Daily Hunt Feed - 2026-07-31

Threat Hunt Feed (2026-07-31)

Hacker News: Best

• Show HN: CheapFoodMap – A map of good meals under $10 — Wed, 29 Jul 2026 16:59:52 +0000
  • Matched TTPs: At (T1053.002)

BleepingComputer

• Claude uploaded malware to PyPI in Anthropic’s botched test — Thu, 30 Jul 2026 20:57:25 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Server (T1584.004), Cloud Account (T1136.003), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers — Thu, 30 Jul 2026 14:13:24 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• VMware fixes three critical flaws allowing auth bypass, VM escapes — Thu, 30 Jul 2026 14:00:51 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Google says AI helped Chrome fix 1,072 security bugs in two releases — Thu, 30 Jul 2026 13:00:00 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)
• After the Break-In: What Attackers Do Once They’re Already Inside — Thu, 30 Jul 2026 10:01:11 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Windows Service (T1543.003), Vulnerabilities (T1588.006), Botnet (T1584.005), Server (T1584.004), PowerShell (T1059.001), Tool (T1588.002), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

Darkreading

• AI Harnesses Burst With Potential Exploit Opps — Thu, 30 Jul 2026 19:40:40 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Python (T1059.006), At (T1053.002)
• SE Asian Cybercriminal Syndicates Become a Global Power — Thu, 30 Jul 2026 01:00:00 GMT
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Software (T1592.002), Python (T1059.006), At (T1053.002)
• Red Agents vs. Blue Agents: How to Make AI Better at Defense — Wed, 29 Jul 2026 19:46:20 GMT
  • Matched TTPs: Malvertising (T1583.008), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), At (T1053.002)

The Hacker News

• DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware — Thu, 30 Jul 2026 23:48:24 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories — Thu, 30 Jul 2026 20:55:57 +0530
  • Matched TTPs: Rundll32 (T1218.011), Pluggable Authentication Modules (T1556.003), Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), DNS (T1071.004), Network Devices (T1584.008), Malvertising (T1583.008), Keychain (T1555.001), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Botnet (T1584.005), AppleScript (T1059.002), Domains (T1584.001), Masquerading (T1036), Server (T1584.004), Proxy (T1090), Web Services (T1584.006), Trusted Relationship (T1199), Tool (T1588.002), Phishing (T1566), Credential Stuffing (T1110.004), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), MSBuild (T1127.001), Python (T1059.006), At (T1053.002)
• Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database — Thu, 30 Jul 2026 19:04:09 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts — Thu, 30 Jul 2026 16:03:15 +0530
  • Matched TTPs: Scheduled Task (T1053.005), Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Process Injection (T1055), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Remote Desktop Protocol (T1021.001), At (T1053.002)
• Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet — Thu, 30 Jul 2026 11:35:17 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Malicious File (T1204.002), Vulnerabilities (T1588.006), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data — Thu, 30 Jul 2026 10:38:39 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

데일리시큐 - 최근인기기사

• 체크포인트 “AI, 공격 지원 도구 넘어 자율형 사이버 공격 주체로 진화” — 2026-07-30 15:52:47
  • Matched TTPs: Software (T1592.002)