Daily Hunt Feed - 2026-06-25

Threat Hunt Feed (2026-06-25)

Hacker News: Best

• We’re making Bunny DNS free — Wed, 24 Jun 2026 08:50:41 +0000
  • Matched TTPs: JavaScript (T1059.007), DNS (T1071.004), Hardware (T1592.001), Databases (T1213.006), Domains (T1584.001), Server (T1584.004), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)

BleepingComputer

• Malicious Edge extension abuses Native Messaging as bridge to malware — Wed, 24 Jun 2026 16:58:22 -0400
  • Matched TTPs: Scheduled Task (T1053.005), Malware (T1588.001), Hardware (T1592.001), Browser Extensions (T1176.001), Botnet (T1584.005), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Amadey, StealC malware operations disrupted in Operation Endgame action — Wed, 24 Jun 2026 10:35:11 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Domains (T1584.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001)
• Securing the service desk: Why social engineering attacks keep succeeding — Wed, 24 Jun 2026 10:02:12 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Employee Names (T1589.003), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), Impersonation (T1656), Email Spoofing (T1672)

Darkreading

• Apple’s MacOS Gap Lets Users Disable Security Tools — Wed, 24 Jun 2026 12:00:00 GMT
  • Matched TTPs: Vulnerabilities (T1588.006), XPC Services (T1559.003), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)

The Hacker News

• Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered — Wed, 24 Jun 2026 21:29:50 +0530
  • Matched TTPs: VNC (T1021.005), IP Addresses (T1590.005), Rootkit (T1014), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Control Panel (T1218.002), Web Shell (T1505.003), Server (T1584.004), Proxy (T1090), PowerShell (T1059.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks — Wed, 24 Jun 2026 18:18:11 +0530
  • Matched TTPs: Rootkit (T1014), Vulnerabilities (T1588.006), Supply Chain Compromise (T1195), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Dawn of the Apex Agentic Adversary — Wed, 24 Jun 2026 17:00:00 +0530
  • Matched TTPs: Rootkit (T1014), Vulnerabilities (T1588.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering — Wed, 24 Jun 2026 14:25:12 +0530
  • Matched TTPs: Rootkit (T1014), Vulnerabilities (T1588.006), Cloud Account (T1136.003), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Impersonation (T1656), At (T1053.002)