Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.33K subscribers
1 photo
110K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.33K subscribers
Daily Writeups
⤷ Title: OpenAI Exposes the Massive Global Underworld of Malicious AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Scams #ChatGPT #Cyber Special Operations #cyber_espionage #Disrupting Malicious Uses of AI #influence operations #infosec #OpenAI #Operation Date Bait #Operation False Witness #Rybar
Daily CyberSecurity
OpenAI Exposes the Massive Global Underworld of Malicious AI
OpenAI’s Feb 2026 report reveals "cyber special operations," Cambodian "Date Bait" scams, and Russian content farms using AI to automate global disruption.
6 views
Daily Writeups
⤷ Title: Bridging the Gap: North Korean APT37 Deploys ‘Ruby Jumper’ to Infiltrate Isolated Air-Gapped Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:05:18 +0000
════════════════════════
⌗ Tags: #Malware #Air_gap attack #APT37 #Cloud C2 #infosec #North Korean APT #Ruby Jumper #ScarCruft #SNAKEDROPPER #THUMBSBD #USB malware #VIRUSTASK
Daily CyberSecurity
Bridging the Gap: North Korean APT37 Deploys 'Ruby Jumper' to Infiltrate Isolated Air-Gapped Networks
Zscaler unmasked APT37's "Ruby Jumper" campaign, which uses weaponized USBs and cloud services to bypass network isolation and steal data from air-gapped systems.
5 views
Daily Writeups
⤷ Title: The High Cost of ‘Free’: How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:00:00 +0000
════════════════════════
⌗ Tags: #Malware #ACRStealer #DLL Sideloading #G DATA #Gaming Security #HijackLoader #infosec #Infostealer #Malvertising #Malware Analysis #Piracy Risks #PiviGames
Daily CyberSecurity
The High Cost of 'Free': How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer
G DATA reveals how pirated gaming site PiviGames distributes ACRStealer via "spaghetti code" HijackLoader and DLL sideloading, causing total account takeovers.
6 views
Daily Writeups
⤷ Title: Guía de Waybackurls: Extracción de URLs Históricas para Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #cheatsheet #technology
Medium
Guía de Waybackurls: Extracción de URLs Históricas para Bug Bounty
Domina Waybackurls para encontrar endpoints ocultos, parámetros sensibles y archivos JS antiguos en tus auditorías de seguridad.
6 views
Daily Writeups
⤷ Title: HTB Knife: PHP 8.1.0-dev Supply Chain Backdoor RCE to Root
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 23:46:26 GMT
════════════════════════
⌗ Tags: #ctf #ethical_hacking #penetration_testing #cybersecurity #hackthebox
Medium
HTB Knife: PHP 8.1.0-dev Supply Chain Backdoor RCE to Root
First, add your IP to /etc/hosts to make the target accessible while conducting scans.
13 views
Daily Writeups
⤷ Title: Driftingblue6 Walkthrough (Educational & Defensive Analysis)
════════════════════════
𐀪 Author: cyber_public_school
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 23:13:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #information_security #vulnerability #cybersecurity #oscp
Medium
🔥Driftingblue6 Walkthrough (Educational & Defensive Analysis)
By cyber_public_school | Cyber Security Researcher
15 views
Daily Writeups
⤷ Title: North Korean “StegaBin” Campaign Targets Developers with Steganographic Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:53:18 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #Famous Chollima #infosec #Lazarus Group #npm Security #pastebin #Socket #StegaBin #steganography #supply chain attack #truffleHog
Daily CyberSecurity
North Korean "StegaBin" Campaign Targets Developers with Steganographic Malware
Socket uncovers "StegaBin," a North Korean malware campaign hiding C2 URLs in Pastebin essays to steal developer secrets via 26 typosquatted npm packages.
17 views
Daily Writeups
⤷ Title: Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:12:34 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability Report #Android security #CVE_2026_0006 #CVE_2026_21385 #infosec #Patch Alert #Qualcomm #rce #Remote Code Execution #vulnerability management #zero_day
Daily CyberSecurity
Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day
Google’s March 2026 Android update fixes 129 flaws, including CVE-2026-21385—a high-severity Qualcomm vulnerability currently being exploited in the wild.
18 views
Daily Writeups
⤷ Title: CVE-2026-2256: Unpatched Flaw in MS-Agent Lets Hackers Hijack AI Assistants
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 01:59:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #autonomous agents #Command Injection #CVE_2026_2256 #Cyber Threats #infosec #LLM Security #MS_Agent #Prompt injection #zero_day
Daily CyberSecurity
CVE-2026-2256: Unpatched Flaw in MS-Agent Lets Hackers Hijack AI Assistants
An unpatched zero-day flaw (CVE-2026-2256) in the MS-Agent framework allows hackers to use prompt injection to execute OS commands and hijack AI systems.
19 views
Daily Writeups
⤷ Title: When the Code Reviewer Is Not Human: Claude and the Reinvention of Security
════════════════════════
𐀪 Author: Mahesh Aswani
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 01:42:26 GMT
════════════════════════
⌗ Tags: #application_security #agentic_ai #ai_code_review #claude #devsecops
Medium
When the Code Reviewer Is Not Human: Claude and the Reinvention of Security
There is a particular kind of dread that settles in when a tool does not just help you do your job, but starts to perform the job itself.
25 views
Daily Writeups
⤷ Title: CSRF To 1-Step Account Takeover
════════════════════════
𐀪 Author: Yousef
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:39:08 GMT
════════════════════════
⌗ Tags: #hacking #account_takeover #bug_bounty_writeup #csrf
Medium
CSRF To 1-Step Account Takeover
During the review of the client’s HTTP traffic, I observed that the SESSION_ID cookie is configured with SameSite=None. This configuration…
24 views
Daily Writeups
⤷ Title: Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:42:22 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure #Credential Theft #DPAPI #EntraID #NGC tokens #post_exploitation #red teaming #SpecterBroker #Tech News 2026 #Token Broker #WAM #Windows Authentication Manager
Penetration Testing Tools
Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
SpecterBroker is a new post-exploitation powerhouse that extracts and decrypts Windows authentication tokens (WAM/TBRes) for full EntraID and Azure takeover.
15 views
Daily Writeups
⤷ Title: Digital Vendetta: The Unmasking of “Dort,” the Kimwolf Botmaster Behind a Global Swatting Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:37:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Benjamin Brundage #Cybercrime 2026 #DDoS attacks #Dort #Jacob Butler #Kimwolf botnet #KrebsOnSecurity #LAPSUS$ #Minecraft hacking #swatting #Tech News 2026
Penetration Testing Tools
Digital Vendetta: The Unmasking of "Dort," the Kimwolf Botmaster Behind a Global Swatting Campaign
In early January, a veritable tempest engulfed the sprawling Kimwolf botnet. Following the publication of an exposé detailing
13 views
Daily Writeups
⤷ Title: Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:36:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI deepfake documents #cryptocurrency scams #Cybercrime 2026 #fake passports #FBI #identity fraud #KYC bypass #Money Laundering #OnlyFake #Yurii Nazarenko
Penetration Testing Tools
Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
A clandestine digital service capable of fabricating a passport from virtually any nation in mere minutes has ultimately
6 views
Daily Writeups
⤷ Title: Sovereign Security: NATO Certifies Retail iPhones and iPads for Classified Intelligence for the First Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:32:05 +0000
════════════════════════
⌗ Tags: #Apple #B2G #BSI #German Federal Office for Information Security #iOS 26 #iPad #iphone #military grade security #mobile defense #NATO Restricted #secure enclave #Tech News 2026
Penetration Testing Tools
Sovereign Security: NATO Certifies Retail iPhones and iPads for Classified Intelligence for the First Time
Conventional iPhones and iPads are now authorized to process classified NATO intelligence. Following rigorous scrutiny by German authorities,
6 views
Daily Writeups
⤷ Title: Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:30:30 +0000
════════════════════════
⌗ Tags: #Technology #Apple Messages #cross_platform messaging #E2EE #end_to_end encryption #Google Messages #GSMA Universal Profile 3.0 #iOS 26.4 #Messaging Layer Security #MLS #RCS #Tech News 2026
Penetration Testing Tools
Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
Google and Apple have commenced testing end-to-end encryption for RCS messaging between Android smartphones and iPhones. The tech
7 views
Daily Writeups
⤷ Title: The Lockdown Era: Android 17 Rewrites the Rules for Apps with Uncompromising Security Mandates
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:28:49 +0000
════════════════════════
⌗ Tags: #Android #Android 17 #Android API #app development #background activity restrictions #Certificate Transparency #developer guidelines #MessageQueue #mobile security #Tech News 2026 #USE_LOOPBACK_INTERFACE
Penetration Testing Tools
The Lockdown Era: Android 17 Rewrites the Rules for Apps with Uncompromising Security Mandates
Android 17 is fundamentally rewriting the operational paradigms for applications targeting this nascent iteration of the operating system.
8 views
Daily Writeups
⤷ Title: Digital Fog of War: Operation “Lion’s Roar” Plunges Iran into Historic 4% Connectivity Blackout
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:27:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #cybersecurity #Digital Blackout #Electronic Warfare #internet shutdown #Iran cyberattack #IRGC #NetBlocks #Operation Epic Fury #Operation Lion's Roar #Tech News 2026 #Tehran
Penetration Testing Tools
Digital Fog of War: Operation "Lion's Roar" Plunges Iran into Historic 4% Connectivity Blackout
Against the backdrop of kinetic airstrikes targeting IRGC facilities in Iran, a secondary, digital front has simultaneously erupted.
8 views
Daily Writeups
⤷ Title: Shattered Trust: Coupang’s Q4 Profits Plunge 97% Following Massive 33-Million Record Data Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:26:24 +0000
════════════════════════
⌗ Tags: #Data Leak #Bom Kim #Consumer Privacy #corporate accountability #Coupang #data breach #e_commerce security #KFTC fine #Operating Profit #South Korea #Tech News 2026
Penetration Testing Tools
Shattered Trust: Coupang’s Q4 Profits Plunge 97% Following Massive 33-Million Record Data Leak
The South Korean e-commerce behemoth Coupang has registered a precipitous decline in profits amidst the fallout from a
8 views
Daily Writeups
⤷ Title: Inside the Breach: Hackers Annexed Dutch Prison Agency Infrastructure for Five Months via Ivanti Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:23:29 +0000
════════════════════════
⌗ Tags: #Data Leak #CVE_2026_1281 #Data Breach 2026 #Dienst Justitiële Inrichtingen #DJI hack #Dutch Custodial Institutions Agency #Ivanti EPMM #Ivanti Zero_Day #Mobile Device Management #NCSC_NL #prison security #Tech News 2026
Penetration Testing Tools
Inside the Breach: Hackers Annexed Dutch Prison Agency Infrastructure for Five Months via Ivanti Flaw
Hackers have resided within the IT infrastructure of the Dutch Custodial Institutions Agency for a minimum of five
9 views
Daily Writeups
⤷ Title: “Oblivion” Malware Hijacks Android 15 with Unprecedented Stealth
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:22:11 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service exploit #Android 15 security #Android malware #APK builder #Certo research #Cyber Security 2026 #HVNC #mobile banking trojan #Oblivion RAT #Remote Access Trojan
Penetration Testing Tools
"Oblivion" Malware Hijacks Android 15 with Unprecedented Stealth
An advertisement hawking Oblivion, a novel Remote Access Trojan (RAT) designed explicitly for Android ecosystems, has materialized on
10 views