Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.33K subscribers
1 photo
111K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.33K subscribers
Daily Writeups
⤷ Title: The Startup Stealer: How AI and Discord Powered the Arkanix MaaS Operation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:33:57 +0000
════════════════════════
⌗ Tags: #Malware #AI Malware #Arkanix Stealer #Cyber Security #Discord C2 #infosec #Kaspersky Labs #LLM_Assisted Development #MaaS #Malware_as_a_Service #threat intelligence
Daily CyberSecurity
The Startup Stealer: How AI and Discord Powered the Arkanix MaaS Operation
Kaspersky exposes Arkanix Stealer, a fast-moving MaaS operation leveraging Discord, tiered subnoscriptions, and AI-assisted development for quick data theft.
10 views
Daily Writeups
⤷ Title: Cash Out: FBI Warns of $20M ATM ‘Jackpotting’ Surge Driven by Ploutus Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:27:48 +0000
════════════════════════
⌗ Tags: #Malware #ATM Jackpotting #banking security #Cyber Security #Cyber Threat #FBI Warning #financial fraud #infosec #Ploutus Malware #threat intelligence #XFS Vulnerability
Daily CyberSecurity
Cash Out: FBI Warns of $20M ATM 'Jackpotting' Surge Driven by Ploutus Malware
The FBI warns of a massive surge in ATM jackpotting attacks. Cybercriminals are using Ploutus malware to bypass the XFS layer and drain cash reserves.
9 views
Daily Writeups
⤷ Title: The ‘ClickFix’ Trap: GrayCharlie Hijacks US Law Firms to Deploy NetSupport RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:22:38 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Cyber Security #Fake Browser Update #GrayCharlie #infosec #Insikt Group #NetSupport RAT #StealC #supply chain attack #wordpress security
Daily CyberSecurity
The 'ClickFix' Trap: GrayCharlie Hijacks US Law Firms to Deploy NetSupport RAT
Insikt Group exposes GrayCharlie compromising WordPress sites & US law firms. Attackers use "ClickFix" fake CAPTCHAs to deploy the NetSupport RAT.
12 views
Daily Writeups
⤷ Title: Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:17:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroJS Bypass #AppSec #CVE_2026_25755 #Cyber Security #infosec #JavaScript Security #jsPDF #npm Vulnerability #Patch Alert #PDF Object Injection
Daily CyberSecurity
Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
A critical PDF Object Injection flaw (CVE-2026-25755) in jsPDF allows attackers to bypass AcroJS sandboxes. Update to version 4.2.0 immediately.
7 views
Daily Writeups
⤷ Title: The Fake IT Threat: “TrustConnect” Malware-as-a-Service Masquerades as Legitimate RMM Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:11:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Malware #Cyber Security #DocConnect #infosec #MaaS #Malware_as_a_Service #Proofpoint #Redline stealer #RMM Abuse #TrustConnect
Daily CyberSecurity
The Fake IT Threat: "TrustConnect" Malware-as-a-Service Masquerades as Legitimate RMM Software
Proofpoint exposes TrustConnect, a new Malware-as-a-Service masquerading as an IT tool. The AI-assisted fake RMM software replaces dismantled threats.
6 views
Daily Writeups
⤷ Title: Weaponizing Windows Errors: PoC Dropped for Critical Privilege Escalation Flaw in WER Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:09:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cyber Security #infosec #LPE #Patch Alert #PoC Disclosed #privilege escalation #Windows Error Reporting #Windows Security
Daily CyberSecurity
Weaponizing Windows Errors: PoC Dropped for Critical Privilege Escalation Flaw in WER Service
A critical Windows Error Reporting flaw (CVE-2026-20817) allows local privilege escalation to SYSTEM. With the PoC publicly disclosed, update immediately.
6 views
Daily Writeups
⤷ Title: Industrialized Theft: GoldFactory Malware Hijacks Tax Season via Fake ‘Coretax’ Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:06:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Coretax Fraud #Gigabud.RAT #GoldFactory #Group_IB #MaaS #Malware_as_a_Service #MMRat #Mobile Banking Fraud #social engineering #Vishing
Daily CyberSecurity
Industrialized Theft: GoldFactory Malware Hijacks Tax Season via Fake 'Coretax' Apps
Group-IB exposes an industrialized mobile banking fraud campaign in Indonesia. GoldFactory hackers use fake Coretax apps and Gigabud.RAT to drain accounts.
9 views
Daily Writeups
⤷ Title: Streaming Fraud: “Massiv” Android Trojan Uses Fake IPTV Apps for Complete Device Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:01:47 +0000
════════════════════════
⌗ Tags: #Malware #Android trojan #Cyber Security #Device Takeover #infosec #IPTV Scam #Malware Analysis #Massiv Malware #Mobile Banking Fraud #Side_Loading #ThreatFabric
Daily CyberSecurity
Streaming Fraud: "Massiv" Android Trojan Uses Fake IPTV Apps for Complete Device Takeover
ThreatFabric exposes Massiv, a new Android banking Trojan hiding in fake IPTV apps. The malware uses accessibility permissions for full device takeover.
7 views
Daily Writeups
⤷ Title: How a Small Validation Bypass Enabled Invisible Identities
════════════════════════
𐀪 Author: Mahmoud Farag
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 23:09:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #unicode #web_security #input_validation #cybersecurity
Medium
How a Small Validation Bypass Enabled Invisible Identities
الحمد لله والصلاة والسلام على رسول الله وعلى آله وصحبه أما بعد
14 views
Daily Writeups
⤷ Title: Segurança em aplicações .NET
════════════════════════
𐀪 Author: João Bosco
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 23:57:26 GMT
════════════════════════
⌗ Tags: #aspnetcore #security #infosec #microsoft
Medium
🚨 Segurança em aplicações .NET
Muita gente acredita que, ao usar ASP.NET Core + JWT + Entity Framework, a aplicação já está “segura por padrão”. Não está.
16 views
Daily Writeups
⤷ Title: Networking |Cybersecurity 101 TryHackMe
════════════════════════
𐀪 Author: Fabiosrocha
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 23:14:34 GMT
════════════════════════
⌗ Tags: #tryhackme #networking #cybersecurity #tryhackme_writeup
Medium
Networking |Cybersecurity 101 TryHackMe
Welcome to the write-up of the Networking module of TryHackMe Cybersecurity 101. This serves as a repository for the path Cybersecurity…
17 views
Daily Writeups
⤷ Title: Thinking Like an Attacker: How API Pen-Testers Identify Broken Authentication
════════════════════════
𐀪 Author: Bethel
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:05:48 GMT
════════════════════════
⌗ Tags: #api_security_testing #api_gateway #api_security #owasp_api_security_top_10
Medium
Thinking Like an Attacker: How API Pen-Testers Identify Broken Authentication
APIs power modern applications. From mobile banking apps to e-commerce platforms, APIs handle authentication, data access, and business…
23 views
Daily Writeups
⤷ Title: The AI Auditor: Anthropic Unveils Claude Code Security to Hunt Flaws Human Eyes Miss
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:49:15 +0000
════════════════════════
⌗ Tags: #Technology
Daily CyberSecurity
The AI Auditor: Anthropic Unveils Claude Code Security to Hunt Flaws Human Eyes Miss
Anthropic's Claude Code Security moves beyond pattern matching to "reason" through code, unearthing 500+ vulnerabilities missed by decades of human review.
16 views
Daily Writeups
⤷ Title: Crimson Comeback: Apple Tests a “Deep Red” iPhone 18 Pro as the iPhone Fold Goes Minimalist
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:44:22 +0000
════════════════════════
⌗ Tags: #Technology #Aluminum Unibody #Apple #Cosmic Orange #Deep Red iPhone #Foldable iPhone #iPhone 18 Pro #iPhone Fold #Mark Gurman #smartphone design #Tech News 2026
Daily CyberSecurity
Crimson Comeback: Apple Tests a "Deep Red" iPhone 18 Pro as the iPhone Fold Goes Minimalist
Apple is testing a "Deep Red" finish for the iPhone 18 Pro to follow Cosmic Orange's success. Meanwhile, the iPhone Fold sticks to classic Black and White.
11 views
Daily Writeups
⤷ Title: The Bixby Redemption: Samsung Unveils a “Conversational Agent” to End Menu-Diving Forever
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:16:11 +0000
════════════════════════
⌗ Tags: #Android #Android 16 #Beta program #Bixby #Conversational AI #device control #Galaxy AI #One UI 8.5 #real_time web search #samsung #Samsung Galaxy S26 #Tech News 2026
Daily CyberSecurity
The Bixby Redemption: Samsung Unveils a "Conversational Agent" to End Menu-Diving Forever
Bixby is back! The One UI 8.5 beta transforms Bixby into a Conversational Agent that understands natural language and controls your phone without menu-diving.
8 views
Daily Writeups
⤷ Title: The Face of ChatGPT: Inside Jony Ive’s $300 Smart Speaker that Watches and Advises
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:11:12 +0000
════════════════════════
⌗ Tags: #Technology #AI hardware #Apple design #Consumer Electronics #Face ID #io acquisition #Jony Ive #LoveFrom #OpenAI #Sam Altman #Smart Home #Smart Speaker #Tech News 2026
Daily CyberSecurity
The Face of ChatGPT: Inside Jony Ive’s $300 Smart Speaker that Watches and Advises
Jony Ive and OpenAI are building a camera-equipped smart speaker for 2027. Discover the $6.5B design deal bringing "Face ID" and visual AI into your home.
7 views
Daily Writeups
⤷ Title: Interactive Cinema: YouTube Brings Gemini-Powered “Ask” AI to the Biggest Screen in Your House
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:07:53 +0000
════════════════════════
⌗ Tags: #Technology #9to5Google #Conversational AI #Gaming Consoles #Gemini AI #Google Home #Interactive TV #smart tv #Streaming Devices #Tech News 2026 #youtube #YouTube Premium Labs
Daily CyberSecurity
Interactive Cinema: YouTube Brings Gemini-Powered "Ask" AI to the Biggest Screen in Your House
YouTube’s Gemini "Ask" feature hits smart TVs and consoles! Ask voice questions about recipes or lyrics without pausing. The passive TV era is officially over.
17 views
Daily Writeups
⤷ Title: Nurturing the Giants: Inside NVIDIA’s “Inception” Strategy to Capture India’s AI Boom
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:04:11 +0000
════════════════════════
⌗ Tags: #Technology #Aakrit Vaish #Activate Fund #AI startups #CUDA ecosystem #Inception Program #India AI #Jensen Huang #New Delhi AI Summit #nvidia #Tech News 2026 #Venture Capital
Daily CyberSecurity
Nurturing the Giants: Inside NVIDIA’s "Inception" Strategy to Capture India’s AI Boom
NVIDIA is playing the long game in India. By partnering with the $75M Activate fund, they are locking in the next generation of AI giants before they even exist.
9 views
Daily Writeups
⤷ Title: Double Compromise: Unearthing Unauthenticated SSRF and Weaponized XSS on Legacy Oracle…
════════════════════════
𐀪 Author: K4r33m
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:41:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #ssrf #cybersecurity #xs
Medium
Double Compromise: Unearthing Unauthenticated SSRF and Weaponized XSS on Legacy Oracle Infrastructure
When assessing enterprise perimeters, legacy subdomains often hide complex architectural flaws. During a recent engagement targeting a…
10 views
Daily Writeups
⤷ Title: Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
════════════════════════
𐀪 Author: K4r33m
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:27:02 GMT
════════════════════════
⌗ Tags: #session_misconfiguration #ato #bug_bounty #account_takeover #rate_limiting
Medium
Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
In bug bounty and penetration testing, a “duplicate” finding is often viewed as a dead end. However, a duplicate bug is essentially a known…
11 views
Daily Writeups
⤷ Title: ️How Anonymous LDAP Enumeration Led to AS-REP Roasting and Domain Compromise
════════════════════════
𐀪 Author: Jabaribrown
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:02:33 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking #red_team #windows #hacking
Medium
🪟 💻🕷️How Anonymous LDAP Enumeration Led to AS-REP Roasting and Domain Compromise
As I continue preparing for the CRTP, I’ve begun incorporating external resources beyond the course material to strengthen my understanding…
7 views