Daily Hunt Feed - 2026-08-06

Threat Hunt Feed (2026-08-06)

Hacker News: Best

• Demis Hassabis is moving from CEO to Chairman at Google DeepMind — Wed, 05 Aug 2026 16:05:37 +0000
  • Matched TTPs: At (T1053.002)
• Changes at Google DeepMind: Demis Hassabis from CEO to Chair, Jeff Dean departs — Wed, 05 Aug 2026 16:05:31 +0000
  • Matched TTPs: At (T1053.002)
• Eight Myths on Software Engineering and GenAI — Tue, 04 Aug 2026 23:50:52 +0000
  • Matched TTPs: Software (T1592.002)

BleepingComputer

• Ransom Cartel ransomware creator sentenced to 16 years in prison — Wed, 05 Aug 2026 19:00:50 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Canadian pleads guilty to Snowflake cloud data-theft attacks — Wed, 05 Aug 2026 17:53:26 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Exploits (T1588.005), At (T1053.002)
• COLDCARD security audit phishing attack installs remote access tool — Wed, 05 Aug 2026 13:49:41 -0400
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Firmware (T1592.003), Software (T1592.002)
• CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws — Wed, 05 Aug 2026 11:51:33 -0400
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), At (T1053.002)
• Google Blogger locks hundreds of blogs in malware false positive — Wed, 05 Aug 2026 10:59:29 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• How AI-powered phishing killed blocklists for good — Wed, 05 Aug 2026 10:01:11 -0400
  • Matched TTPs: Adversary-in-the-Middle (T1557), Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

Darkreading

• AI Sends Global Crime Syndicates Into Fraud Nirvana — Wed, 05 Aug 2026 23:35:28 GMT
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Flaws in Google APK for Python Unlock Agent-to-Agent Attack — Wed, 05 Aug 2026 18:03:31 GMT
  • Matched TTPs: Vulnerabilities (T1588.006), Supply Chain Compromise (T1195), Software (T1592.002), Credentials (T1589.001), Impersonation (T1656), Python (T1059.006), At (T1053.002)

The Hacker News

• Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures — Thu, 06 Aug 2026 00:14:31 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes — Thu, 06 Aug 2026 00:03:47 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Impersonation (T1656), At (T1053.002)
• Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt — Wed, 05 Aug 2026 21:06:03 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports — Wed, 05 Aug 2026 20:44:05 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), DNS (T1071.004), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug — Wed, 05 Aug 2026 19:57:30 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain — Wed, 05 Aug 2026 19:11:27 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002), Dead Drop Resolver (T1102.001)
• Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk — Wed, 05 Aug 2026 17:13:19 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Email Accounts (T1585.002), Domains (T1584.001), Cloud Services (T1021.007), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup — Wed, 05 Aug 2026 16:34:23 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Leaked n8n API Tokens Exposed Live Instances to Credential Theft — Wed, 05 Aug 2026 16:05:29 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), SSH (T1021.004), Email Addresses (T1589.002), Code Repositories (T1213.003), Cloud Services (T1021.007), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data — Wed, 05 Aug 2026 14:53:03 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), DNS (T1071.004), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Evil Twin (T1557.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself — Wed, 05 Aug 2026 13:23:50 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), DNS (T1071.004), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited — Wed, 05 Aug 2026 13:10:39 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer — Wed, 05 Aug 2026 11:17:19 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)