Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.33K subscribers
1 photo
110K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.33K subscribers
Daily Writeups
⤷ Title: Beyond the Router: How the Zerobotv9 Botnet is Hijacking Enterprise Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:42:35 +0000
════════════════════════
⌗ Tags: #Malware #Akamai SIRT #CVE_2025_68613 #CVE_2025_7544 #Enterprise Security #infosec #IoT Malware #Mirai botnet #n8n vulnerability #Tenda router flaw #Zerobotv9
Daily CyberSecurity
Beyond the Router: How the Zerobotv9 Botnet is Hijacking Enterprise Automation
Akamai SIRT reveals Zerobotv9, a new Mirai-based botnet targeting enterprise n8n workflow platforms and Tenda routers via critical vulnerabilities.
21 views
Daily Writeups
⤷ Title: High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:38:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular #Application Security #Cross_Site Scripting #CVE_2026_27970 #i18n #ICU Messages #infosec #Internationalization #Patch Alert #Web Security #XSS
Daily CyberSecurity
High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors
Angular patches a high-severity 7.6 CVSS XSS flaw (CVE-2026-27970). Attackers can weaponize i18n translation files to steal data and hijack user sessions.
8 views
Daily Writeups
⤷ Title: From Chat App to Dark Web: How Telegram Became the New Hub for Cybercrime
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:27:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #cybersecurity #Cyfirma #dark web #Digital Black Market #Hacktivism #Malware_as_a_Service #ransomware #Telegram #threat intelligence
Daily CyberSecurity
From Chat App to Dark Web: How Telegram Became the New Hub for Cybercrime
Cyfirma reveals how Telegram has replaced the dark web as the ultimate digital black market, making tools like malware and data theft available to anyone.
5 views
Daily Writeups
⤷ Title: The Fake Security Checkup: How a Rogue ‘Google’ App Hijacks Your Digital Life
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:22:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #browser security #Cyber Threats #cybersecurity #Google_prism #Malwarebytes #mobile surveillance #phishing #PWA malware #social engineering #Tech News
Daily CyberSecurity
The Fake Security Checkup: How a Rogue 'Google' App Hijacks Your Digital Life
Cybercriminals are using a fake Google security checkup (google-prism) to trick you into installing powerful PWA malware. Learn how to spot the trap.
5 views
Daily Writeups
⤷ Title: The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:16:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.arpa domain #dangling domains #Domain Hijacking #Infoblox #infosec #infrastructure abuse #IPv6 tunnel #phishing #reverse DNS #TDS #traffic distribution system
Daily CyberSecurity
The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security
Infoblox uncovers a novel phishing tactic abusing the .arpa TLD. Attackers hijack internet "plumbing" to bypass firewalls and deliver brand-impersonation scams.
9 views
Daily Writeups
⤷ Title: OpenAI Exposes the Massive Global Underworld of Malicious AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Scams #ChatGPT #Cyber Special Operations #cyber_espionage #Disrupting Malicious Uses of AI #influence operations #infosec #OpenAI #Operation Date Bait #Operation False Witness #Rybar
Daily CyberSecurity
OpenAI Exposes the Massive Global Underworld of Malicious AI
OpenAI’s Feb 2026 report reveals "cyber special operations," Cambodian "Date Bait" scams, and Russian content farms using AI to automate global disruption.
6 views
Daily Writeups
⤷ Title: Bridging the Gap: North Korean APT37 Deploys ‘Ruby Jumper’ to Infiltrate Isolated Air-Gapped Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:05:18 +0000
════════════════════════
⌗ Tags: #Malware #Air_gap attack #APT37 #Cloud C2 #infosec #North Korean APT #Ruby Jumper #ScarCruft #SNAKEDROPPER #THUMBSBD #USB malware #VIRUSTASK
Daily CyberSecurity
Bridging the Gap: North Korean APT37 Deploys 'Ruby Jumper' to Infiltrate Isolated Air-Gapped Networks
Zscaler unmasked APT37's "Ruby Jumper" campaign, which uses weaponized USBs and cloud services to bypass network isolation and steal data from air-gapped systems.
5 views
Daily Writeups
⤷ Title: The High Cost of ‘Free’: How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:00:00 +0000
════════════════════════
⌗ Tags: #Malware #ACRStealer #DLL Sideloading #G DATA #Gaming Security #HijackLoader #infosec #Infostealer #Malvertising #Malware Analysis #Piracy Risks #PiviGames
Daily CyberSecurity
The High Cost of 'Free': How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer
G DATA reveals how pirated gaming site PiviGames distributes ACRStealer via "spaghetti code" HijackLoader and DLL sideloading, causing total account takeovers.
6 views
Daily Writeups
⤷ Title: Guía de Waybackurls: Extracción de URLs Históricas para Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #cheatsheet #technology
Medium
Guía de Waybackurls: Extracción de URLs Históricas para Bug Bounty
Domina Waybackurls para encontrar endpoints ocultos, parámetros sensibles y archivos JS antiguos en tus auditorías de seguridad.
6 views
Daily Writeups
⤷ Title: HTB Knife: PHP 8.1.0-dev Supply Chain Backdoor RCE to Root
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 23:46:26 GMT
════════════════════════
⌗ Tags: #ctf #ethical_hacking #penetration_testing #cybersecurity #hackthebox
Medium
HTB Knife: PHP 8.1.0-dev Supply Chain Backdoor RCE to Root
First, add your IP to /etc/hosts to make the target accessible while conducting scans.
13 views
Daily Writeups
⤷ Title: Driftingblue6 Walkthrough (Educational & Defensive Analysis)
════════════════════════
𐀪 Author: cyber_public_school
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 23:13:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #information_security #vulnerability #cybersecurity #oscp
Medium
🔥Driftingblue6 Walkthrough (Educational & Defensive Analysis)
By cyber_public_school | Cyber Security Researcher
15 views
Daily Writeups
⤷ Title: North Korean “StegaBin” Campaign Targets Developers with Steganographic Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:53:18 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #Famous Chollima #infosec #Lazarus Group #npm Security #pastebin #Socket #StegaBin #steganography #supply chain attack #truffleHog
Daily CyberSecurity
North Korean "StegaBin" Campaign Targets Developers with Steganographic Malware
Socket uncovers "StegaBin," a North Korean malware campaign hiding C2 URLs in Pastebin essays to steal developer secrets via 26 typosquatted npm packages.
17 views
Daily Writeups
⤷ Title: Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:12:34 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability Report #Android security #CVE_2026_0006 #CVE_2026_21385 #infosec #Patch Alert #Qualcomm #rce #Remote Code Execution #vulnerability management #zero_day
Daily CyberSecurity
Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day
Google’s March 2026 Android update fixes 129 flaws, including CVE-2026-21385—a high-severity Qualcomm vulnerability currently being exploited in the wild.
18 views
Daily Writeups
⤷ Title: CVE-2026-2256: Unpatched Flaw in MS-Agent Lets Hackers Hijack AI Assistants
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 01:59:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #autonomous agents #Command Injection #CVE_2026_2256 #Cyber Threats #infosec #LLM Security #MS_Agent #Prompt injection #zero_day
Daily CyberSecurity
CVE-2026-2256: Unpatched Flaw in MS-Agent Lets Hackers Hijack AI Assistants
An unpatched zero-day flaw (CVE-2026-2256) in the MS-Agent framework allows hackers to use prompt injection to execute OS commands and hijack AI systems.
19 views
Daily Writeups
⤷ Title: When the Code Reviewer Is Not Human: Claude and the Reinvention of Security
════════════════════════
𐀪 Author: Mahesh Aswani
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 01:42:26 GMT
════════════════════════
⌗ Tags: #application_security #agentic_ai #ai_code_review #claude #devsecops
Medium
When the Code Reviewer Is Not Human: Claude and the Reinvention of Security
There is a particular kind of dread that settles in when a tool does not just help you do your job, but starts to perform the job itself.
25 views
Daily Writeups
⤷ Title: CSRF To 1-Step Account Takeover
════════════════════════
𐀪 Author: Yousef
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:39:08 GMT
════════════════════════
⌗ Tags: #hacking #account_takeover #bug_bounty_writeup #csrf
Medium
CSRF To 1-Step Account Takeover
During the review of the client’s HTTP traffic, I observed that the SESSION_ID cookie is configured with SameSite=None. This configuration…
24 views
Daily Writeups
⤷ Title: Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:42:22 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure #Credential Theft #DPAPI #EntraID #NGC tokens #post_exploitation #red teaming #SpecterBroker #Tech News 2026 #Token Broker #WAM #Windows Authentication Manager
Penetration Testing Tools
Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
SpecterBroker is a new post-exploitation powerhouse that extracts and decrypts Windows authentication tokens (WAM/TBRes) for full EntraID and Azure takeover.
15 views
Daily Writeups
⤷ Title: Digital Vendetta: The Unmasking of “Dort,” the Kimwolf Botmaster Behind a Global Swatting Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:37:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Benjamin Brundage #Cybercrime 2026 #DDoS attacks #Dort #Jacob Butler #Kimwolf botnet #KrebsOnSecurity #LAPSUS$ #Minecraft hacking #swatting #Tech News 2026
Penetration Testing Tools
Digital Vendetta: The Unmasking of "Dort," the Kimwolf Botmaster Behind a Global Swatting Campaign
In early January, a veritable tempest engulfed the sprawling Kimwolf botnet. Following the publication of an exposé detailing
13 views
Daily Writeups
⤷ Title: Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:36:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI deepfake documents #cryptocurrency scams #Cybercrime 2026 #fake passports #FBI #identity fraud #KYC bypass #Money Laundering #OnlyFake #Yurii Nazarenko
Penetration Testing Tools
Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
A clandestine digital service capable of fabricating a passport from virtually any nation in mere minutes has ultimately
6 views
Daily Writeups
⤷ Title: Sovereign Security: NATO Certifies Retail iPhones and iPads for Classified Intelligence for the First Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:32:05 +0000
════════════════════════
⌗ Tags: #Apple #B2G #BSI #German Federal Office for Information Security #iOS 26 #iPad #iphone #military grade security #mobile defense #NATO Restricted #secure enclave #Tech News 2026
Penetration Testing Tools
Sovereign Security: NATO Certifies Retail iPhones and iPads for Classified Intelligence for the First Time
Conventional iPhones and iPads are now authorized to process classified NATO intelligence. Following rigorous scrutiny by German authorities,
6 views
Daily Writeups
⤷ Title: Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:30:30 +0000
════════════════════════
⌗ Tags: #Technology #Apple Messages #cross_platform messaging #E2EE #end_to_end encryption #Google Messages #GSMA Universal Profile 3.0 #iOS 26.4 #Messaging Layer Security #MLS #RCS #Tech News 2026
Penetration Testing Tools
Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
Google and Apple have commenced testing end-to-end encryption for RCS messaging between Android smartphones and iPhones. The tech
7 views