Space Hacking: The Final Frontier of Cyber Warfare
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 03:46:45 GMT
════════════════════════
⌗ Tags: #space #information_technology #satellite_technology #hacking #hacking_tools
Medium
Space Hacking: The Final Frontier of Cyber Warfare
Grab a coffee.
16 views
Daily Writeups
⤷ Title: I Audited a Loan App and Found the Keys to the Kingdom
════════════════════════
𐀪 Author: Nahyan Jahromi
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 02:52:05 GMT
════════════════════════
⌗ Tags: #infosec #technology #web_penetration_testing #hacking
Medium
I Audited a Loan App and Found the Keys to the Kingdom
Disclaimer: his analysis is strictly for educational purposes. All user data shown in screenshots has been obfuscated, and specific…
13 views
Daily Writeups
⤷ Title: Critical OpenKM Zero-Day Enables Full Server Takeover (No Patch Available)
════════════════════════
𐀪 Author: Terra System Labs
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 19:41:42 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #machine_learning #hacking #technology
Medium
Critical OpenKM Zero-Day Enables Full Server Takeover (No Patch Available)
In a recent security research disclosure, Terra System Labs has identified and responsibly disclosed a series of critical zero-day…
14 views
Daily Writeups
⤷ Title: Most Beginners Learn Ethical Hacking the Wrong Way — Python Fixed That for Me
════════════════════════
𐀪 Author: Vignesh Selvaraj
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 03:43:20 GMT
════════════════════════
⌗ Tags: #ethical_hacking #education #technology #programming #data_science
Medium
Most Beginners Learn Ethical Hacking the Wrong Way — Python Fixed That for Me
For a long time, I believed ethical hacking was only for geniuses.
19 views
Daily Writeups
⤷ Title: The Importance of RBAC (Role-Based Access Control) in APIs
════════════════════════
𐀪 Author: YRAV
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 03:01:56 GMT
════════════════════════
⌗ Tags: #api_security #authorization #backend_development
Medium
The Importance of RBAC (Role-Based Access Control) in APIs
Authentication verifies who you are. RBAC defines what you can do. Without RBAC, one leaked token can expose your entire API.
26 views
Daily Writeups
⤷ Title: Mass Assignment leads to Account Takeover and DoS
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 05:02:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #account_takeover #mass_assignment #cybersecurity #application_security
Medium
Mass Assignment leads to Account Takeover and DoS
In this blog post, I’ll talk about a mass assignment vulnerability leading to account takeover and denial of service.
29 views
Daily Writeups
⤷ Title: $3,500 Shopify Partners Bug: Become “Owner” Without Verifying the Email
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 04:56:23 GMT
════════════════════════
⌗ Tags: #penetration_testing #technology #bug_bounty #cybersecurity #tech
Medium
$3,500 Shopify Partners Bug: Become “Owner” Without Verifying the Email
How a small invitation flow change lets attackers accept invites on unverified emails and escalate privileges fast.
20 views
Daily Writeups
⤷ Title: Breaking Rate Limiting: Where It Breaks and How Attackers Bypass It
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 04:54:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #security #bug_bounty_tips #web_development
Medium
Breaking Rate Limiting: Where It Breaks and How Attackers Bypass It
A practical guide to finding, bypassing, and fixing rate-limit flaws in real-world web apps
14 views
Daily Writeups
⤷ Title: They Plugged In a USB Cable — and Lost Their Business by Lunch: A Malicious BadUSB Attack Explained
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 05:04:54 GMT
════════════════════════
⌗ Tags: #technology #hacking #cybersecurity #small_business #information_security
Medium
They Plugged In a USB Cable — and Lost Their Business by Lunch: A Malicious BadUSB Attack Explained
It started with a harmless-looking USB cable. It ended with locked systems, phantom logins, and a small business fighting for survival.
12 views
Daily Writeups
⤷ Title: How to Actually Learn Hacking in 2026 — A Practical Guide
════════════════════════
𐀪 Author: Satyam Pathania
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 04:56:36 GMT
════════════════════════
⌗ Tags: #roadmaps #technology #beginner #cybersecurity #hacking
Medium
How to Actually Learn Hacking in 2026 — A Practical Guide
“Everyone wants to learn hacking fast.
 Nobody wants to sit in confusion long enough to actually understand it.”
12 views
Daily Writeups
⤷ Title: The Dark Web Is Not What You Think
════════════════════════
𐀪 Author: Satyam Pathania
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 04:46:22 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #internet #darkweb #hacking
Medium
The Dark Web Is Not What You Think
If YouTube thumbnails were accurate, the dark web would be:
20 views
Daily Writeups
⤷ Title: Swiss Knife of the Pen-Tester, Practical Burp Suite Methodology — Part 1
════════════════════════
𐀪 Author: Martin Simonyan
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 04:59:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_development #burpsuite #cybersecurity #red_team_methodology
Medium
Swiss Knife of the Pen-Tester, Practical Burp Suite Methodology — Part 1
Deep Burp Suite methodoloy series for developing Red Teamer mindset not just tool knowledge
13 views
Daily Writeups
⤷ Title: ️ The Skeleton Key in Your Pocket: Mastering the iCopy-XS (Part 1 of 5)
════════════════════════
𐀪 Author: Nicholas Mullenski
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 04:59:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #penetration_testing #gadgets #ethical_hacking
Medium
🗝️ The Skeleton Key in Your Pocket: Mastering the iCopy-XS (Part 1 of 5) 💾
*Series: The RFID Auditor’s Handbook *Author: Nicholas Mullenski *Github: R00t3dbyFa17h
15 views