Daily Hunt Feed - 2026-07-17

Threat Hunt Feed (2026-07-17)

Hacker News: Best

• At least 105 past YC founders have worked at OpenAI and Anthropic — Thu, 16 Jul 2026 08:03:35 +0000
  • Matched TTPs: Hardware (T1592.001), At (T1053.002)
• OpenAI loses trademark dispute at EU court — Wed, 15 Jul 2026 14:32:36 +0000
  • Matched TTPs: Artificial Intelligence (T1588.007), Software (T1592.002), At (T1053.002)

BleepingComputer

• New ClickLock macOS malware traps users into revealing login password — Thu, 16 Jul 2026 17:52:54 -0400
  • Matched TTPs: Keychain (T1555.001), Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)
• New OkoBot framework deploys 20 payloads to steal data, crypto — Thu, 16 Jul 2026 15:09:35 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), SSH (T1021.004), Password Managers (T1555.005), Domains (T1584.001), Server (T1584.004), PowerShell (T1059.001), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• AI Agents Broke the Security Playbook. Here’s What Replaces It. — Thu, 16 Jul 2026 10:00:10 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), Acquire Access (T1650), At (T1053.002)
• Russian hackers trojanize WebEx, Zoom apps to push Starland malware — Thu, 16 Jul 2026 06:19:34 -0400
  • Matched TTPs: Screen Capture (T1113), Keylogging (T1056.001), Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), PowerShell (T1059.001), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)

Darkreading

• Agentic AI Is Untamable: Ask the Right Security Questions — Thu, 16 Jul 2026 20:57:47 GMT
  • Matched TTPs: Artificial Intelligence (T1588.007), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• 1M+ Emails Use Hidden Text to Dupe AI Security Filters — Thu, 16 Jul 2026 19:41:31 GMT
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Phishing (T1566), Impersonation (T1656), At (T1053.002)

The Hacker News

• Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack — Thu, 16 Jul 2026 22:39:25 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Email Addresses (T1589.002), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer — Thu, 16 Jul 2026 19:03:25 +0530
  • Matched TTPs: Malware (T1588.001), Local Account (T1136.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands — Thu, 16 Jul 2026 18:20:13 +0530
  • Matched TTPs: Rundll32 (T1218.011), JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), PowerShell (T1059.001), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password — Thu, 16 Jul 2026 18:03:42 +0530
  • Matched TTPs: Keychain (T1555.001), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), AppleScript (T1059.002), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), Launchctl (T1569.001), Shell History (T1552.003), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• 20+ Hijacked Government Websites Became
an Attack Channel — Thu, 16 Jul 2026 17:28:00 +0530
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Email Accounts (T1585.002), Domains (T1584.001), Escape to Host (T1611), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor — Thu, 16 Jul 2026 16:47:23 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Rootkit (T1014), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• AI Can Find Bugs, But Human Knowledge Still Proves Them — Thu, 16 Jul 2026 15:40:00 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol — Thu, 16 Jul 2026 14:12:31 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Escape to Host (T1611), Server (T1584.004), Proxy (T1090), Web Services (T1584.006), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

보안뉴스 > SECURITY

• [카드뉴스] “로봇청소기가 해커의 무기로?”… 패치 없는 저가형 IoT 기기가 부른 ‘봇넷’의 경고 — Fri, 17 Jul 2026 08:26:00 +0900
  • Matched TTPs: Botnet (T1584.005)