Daily Hunt Feed - 2026-07-11

Threat Hunt Feed (2026-07-11)

Hacker News: Best

• No leap second will be introduced at the end of December 2026 — Thu, 09 Jul 2026 14:16:34 +0000
  • Matched TTPs: At (T1053.002)

BleepingComputer

• New U-Boot flaws could enable stealthy firmware attacks — Fri, 10 Jul 2026 17:59:02 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Bootkit (T1542.003), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Firmware (T1592.003), Software (T1592.002), At (T1053.002)
• Police suspects Dutch hackers were involved in Odido breach — Fri, 10 Jul 2026 12:37:01 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Firmware (T1592.003), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Progress urges ShareFile admins to shut down servers over “credible” threat — Fri, 10 Jul 2026 12:26:10 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), At (T1053.002)

Darkreading

• Jen Ellis: Connecting Cyber Community With Political Machinery — Fri, 10 Jul 2026 19:08:04 GMT
  • Matched TTPs: Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Fresh ATM Crypto Software Bugs: Jackpot or Bust? — Fri, 10 Jul 2026 14:00:00 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• More Countries Jump on the Social Media ‘Ban Wagon’ — Fri, 10 Jul 2026 13:50:24 GMT
  • Matched TTPs: Artificial Intelligence (T1588.007), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Social Media (T1593.001), At (T1053.002)
• As Global Conflicts Go Digital, Businesses Need Wartime Game Plans — Thu, 09 Jul 2026 14:31:20 GMT
  • Matched TTPs: Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Software (T1592.002), Social Media (T1593.001), At (T1053.002)

The Hacker News

• URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat — Fri, 10 Jul 2026 22:00:00 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages — Fri, 10 Jul 2026 21:59:00 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Private Keys (T1552.004), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot — Fri, 10 Jul 2026 21:27:14 +0530
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Malicious Image (T1204.003), Firmware (T1592.003), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Laser Attack Resets Tangem Wallet Passwords on Cards That Can’t Be Patched — Fri, 10 Jul 2026 20:21:49 +0530
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Firmware (T1592.003), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws — Fri, 10 Jul 2026 19:49:50 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Bind Mounts (T1564.013), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic — Fri, 10 Jul 2026 18:45:23 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), SEO Poisoning (T1608.006), At (T1053.002)
• Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers — Fri, 10 Jul 2026 17:17:43 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002), Compression (T1027.015)
• From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale — Fri, 10 Jul 2026 17:09:40 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites — Fri, 10 Jul 2026 17:00:02 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Domains (T1584.001), Private Keys (T1552.004), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Compute Hijacking (T1496.001), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking — Fri, 10 Jul 2026 16:26:23 +0530
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access — Fri, 10 Jul 2026 16:00:20 +0530
  • Matched TTPs: Adversary-in-the-Middle (T1557), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Compute Hijacking (T1496.001), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets — Fri, 10 Jul 2026 14:30:05 +0530
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Private Keys (T1552.004), Trap (T1546.005), Proxy (T1090), Tool (T1588.002), Compute Hijacking (T1496.001), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

보안뉴스 > SECURITY

• [ISEC 2026 미리보기] 써트코리아, 디지서트의 ‘지능형 신뢰(Intelligent Trust)’ 플랫폼 DigiCert — Fri, 10 Jul 2026 14:15:00 +0900
  • Matched TTPs: DNS (T1071.004), Software (T1592.002)