Posts 2026 07 15 Daily Hunt Feed - 2026-07-15
Post
Cancel

Daily Hunt Feed - 2026-07-15

Fullstackreverser Jul 15 2026-07-15T09:51:41+09:00
5 min

Threat Hunt Feed (2026-07-15)

Hacker News: Best

  • Telegram’s t.me domain has been suspended — Mon, 13 Jul 2026 19:52:25 +0000
    • Matched TTPs: WHOIS (T1596.002), Hardware (T1592.001), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Tool (T1588.002), At (T1053.002)

Krebs on Security

  • Microsoft Patches a Record 570 Security Flaws — Tue, 14 Jul 2026 19:22:42 +0000
    • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Proxy (T1090), Brute Force (T1110), Software (T1592.002), Exploits (T1588.005), At (T1053.002)

BleepingComputer

  • SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now — Tue, 14 Jul 2026 17:23:24 -0400
    • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002)
  • Nearly 300 GitHub repos pose as legit software to push malware — Tue, 14 Jul 2026 15:15:17 -0400
    • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), DLL (T1574.001), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Impersonation (T1656), Windows Credential Manager (T1555.004), At (T1053.002)
  • Microsoft releases Windows 10 KB5099539 extended security update — Tue, 14 Jul 2026 14:49:28 -0400
    • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002)
  • Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days — Tue, 14 Jul 2026 14:01:36 -0400
    • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), DNS (T1071.004), DNS Server (T1584.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Server (T1584.004), Proxy (T1090), PowerShell (T1059.001), Tool (T1588.002), Lua (T1059.011), Firmware (T1592.003), Software (T1592.002), Remote Desktop Protocol (T1021.001), Compression (T1027.015)
  • Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown — Tue, 14 Jul 2026 12:08:47 -0400
    • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), At (T1053.002)
  • LastPass, Bitwarden users targeted with fake security alerts — Tue, 14 Jul 2026 11:31:52 -0400
    • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
  • You Don’t Have to Run an Exploit to Know If You’re Vulnerable — Tue, 14 Jul 2026 10:00:10 -0400
    • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Windows Service (T1543.003), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), At (T1053.002)
  • New phishing kits target Microsoft 365 accounts, evade MFA — Tue, 14 Jul 2026 08:49:00 -0400
    • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Email Addresses (T1589.002), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
  • SAP warns of critical flaws in NetWeaver and Commerce Cloud — Tue, 14 Jul 2026 07:42:21 -0400
    • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
  • US sanctions VPN, malware providers for enabling ransomware attacks — Tue, 14 Jul 2026 05:40:13 -0400
    • Matched TTPs: Acquire Infrastructure (T1583), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Software (T1592.002), At (T1053.002)

Darkreading

The Hacker News

  • SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data — Tue, 14 Jul 2026 23:47:57 +0530
    • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
  • Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads — Tue, 14 Jul 2026 22:57:23 +0530
    • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
  • LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts — Tue, 14 Jul 2026 22:22:37 +0530
    • Matched TTPs: JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), PowerShell (T1059.001), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
  • 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot — Tue, 14 Jul 2026 18:16:18 +0530
    • Matched TTPs: Bootkit (T1542.003), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Proxy (T1090), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
  • Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks — Tue, 14 Jul 2026 17:25:00 +0530
    • Matched TTPs: Malware (T1588.001), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
  • OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials — Tue, 14 Jul 2026 16:51:35 +0530
    • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Password Spraying (T1110.003), Proxy (T1090), Cloud Services (T1021.007), Web Services (T1584.006), Tool (T1588.002), Brute Force (T1110), Valid Accounts (T1078), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Conditional Access Policies (T1556.009), At (T1053.002)
  • U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support — Tue, 14 Jul 2026 13:32:33 +0530
    • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Virtual Private Server (T1583.003), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
  • 148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet — Tue, 14 Jul 2026 12:38:36 +0530
    • Matched TTPs: IP Addresses (T1590.005), JavaScript (T1059.007), DNS (T1071.004), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), CDNs (T1596.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
security, hunt
threat-hunting ttp mitre-attack
This post is licensed under CC BY 4.0 by the author.
Contents

Daily Security Feed - 2026-07-14

Daily Security Feed - 2026-07-16

Comments powered by Disqus.