Daily Hunt Feed - 2026-07-01

Threat Hunt Feed (2026-07-01)

Hacker News: Best

• Claude Code is steganographically marking requests — Tue, 30 Jun 2026 15:44:24 +0000
  • Matched TTPs: Steganography (T1001.002)
• The labor share of income in the US is at its lowest post-war level — Tue, 30 Jun 2026 15:35:04 +0000
  • Matched TTPs: At (T1053.002)

BleepingComputer

• Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price — Tue, 30 Jun 2026 19:13:07 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• Malicious PyPI packages give hackers control of Telegram bot servers — Tue, 30 Jun 2026 17:02:55 -0400
  • Matched TTPs: Malware (T1588.001), Malicious File (T1204.002), Hardware (T1592.001), Databases (T1213.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), Exclusive Control (T1668), At (T1053.002)
• Fake Perplexity extension on Chrome Web Store tracked searches — Tue, 30 Jun 2026 11:46:19 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Masquerading (T1036), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

The Hacker News

• Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data — Tue, 30 Jun 2026 23:16:07 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS — Tue, 30 Jun 2026 23:15:25 +0530
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints — Tue, 30 Jun 2026 21:17:20 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Cron (T1053.003), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• 282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study — Tue, 30 Jun 2026 19:19:34 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• What the Numbers Say About FIFA 2026 Cyber Risk — Tue, 30 Jun 2026 17:00:00 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Impersonation (T1656), At (T1053.002)
• Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer — Tue, 30 Jun 2026 16:48:47 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Code Repositories (T1213.003), Proxy (T1090), Client Configurations (T1592.004), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials — Tue, 30 Jun 2026 14:07:19 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs — Mon, 29 Jun 2026 21:00:00 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)