Daily Hunt Feed - 2026-06-20

Threat Hunt Feed (2026-06-20)

Hacker News: Best

• A new bill takes aim at government pressure to silence lawful online speech — Fri, 19 Jun 2026 17:34:28 +0000
  • Matched TTPs: JavaScript (T1059.007), Social Media (T1593.001), At (T1053.002)

BleepingComputer

• Texas govt data breach exposes over 3 million driver’s licenses — Fri, 19 Jun 2026 12:12:41 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Email Addresses (T1589.002), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Impersonation (T1656), At (T1053.002)
• Webinar: How attackers bypass MFA and how defenders can respond — Fri, 19 Jun 2026 08:12:20 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• NY man charged after harassing college student with AI-generated nudes — Fri, 19 Jun 2026 04:44:08 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Social Media Accounts (T1585.001), Email Accounts (T1585.002), Email Account (T1087.003), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001)
• CISA warns Fortinet users to secure devices after FortiBleed leak — Fri, 19 Jun 2026 02:47:55 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Email Addresses (T1589.002), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

The Hacker News

• Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain — Sat, 20 Jun 2026 00:07:41 +0530
  • Matched TTPs: Rootkit (T1014), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution — Fri, 19 Jun 2026 21:00:47 +0530
  • Matched TTPs: Rootkit (T1014), JavaScript (T1059.007), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices — Fri, 19 Jun 2026 19:30:21 +0530
  • Matched TTPs: Rootkit (T1014), Vulnerabilities (T1588.006), Server (T1584.004), Default Accounts (T1078.001), Tool (T1588.002), Phishing (T1566), Brute Force (T1110), Credential Stuffing (T1110.004), Multi-Factor Authentication (T1556.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Forget Data Leakage: Shadow AI’s Real Threat Is Access Control — Fri, 19 Jun 2026 16:00:00 +0530
  • Matched TTPs: Rootkit (T1014), Databases (T1213.006), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Cloud Accounts (T1078.004), Domains (T1584.001), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data — Fri, 19 Jun 2026 14:33:57 +0530
  • Matched TTPs: Rootkit (T1014), Vulnerabilities (T1588.006), Email Addresses (T1589.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)