Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.33K subscribers
1 photo
110K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.33K subscribers
Daily Writeups
⤷ Title: When the Code Reviewer Is Not Human: Claude and the Reinvention of Security
════════════════════════
𐀪 Author: Mahesh Aswani
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 01:42:26 GMT
════════════════════════
⌗ Tags: #application_security #agentic_ai #ai_code_review #claude #devsecops
Medium
When the Code Reviewer Is Not Human: Claude and the Reinvention of Security
There is a particular kind of dread that settles in when a tool does not just help you do your job, but starts to perform the job itself.
25 views
Daily Writeups
⤷ Title: CSRF To 1-Step Account Takeover
════════════════════════
𐀪 Author: Yousef
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:39:08 GMT
════════════════════════
⌗ Tags: #hacking #account_takeover #bug_bounty_writeup #csrf
Medium
CSRF To 1-Step Account Takeover
During the review of the client’s HTTP traffic, I observed that the SESSION_ID cookie is configured with SameSite=None. This configuration…
24 views
Daily Writeups
⤷ Title: Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:42:22 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure #Credential Theft #DPAPI #EntraID #NGC tokens #post_exploitation #red teaming #SpecterBroker #Tech News 2026 #Token Broker #WAM #Windows Authentication Manager
Penetration Testing Tools
Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
SpecterBroker is a new post-exploitation powerhouse that extracts and decrypts Windows authentication tokens (WAM/TBRes) for full EntraID and Azure takeover.
15 views
Daily Writeups
⤷ Title: Digital Vendetta: The Unmasking of “Dort,” the Kimwolf Botmaster Behind a Global Swatting Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:37:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Benjamin Brundage #Cybercrime 2026 #DDoS attacks #Dort #Jacob Butler #Kimwolf botnet #KrebsOnSecurity #LAPSUS$ #Minecraft hacking #swatting #Tech News 2026
Penetration Testing Tools
Digital Vendetta: The Unmasking of "Dort," the Kimwolf Botmaster Behind a Global Swatting Campaign
In early January, a veritable tempest engulfed the sprawling Kimwolf botnet. Following the publication of an exposé detailing
13 views
Daily Writeups
⤷ Title: Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:36:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI deepfake documents #cryptocurrency scams #Cybercrime 2026 #fake passports #FBI #identity fraud #KYC bypass #Money Laundering #OnlyFake #Yurii Nazarenko
Penetration Testing Tools
Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
A clandestine digital service capable of fabricating a passport from virtually any nation in mere minutes has ultimately
6 views
Daily Writeups
⤷ Title: Sovereign Security: NATO Certifies Retail iPhones and iPads for Classified Intelligence for the First Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:32:05 +0000
════════════════════════
⌗ Tags: #Apple #B2G #BSI #German Federal Office for Information Security #iOS 26 #iPad #iphone #military grade security #mobile defense #NATO Restricted #secure enclave #Tech News 2026
Penetration Testing Tools
Sovereign Security: NATO Certifies Retail iPhones and iPads for Classified Intelligence for the First Time
Conventional iPhones and iPads are now authorized to process classified NATO intelligence. Following rigorous scrutiny by German authorities,
6 views
Daily Writeups
⤷ Title: Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:30:30 +0000
════════════════════════
⌗ Tags: #Technology #Apple Messages #cross_platform messaging #E2EE #end_to_end encryption #Google Messages #GSMA Universal Profile 3.0 #iOS 26.4 #Messaging Layer Security #MLS #RCS #Tech News 2026
Penetration Testing Tools
Apple and Google Begin Testing End-to-End Encrypted RCS for iPhone and Android
Google and Apple have commenced testing end-to-end encryption for RCS messaging between Android smartphones and iPhones. The tech
7 views
Daily Writeups
⤷ Title: The Lockdown Era: Android 17 Rewrites the Rules for Apps with Uncompromising Security Mandates
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:28:49 +0000
════════════════════════
⌗ Tags: #Android #Android 17 #Android API #app development #background activity restrictions #Certificate Transparency #developer guidelines #MessageQueue #mobile security #Tech News 2026 #USE_LOOPBACK_INTERFACE
Penetration Testing Tools
The Lockdown Era: Android 17 Rewrites the Rules for Apps with Uncompromising Security Mandates
Android 17 is fundamentally rewriting the operational paradigms for applications targeting this nascent iteration of the operating system.
8 views
Daily Writeups
⤷ Title: Digital Fog of War: Operation “Lion’s Roar” Plunges Iran into Historic 4% Connectivity Blackout
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:27:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #cybersecurity #Digital Blackout #Electronic Warfare #internet shutdown #Iran cyberattack #IRGC #NetBlocks #Operation Epic Fury #Operation Lion's Roar #Tech News 2026 #Tehran
Penetration Testing Tools
Digital Fog of War: Operation "Lion's Roar" Plunges Iran into Historic 4% Connectivity Blackout
Against the backdrop of kinetic airstrikes targeting IRGC facilities in Iran, a secondary, digital front has simultaneously erupted.
8 views
Daily Writeups
⤷ Title: Shattered Trust: Coupang’s Q4 Profits Plunge 97% Following Massive 33-Million Record Data Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:26:24 +0000
════════════════════════
⌗ Tags: #Data Leak #Bom Kim #Consumer Privacy #corporate accountability #Coupang #data breach #e_commerce security #KFTC fine #Operating Profit #South Korea #Tech News 2026
Penetration Testing Tools
Shattered Trust: Coupang’s Q4 Profits Plunge 97% Following Massive 33-Million Record Data Leak
The South Korean e-commerce behemoth Coupang has registered a precipitous decline in profits amidst the fallout from a
8 views
Daily Writeups
⤷ Title: Inside the Breach: Hackers Annexed Dutch Prison Agency Infrastructure for Five Months via Ivanti Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:23:29 +0000
════════════════════════
⌗ Tags: #Data Leak #CVE_2026_1281 #Data Breach 2026 #Dienst Justitiële Inrichtingen #DJI hack #Dutch Custodial Institutions Agency #Ivanti EPMM #Ivanti Zero_Day #Mobile Device Management #NCSC_NL #prison security #Tech News 2026
Penetration Testing Tools
Inside the Breach: Hackers Annexed Dutch Prison Agency Infrastructure for Five Months via Ivanti Flaw
Hackers have resided within the IT infrastructure of the Dutch Custodial Institutions Agency for a minimum of five
9 views
Daily Writeups
⤷ Title: “Oblivion” Malware Hijacks Android 15 with Unprecedented Stealth
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:22:11 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service exploit #Android 15 security #Android malware #APK builder #Certo research #Cyber Security 2026 #HVNC #mobile banking trojan #Oblivion RAT #Remote Access Trojan
Penetration Testing Tools
"Oblivion" Malware Hijacks Android 15 with Unprecedented Stealth
An advertisement hawking Oblivion, a novel Remote Access Trojan (RAT) designed explicitly for Android ecosystems, has materialized on
10 views
Daily Writeups
⤷ Title: Encrypted Deception: Cisco Talos Unmasks “Dohdoor” and the Stealthy UAT-10027 Campaign Targeting Healthcare
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:20:07 +0000
════════════════════════
⌗ Tags: #Malware #Cisco Talos #Cloudflare #DLL Sideloading #DNS over HTTPS #Dohdoor #EDR Bypass #healthcare cybersecurity #Lazarus Group #Process Hollowing #Tech News 2026 #UAT_10027
Penetration Testing Tools
Encrypted Deception: Cisco Talos Unmasks "Dohdoor" and the Stealthy UAT-10027 Campaign Targeting Healthcare
Since the twilight of 2025, Cisco Talos has been vigilantly tracking a malicious campaign directed against educational and
8 views
Daily Writeups
⤷ Title: The Great Dispersal: How the Fall of the RAMP Forum Birthed a New Breed of Ransomware Enclaves
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:19:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Cybercrime 2026 #Dark Web #FBI seizure #Qilin #RAMP forum #ransomware #Ransomware_as_a_Service #Rehub #Stallman #T1erOne
Penetration Testing Tools
The Great Dispersal: How the Fall of the RAMP Forum Birthed a New Breed of Ransomware Enclaves
In late January 2026, American law enforcement agencies dismantled a prominent platform that had served for years as
7 views
Daily Writeups
⤷ Title: The End of PGP? How “Linux ID” is Revolutionizing Kernel Trust in the Wake of xz Utils
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:17:47 +0000
════════════════════════
⌗ Tags: #Linux #cryptography #decentralized identifiers #DIDs #Greg Kroah_Hartman #Linux Foundation #Linux ID #Linux Kernel #PGP #Supply Chain Security #Tech News 2026 #xz Utils
Penetration Testing Tools
The End of PGP? How "Linux ID" is Revolutionizing Kernel Trust in the Wake of xz Utils
“Who are you, and why should the Linux kernel trust you?” Within the kernel development community, this query
14 views
Daily Writeups
⤷ Title: Ask Master: The “EncystPHP” Web Shell is Silently Annexing Global FreePBX Telephony Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:15:29 +0000
════════════════════════
⌗ Tags: #Malware #Asterisk #CVE_2025_64328 #Cyber Security 2026 #Elastix #EncystPHP #FortiGuard Labs #FreePBX #INJ3CTOR3 #Sangoma #telephony fraud #VoIP security #Web Shell
Penetration Testing Tools
Ask Master: The "EncystPHP" Web Shell is Silently Annexing Global FreePBX Telephony Servers
A mundane telephony vulnerability has metamorphosed into a comprehensive server capitulation. Cybersecurity specialists have unearthed a pernicious web
16 views
Daily Writeups
⤷ Title: Security Alert: “Hackerbot-Claw” Autonomous Campaign Exploits GitHub Actions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:53:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2026 cyber threats #autonomous bot #Christopher Robinson #CI/CD security #Cloud Security #DevSecOps #GitHub Actions #hackerbot_claw #Open Source Security #OpenSSF #pwn request #supply chain attack
Daily CyberSecurity
Security Alert: "Hackerbot-Claw" Autonomous Campaign Exploits GitHub Actions
OpenSSF warns of "hackerbot-claw," an autonomous AI bot exploiting GitHub Actions to hijack repositories. Secure your CI/CD pipeline before it’s too late.
5 views
Daily Writeups
⤷ Title: Anthropic Launches “Memory Import” to Rescue Your ChatGPT Context Amid #QuitGPT Exodus
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 03:47:58 +0000
════════════════════════
⌗ Tags: #Technology ##QuitGPT #AI memory migration #Anthropic #ChatGPT boycott #Claude #Copilot #Data Sovereignty #Gemini #Memory Import #OpenAI military contract #switching costs #Tech News 2026
Daily CyberSecurity
Anthropic Launches "Memory Import" to Rescue Your ChatGPT Context Amid #QuitGPT Exodus
Anthropic’s new "Memory Import" tool lets you move your ChatGPT context to Claude in minutes. Perfect for those joining the #QuitGPT movement this March.
6 views
Daily Writeups
⤷ Title: Samsung Wallet Adopts Aliro Standard to Unlock Your Home with a Galaxy Tap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 03:41:43 +0000
════════════════════════
⌗ Tags: #Technology #Aliro standard #Connectivity Standards Alliance #CSA #Digital Home Key #EAL6+ #Galaxy S26 #NFC #Samsung Knox #Samsung Wallet #smart lock #Tech News 2026 #UWB
Daily CyberSecurity
Samsung Wallet Adopts Aliro Standard to Unlock Your Home with a Galaxy Tap
Samsung Wallet now supports "Digital Home Key" via the Aliro standard. Unlock your door with a Galaxy tap, secured by EAL6+ hardware and Samsung Knox.
8 views
Daily Writeups
⤷ Title: Apple Unveils the iPhone 17e with A19 Power and MagSafe for $599
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 03:39:29 +0000
════════════════════════
⌗ Tags: #Technology #48MP Fusion camera #A19 chip #Apple Intelligence #budget iPhone 2026 #C1X modem #Ceramic Shield 2 #iOS 26 #iPhone 17e #MagSafe #Tech News 2026
Daily CyberSecurity
Apple Unveils the iPhone 17e with A19 Power and MagSafe for $599
Apple’s new iPhone 17e brings the A19 chip, MagSafe, and Apple Intelligence to a $599 price point. With 256GB base storage, it’s the new king of value.
15 views
Daily Writeups
⤷ Title: Red Lines in the Rubble: OpenAI Enters the “Department of War” as Claude AI Powers Strikes on Iran
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 03:35:28 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic #autonomous weapons #Claude AI #Department of Defense #Department of War #geopolitical conflict #iPhone 17e #mass surveillance #Military AI #OpenAI #Sam Altman #Tech News 2026
Daily CyberSecurity
Red Lines in the Rubble: OpenAI Enters the "Department of War" as Claude AI Powers Strikes on Iran
OpenAI signs a classified deal with the "Department of War" as the US military continues using banned Anthropic tech for high-stakes airstrikes in Iran.
9 views