Daily Hunt Feed - 2026-07-23

Threat Hunt Feed (2026-07-23)

Hacker News: Best

• Show HN: Bento - An entire PowerPoint in one HTML file (edit+view+data+collab) — Wed, 22 Jul 2026 15:19:23 +0000
  • Matched TTPs: Tool (T1588.002), At (T1053.002)

Krebs on Security

• LG to Ban Residential Proxies from Smart TV Apps — Wed, 22 Jul 2026 01:10:38 +0000
  • Matched TTPs: Malware (T1588.001), Botnet (T1584.005), Domains (T1584.001), Proxy (T1090), Software (T1592.002), At (T1053.002)

BleepingComputer

• New InfraTrust report reveals infrastructure flaws admins should patch first — Wed, 22 Jul 2026 10:15:00 -0400
  • Matched TTPs: VNC (T1021.005), Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), File Deletion (T1070.004), Malicious Link (T1204.001), At (T1053.002)
• Chick-fil-A discloses data breach after credential stuffing attacks — Wed, 22 Jul 2026 02:40:29 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Email Addresses (T1589.002), Tool (T1588.002), Credential Stuffing (T1110.004), Software (T1592.002), Credentials (T1589.001)
• OpenAI says its AI models hacked Hugging Face during testing — Wed, 22 Jul 2026 01:19:20 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001)

Darkreading

• Attackers Are Learning to Live Off the AI Toolchain — Wed, 22 Jul 2026 21:29:01 GMT
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), PowerShell (T1059.001), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)
• Fake Bahrain Alert App Deploys Android Surveillance Malware — Wed, 22 Jul 2026 19:42:42 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002), Messaging Applications (T1213.005)

The Hacker News

• GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier — Thu, 23 Jul 2026 00:07:42 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication — Wed, 22 Jul 2026 18:06:36 +0530
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• The Fastest Path to AI Adoption Runs Through Security — Wed, 22 Jul 2026 17:28:00 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark — Wed, 22 Jul 2026 17:00:02 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Why Modern SOCs Need Multi-Layered Detections — Wed, 22 Jul 2026 16:55:35 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA — Wed, 22 Jul 2026 12:08:45 +0530
  • Matched TTPs: Adversary-in-the-Middle (T1557), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library — Wed, 22 Jul 2026 11:30:06 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Masquerading (T1036), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents — Wed, 22 Jul 2026 10:27:52 +0530
  • Matched TTPs: Databases (T1213.006), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

보안뉴스 > SECURITY

• 케냐 대통령 공식 웹사이트 해킹 당해… 비트코인 몸값 요구 — Thu, 23 Jul 2026 09:18:00 +0900
  • Matched TTPs: Defacement (T1491)