Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.2K subscribers
106K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.2K subscribers
Daily Writeups
⤷ Title: Fake Productivity Tools: 5 Malicious Chrome Extensions Hijack Enterprise Sessions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:37:04 +0000
════════════════════════
⌗ Tags: #Malware #Chrome extensions #Cookie Injection #DataByCloud #Enterprise Security #infosec #malware #NetSuite #Session Hijacking #Socket Threat Research #Workday
Daily CyberSecurity
Fake Productivity Tools: 5 Malicious Chrome Extensions Hijack Enterprise Sessions
Socket discovers 5 malicious Chrome extensions posing as productivity tools. They steal session tokens & block security teams. 2,300+ enterprise users at risk.
16 views
Daily Writeups
⤷ Title: Sitting Ducks and Scammy Notifications: Inside a Global Malvertising Operation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:32:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ad Fraud #Android security #Cyber Crime #Cyber Hygiene #DNS hijacking #DNS Vulnerability #Infoblox #Malvertising #Push Notification Scam #Sitting Ducks
Daily CyberSecurity
Sitting Ducks and Scammy Notifications: Inside a Global Malvertising Operation
Infoblox researchers hijacked a scam network using the "Sitting Ducks" DNS flaw. 57M logs reveal how abandoned domains fuel global push notification spam.
13 views
Daily Writeups
⤷ Title: Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:27:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_14894 #File Upload Vulnerability #Laravel #Livewire Filemanager #PHP Security #Remote Code Execution #Unpatched Vulnerability #Web Security
Daily CyberSecurity
Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
Unpatched Livewire Filemanager flaw (CVE-2025-14894) allows unauthenticated RCE via malicious uploads. Check storage:link configurations immediately.
18 views
Daily Writeups
⤷ Title: KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:22:49 +0000
════════════════════════
⌗ Tags: #Data Leak #APT #China MPS #cyber_espionage #data leak #DomainTools #GhostX #infosec #KnownSec #Passive Radar #Un_Mail #zoomeye
Daily CyberSecurity
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline
KnownSec leak exposes a "vertically integrated espionage stack." See how ZoomEye and GhostX power China's state-aligned cyber operations.
14 views
Daily Writeups
⤷ Title: Bluetooth “Heartbleed” and DoS Flaws Found in Xiaomi Redmi Buds, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:19:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Audio Security #Bluetooth security #CERT/CC #CVE_2025_13328 #CVE_2025_13834 #Denial of Service #Heartbleed #Privacy Leak #Redmi Buds #Xiaomi
Daily CyberSecurity
Bluetooth "Heartbleed" and DoS Flaws Found in Xiaomi Redmi Buds, No Patch
Critical Redmi Buds flaws (CVE-2025-13834) allow data theft and device crashes via Bluetooth. "Heartbleed"-style bug has no patch. Disable Bluetooth now.
13 views
Daily Writeups
⤷ Title: Invisible Intruder: Fileless Remcos RAT Hides in Shipping Emails
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:15:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2017_11882 #Cyber Security #Fileless Malware #FortiGuard Labs #Malware Analysis #phishing #Process Hollowing #Remcos RAT #steganography
Daily CyberSecurity
Invisible Intruder: Fileless Remcos RAT Hides in Shipping Emails
New fileless Remcos RAT campaign uses a "[virus detected]" shipping lure to inject malware into memory via process hollowing. See how to spot it.
21 views
Daily Writeups
⤷ Title: Critical Deno Flaws Risk Secrets (CVE-2026-22863) & Execution (CVE-2026-22864)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:14:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #cryptography #CVE_2026_22863 #CVE_2026_22864 #Deno #JavaScript Security #Node.js Compatibility #Patch Alert #Windows Security
Daily CyberSecurity
Critical Deno Flaws Risk Secrets (CVE-2026-22863) & Execution (CVE-2026-22864)
Deno, CVE-2026-22863, CVE-2026-22864, JavaScript Security, Cryptography, Command Injection, Windows Security, Node.js Compatibility, Patch Alert
29 views
Daily Writeups
⤷ Title: New “LOTUSLITE” Backdoor Targets U.S. Government in Suspected Mustang Panda Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:11:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Acronis TRU #APT #DLL Sideloading #Espionage #LOTUSLITE #Malware Analysis #Mustang Panda #spear_phishing #US government
Daily CyberSecurity
New "LOTUSLITE" Backdoor Targets U.S. Government in Suspected Mustang Panda Campaign
Mustang Panda targets US gov with new LOTUSLITE backdoor. Campaign uses Venezuela lures and DLL sideloading to evade detection.
16 views
Daily Writeups
⤷ Title: Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:09:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABB #Ability OPTIMAX #Authentication Bypass #Azure AD #Critical Infrastructure #CVE_2025_14510 #CVSS 9.2 #ICS #Industrial Security #SCADA
Daily CyberSecurity
Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover
Critical: ABB OPTIMAX flaw CVE-2025-14510 (CVSS 9.2) allows auth bypass via Azure AD. Attackers can shut down systems. Patch or disable SSO now.
18 views
Daily Writeups
⤷ Title: The Fake “RedLine”: Imposter Malware Hijacks Crypto Wallets on Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:05:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Clipboard Hijacker #CloudSEK #Cryptocurrency Theft #Discord Security #Python Malware #Redline stealer #RedLineCyber #social engineering #Wallet drainer
Daily CyberSecurity
The Fake "RedLine": Imposter Malware Hijacks Crypto Wallets on Discord
CloudSEK exposes "RedLineCyber," an impostor hijacking crypto clipboards on Discord. This stealthy malware drains wallets without a C2 server.
25 views
Daily Writeups
⤷ Title: Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:01:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_0861 #CVE_2026_0915 #glibc #GNU C Library #heap corruption #infosec #integer overflow #Linux Security #Memory Leak
Daily CyberSecurity
Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
glibc patches CVE-2026-0861 (CVSS 8.4) & CVE-2026-0915. High-severity heap corruption and a 20-year-old leak affect Linux systems. Patch now.
24 views
Daily Writeups
⤷ Title: Mastering Input Handling in PHP: A Deep Dive into ‘Sanitize’ vs ‘Validate’
════════════════════════
𐀪 Author: Ann R.
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 01:36:19 GMT
════════════════════════
⌗ Tags: #input_sanitization #input_validation #sql_injection #php #prepared_statements
Medium
Mastering Input Handling in PHP: A Deep Dive into ‘Sanitize’ vs ‘Validate’
How Proper Input Validation and Sanitization Can Secure Your PHP Applications
24 views
Daily Writeups
⤷ Title: The Silent Listener: WhisperPair Exploit Turns Flagship Headphones into Spy Tools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 04:00:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bluetooth Security #cybersecurity #Find My Device #Google Fast Pair #Google Pixel Buds #InfoSec 2026 #JBL #KU Leuven #privacy #Sony #WhisperPair
Penetration Testing Tools
The Silent Listener: WhisperPair Exploit Turns Flagship Headphones into Spy Tools
Envision strolling through a thoroughfare, enveloped in the melodies of your headphones, utterly oblivious to the specter of
11 views
Daily Writeups
⤷ Title: The Kill Switch: Palo Alto Patches GlobalProtect Flaw That Freezes Firewalls
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:54:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_0227 #Denial of Service #Firewall Security #GlobalProtect #InfoSec 2026 #Palo Alto Networks #PAN_OS #Patch Tuesday #Prisma Access #VPN Security
Penetration Testing Tools
The Kill Switch: Palo Alto Patches GlobalProtect Flaw That Freezes Firewalls
Palo Alto Networks has successfully remediated a perilous vulnerability within its firewalls that permitted unauthenticated adversaries to effectively
11 views
Daily Writeups
⤷ Title: Absolute Compromise: 10.0 Flaw in Modular DS Plugin Grants Instant Admin Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:37:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Bypass #CVE_2026_23550 #cyberattack #InfoSec 2026 #Modular DS #Patchstack #Plugin Security #privilege escalation #WordPress #zero_day
Penetration Testing Tools
Absolute Compromise: 10.0 Flaw in Modular DS Plugin Grants Instant Admin Access
A critical vulnerability has been unearthed in the ubiquitous WordPress plugin Modular DS, which is currently being actively
13 views
Daily Writeups
⤷ Title: The RAM Crunch: Why Your Next Smartphone Will Cost More in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:35:36 +0000
════════════════════════
⌗ Tags: #Technology #AI hardware #Apple #IDC #Memory Shortage #MWC 2026 #RAM Crisis 2026 #samsung #Smartphone Market #Supply Chain #Tech News
Daily CyberSecurity
The RAM Crunch: Why Your Next Smartphone Will Cost More in 2026
IDC warns of an "unprecedented" memory shortage in 2026 that could hike smartphone prices by 30%. See how Apple and Samsung are bracing for the hit.
12 views
Daily Writeups
⤷ Title: The $134 Billion Gambit: Musk Sues OpenAI While California Crackdown Hits xAI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:09:56 +0000
════════════════════════
⌗ Tags: #Technology #AI Lawsuit 2026 #California DOJ #Deepfakes #Elon Musk #Grok #Microsoft #OpenAI #Rob Bonta #Sam Altman #Tech Ethics #xAI
Daily CyberSecurity
The $134 Billion Gambit: Musk Sues OpenAI While California Crackdown Hits xAI
Elon Musk demands $134B from OpenAI in Jan 2026 as California orders xAI to stop Grok from generating non-consensual deepfake pornography.
11 views
Daily Writeups
⤷ Title: Defending the Data Moat: Google Appeals Monopoly Ruling to Block Forced Data Sharing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:05:12 +0000
════════════════════════
⌗ Tags: #Technology #2026 Legal News #AI Search #Antitrust Law #Corporate Litigation #Data Privacy #Department of Justice #google #Google Search Index #search monopoly #Tech Giants
Daily CyberSecurity
Defending the Data Moat: Google Appeals Monopoly Ruling to Block Forced Data Sharing
Google appeals the 2024 search monopoly ruling in Jan 2026, fighting a federal mandate to share its proprietary search data and index with competitors.
18 views
Daily Writeups
⤷ Title: Beyond Routing: Transform the OpenWrt One into a Powerful Debian Micro-Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 02:59:44 +0000
════════════════════════
⌗ Tags: #Linux #Banana Pi #Debian Linux #HomeLab #MediaTek Filogic #Micro_server #Networking #NVMe SSD #Open Source Hardware #OpenWrt One #WiFi 6
Daily CyberSecurity
Beyond Routing: Transform the OpenWrt One into a Powerful Debian Micro-Server
OpenWrt One gets a Debian boost in Jan 2026. Use the M.2 NVMe slot to turn this "unbrickable" WiFi 6 router into a full Linux micro-server for $89.
12 views
Daily Writeups
⤷ Title: Unlocking the Power of Hashcat: Advanced Cracking Techniques for Real-World Pentesting
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:31:11 GMT
════════════════════════
⌗ Tags: #information_security #hacking #cybersecurity #security #password_cracking
Medium
Unlocking the Power of Hashcat: Advanced Cracking Techniques for Real-World Pentesting
Most people know Hashcat as “that password-cracking tool.” But professionals know it as a weapon — a GPU-accelerated powerhouse that…
12 views
Daily Writeups
⤷ Title: Getting Started with Hashcat: Your Fast Track Into Password Cracking Basics
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:30:17 GMT
════════════════════════
⌗ Tags: #information_security #password_cracking #hacking #security #cybersecurity
Medium
Getting Started with Hashcat: Your Fast Track Into Password Cracking Basics
If you’re stepping into cybersecurity, you’ve probably heard someone casually say, “Just crack it with Hashcat.”
14 views