Daily Hunt Feed - 2026-06-24

Threat Hunt Feed (2026-06-24)

Hacker News: Best

• Show HN: TikZ Editor – WYSIWYG editor for figures in LaTeX — Tue, 23 Jun 2026 14:24:21 +0000
  • Matched TTPs: Software (T1592.002), At (T1053.002)
• Nearly half of LG smart TV apps contain residential proxy SDKs — Mon, 22 Jun 2026 20:48:30 +0000
  • Matched TTPs: Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Software (T1592.002), Social Media (T1593.001), At (T1053.002)

BleepingComputer

• Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks — Tue, 23 Jun 2026 17:48:32 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Healthtech firm Xolis suffers data breach impacting 1.4 million people — Tue, 23 Jun 2026 15:59:12 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001)
• New macOS ClickFix attack silently mounts DMGs to push infostealer — Tue, 23 Jun 2026 14:30:16 -0400
  • Matched TTPs: Keychain (T1555.001), Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Botnet (T1584.005), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• The Exploit Doesn’t Exist. You Can Still Prove It Works Against You — Tue, 23 Jun 2026 10:01:11 -0400
  • Matched TTPs: OS Credential Dumping (T1003), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), System Information Discovery (T1082), Process Injection (T1055), Tool (T1588.002), Exploitation for Privilege Escalation (T1068), Software (T1592.002), Credentials (T1589.001), MSBuild (T1127.001), Access Token Manipulation (T1134), Ingress Tool Transfer (T1105), At (T1053.002), Trusted Developer Utilities Proxy Execution (T1127)
• Webinar: Why email security teams are drowning in alerts — Tue, 23 Jun 2026 08:12:20 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

Darkreading

• ‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows — Tue, 23 Jun 2026 19:16:42 GMT
  • Matched TTPs: Vulnerabilities (T1588.006), Supply Chain Compromise (T1195), Code Repositories (T1213.003), Software (T1592.002), Impersonation (T1656), Python (T1059.006), At (T1053.002)
• FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist — Tue, 23 Jun 2026 12:34:54 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Password Spraying (T1110.003), Tool (T1588.002), Credentials (T1589.001), Impersonation (T1656), At (T1053.002)
• DifyTap Bugs Let Attackers ‘Wiretap’ AI Chat Histories — Mon, 22 Jun 2026 21:14:11 GMT
  • Matched TTPs: Vulnerabilities (T1588.006), At (T1053.002)

The Hacker News

• GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns — Tue, 23 Jun 2026 19:52:03 +0530
  • Matched TTPs: Rootkit (T1014), Vulnerabilities (T1588.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Agentic AI: The Weapon That No Longer Needs a Warrior — Tue, 23 Jun 2026 17:00:00 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Rootkit (T1014), Malware (T1588.001), Vulnerabilities (T1588.006), Trap (T1546.005), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool — Tue, 23 Jun 2026 11:08:40 +0530
  • Matched TTPs: Rootkit (T1014), Malware (T1588.001), Vulnerabilities (T1588.006), Masquerading (T1036), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Visual Basic (T1059.005), At (T1053.002)
• OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws — Tue, 23 Jun 2026 09:26:58 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Rootkit (T1014), JavaScript (T1059.007), Vulnerabilities (T1588.006), Server (T1584.004), Proxy (T1090), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Python (T1059.006), At (T1053.002)