Daily Hunt Feed - 2026-08-01

Threat Hunt Feed (2026-08-01)

Hacker News: Best

• qm — Fri, 31 Jul 2026 18:04:58 +0000
  • Matched TTPs: Keychain (T1555.001), Databases (T1213.006), Vulnerabilities (T1588.006), Proxy (T1090), Cloud Account (T1136.003), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

BleepingComputer

• Arch Linux disables AUR package adoption to stop malware flood — Fri, 31 Jul 2026 17:38:08 -0400
  • Matched TTPs: Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Cron (T1053.003), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001)
• ESET tracks rise in malicious AI skills and adaptable malware — Fri, 31 Jul 2026 10:01:11 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Browser Extensions (T1176.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• Anthropic’s Claude breached 3 orgs, uploaded PyPI malware during tests — Thu, 30 Jul 2026 20:57:25 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Cloud Account (T1136.003), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)

The Hacker News

• HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm — Fri, 31 Jul 2026 22:09:31 +0530
  • Matched TTPs: Scheduled Task (T1053.005), Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Masquerading (T1036), Server (T1584.004), PowerShell (T1059.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Python (T1059.006), At (T1053.002)
• Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies — Fri, 31 Jul 2026 20:15:01 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Email Addresses (T1589.002), Proxy (T1090), Phishing (T1566), Firmware (T1592.003), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw — Fri, 31 Jul 2026 17:25:00 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Active Scanning (T1595), Phishing (T1566), Network Boundary Bridging (T1599), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 — Fri, 31 Jul 2026 16:54:59 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Proxy (T1090), Device Registration (T1098.005), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Conditional Access Policies (T1556.009), At (T1053.002), Compression (T1027.015)
• Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks — Fri, 31 Jul 2026 16:51:27 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Shell History (T1552.003), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations — Fri, 31 Jul 2026 12:11:44 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Cloud Account (T1136.003), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)

데일리시큐 - 최근인기기사

• 이스트시큐리티, AWS APN ‘셀렉트 티어’ 획득…클라우드-AI 보안 본격화 — 2026-07-31 14:17:57
  • Matched TTPs: Web Services (T1584.006)