Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.21K subscribers
105K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.21K subscribers
Daily Writeups
⤷ Title: Years-Old Vulnerable Apache Struts 2 Versions See 387K Weekly Downloads
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 11:42:38 +0000
════════════════════════
⌗ Tags: #Security #Apache Struts #Cybersecurity #security #Sonatype #Vulnerability #XWork #Zast AI
Hackread
Years-Old Vulnerable Apache Struts 2 Versions See 387K Weekly Downloads
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
8 views
Daily Writeups
⤷ Title: The Silent Listener: How “Reprompt” Hijacks Microsoft Copilot with One Click
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:35:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Data Exfiltration #Edge Browser #Infosec News #Microsoft Copilot #Prompt Injection #Reprompt #Varonis #Vulnerability 2026 #Windows Update
Penetration Testing Tools
The Silent Listener: How "Reprompt" Hijacks Microsoft Copilot with One Click
Security analysts at Varonis have unveiled a sophisticated offensive targeting Microsoft’s AI assistant, designated as Reprompt. This maneuver
5 views
Daily Writeups
⤷ Title: Guarding the Guardian: Horizon3 Unmasks Root RCE in Fortinet FortiSIEM
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:35:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #Argument Injection #CVE_2025_64155 #Cybersecurity 2026 #Fortinet #FortiSIEM #Horizon3.ai #Infosec News #phMonitor #RCE #Root Access #SIEM Security
Penetration Testing Tools
Guarding the Guardian: Horizon3 Unmasks Root RCE in Fortinet FortiSIEM
Security researchers at Horizon3 have disseminated a meticulous deconstruction of a burgeoning critical vulnerability within Fortinet FortiSIEM—a widely
5 views
Daily Writeups
⤷ Title: Critical Code Red: Ransomware Paralyses Belgian Hospital AZ Monica
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:28:23 +0000
════════════════════════
⌗ Tags: #Malware #Antwerp #AZ Monica #Belgium #Cyberattack 2026 #data breach #Deurne #Healthcare Security #Infosec News #Patient Safety #ransomware
Penetration Testing Tools
Critical Code Red: Ransomware Paralyses Belgian Hospital AZ Monica
In the early hours of January 13, a prominent Belgian medical institution was abruptly rendered near-paralyzed. AZ Monica,
5 views
Daily Writeups
⤷ Title: Unmasking Gbyte: How One Hacker Exposed the Masters of 2FA-Bypassing Stalkerware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:26:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2FA Bypass #Data Breach 2026 #Gbyte Technology #Google Password Leak #iCloud Hack #Maia Arson Crimew #MSafely #Shenzhen #SpyX #stalkerware #Xiunde Cheng
Penetration Testing Tools
Unmasking Gbyte: How One Hacker Exposed the Masters of 2FA-Bypassing Stalkerware
Investigative journalist Maia Arson Crimew disclosed in a recent blog post that in February 2024, she received a
5 views
Daily Writeups
⤷ Title: Microsoft’s 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:24:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #CVE_2026_20805 #cybersecurity #Infosec News #LSASS #Microsoft #Office 2026 #Patch Tuesday #RCE #Secure Boot #Windows 11 #zero_day
Penetration Testing Tools
Microsoft's 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws
Microsoft has inaugurated its first Patch Tuesday of 2026, disseminating a comprehensive suite of mandatory security remediations for
5 views
Daily Writeups
⤷ Title: Digital Tanks: Poland Repels “Most Powerful” Cyber Attack on Energy Grid
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:22:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Tech News #Blackout #cyberattack #Energy Security #Hybrid Warfare #Krzysztof Gawkowski #Miłosz Motyka #Poland #Renewable Energy #Russian Sabotage
Penetration Testing Tools
Digital Tanks: Poland Repels "Most Powerful" Cyber Attack on Energy Grid
In the waning days of December, the Polish power grid was besieged by the most extensive cyber offensive
6 views
Daily Writeups
⤷ Title: Blinding ASLR: New Windows Zero-Day Exploited to Leak Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:18:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #ALPC #ASLR Bypass #CISA #CVE_2026_20805 #Cyber Security News #DWM #Memory Leak #Microsoft Security #Patch Tuesday 2026 #Windows Zero_Day
Penetration Testing Tools
Blinding ASLR: New Windows Zero-Day Exploited to Leak Memory
While administrators are merely commencing the deployment of January’s Windows updates, a nascent vulnerability is already being weaponized
6 views
Daily Writeups
⤷ Title: The Source Code Standoff: India’s New Security Rules Alarm Apple and Samsung
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:17:22 +0000
════════════════════════
⌗ Tags: #Information Security #Apple #Data Privacy 2026 #India #MeitY #Mobile Infrastructure #Narendra Modi #Samsung #Smartphone Security #source code #Tech Regulation
Penetration Testing Tools
The Source Code Standoff: India’s New Security Rules Alarm Apple and Samsung
A formidable confrontation is brewing in India between the state and preeminent smartphone manufacturers. The nation’s authorities are
6 views
Daily Writeups
⤷ Title: The Two-Year Heist: Stealthy Magecart Network Exposed Blinding 6 Payment Giants
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:13:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #[suspicious link removed] #American Express #Credit Card Skimming #Cybersecurity 2026 #Magecart #Mastercard #Silent Push #Stripe Spoofing #WordPress Security #WorkTitans B.V.
Penetration Testing Tools
The Two-Year Heist: Stealthy Magecart Network Exposed Blinding 6 Payment Giants
A clandestine data exfiltration campaign, designed to intercept credit card credentials from digital payment gateways, operated surreptitiously for
7 views
Daily Writeups
⤷ Title: The Surveillance Standoff: Hackers vs. ICE’s Multi-Billion Dollar Watch
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:12:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ALPR #Benn Jordan #Counter_Surveillance #DeFlock #EFF #Flock Safety #ICE #ICEBlock #Joshua Aaron #Kristi Noem #Pam Bondi #Privacy 2026 #Surveillance
Penetration Testing Tools
The Surveillance Standoff: Hackers vs. ICE’s Multi-Billion Dollar Watch
U.S. Immigration and Customs Enforcement (ICE) has long been distinguished by its multibillion-dollar budget dedicated to surveillance technologies.
6 views
Daily Writeups
⤷ Title: Shadows in the RAM: The SHADOW#REACTOR Campaign Unleashes Remcos RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:09:03 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reactor #Cyber Security #Fileless Attack #LOLBins #Malware 2026 #MSBuild #PowerShell #Remcos RAT #Securonix #SHADOW#REACTOR #threat intelligence
Penetration Testing Tools
Shadows in the RAM: The SHADOW#REACTOR Campaign Unleashes Remcos RAT
Adversaries have orchestrated a sophisticated campaign utilizing a multi-stage infection vector to deploy the Remcos RAT, a remote
6 views
Daily Writeups
⤷ Title: How I Found a P2 Broken Access Control Bug via a Tokenized URL
════════════════════════
𐀪 Author: Sivasankar Das
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 11:57:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #web_security #cybersecurity #broken_access_control
Medium
How I Found a P2 Broken Access Control Bug via a Tokenized URL
First Valid Bug Finding of 2026
6 views
Daily Writeups
⤷ Title: Technical Whitepaper: The EIN Framework
════════════════════════
𐀪 Author: Zeyd Aar Team Algo
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 10:05:06 GMT
════════════════════════
⌗ Tags: #application_security #zero_trust #software_architecture #google_vrp #cybersecurity
Medium
Technical Whitepaper: The EIN Framework
Title: Eliminating Client-Side Code Execution via Execution Isolation Nexus (EIN)
6 views
Daily Writeups
⤷ Title: Signal Jamming: The hack that is illegal in most countries
════════════════════════
𐀪 Author: T-Jay Bautista
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 11:02:56 GMT
════════════════════════
⌗ Tags: #pentesting #hacking #radio #hacker #hardware
Medium
Signal Jamming: The hack that is illegal in most countries
In the rapidly evolving landscape of wireless technology, the security of our everyday devices — from smart doorbells to cellular networks…
7 views
Daily Writeups
⤷ Title: Breaching the UAE: Real-World Penetration Testing Against Modern Hackers
════════════════════════
𐀪 Author: Clouds Dubai
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 10:43:10 GMT
════════════════════════
⌗ Tags: #uae #vapt #penetration_testing
Medium
Breaching the UAE: Real-World Penetration Testing Against Modern Hackers
Thinking Like the Enemy: The Truth About Penetration Testing UAE
7 views
Daily Writeups
⤷ Title: Search HTB: A Complete Walkthrough
════════════════════════
𐀪 Author: Legenddhruv
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 10:13:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #pentesting #active_directory #htb_walkthrough
Medium
Search HTB: A Complete Walkthrough
Mastering Active Directory Exploitation Through Methodical Persistence
11 views
Daily Writeups
⤷ Title: Responding to Network Security Incidents: A Beginner-Friendly Guide
════════════════════════
𐀪 Author: Nisa
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 11:46:13 GMT
════════════════════════
⌗ Tags: #information_security #ethical_hacking #network_security #cybersecurity #incident_response
Medium
🔐 Responding to Network Security Incidents: A Beginner-Friendly Guide
🚨 Introduction
13 views
Daily Writeups
⤷ Title: Networking Concepts You Must Know to Learn Cybersecurity
════════════════════════
𐀪 Author: Shalu
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 10:51:00 GMT
════════════════════════
⌗ Tags: #technology #ethical_hacking #network_security #networking #cybersecurity
Medium
Networking Concepts You Must Know to Learn Cybersecurity
Why networking is the foundation of ethical hacking, SOC, and cyber defense
18 views
Daily Writeups
⤷ Title: SQL Injection UNION Attack: Retrieving Multiple Values in a Single Column (Portswigger Lab)
════════════════════════
𐀪 Author: Rachael Muga
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 10:55:48 GMT
════════════════════════
⌗ Tags: #portswigger #web_security #sql #sql_injection #portswigger_lab
Medium
SQL Injection UNION Attack: Retrieving Multiple Values in a Single Column (Portswigger Lab)
Using String Concatenation to Exfiltrate Multiple Columns via UNION Injection
20 views