Daily Hunt Feed - 2026-08-07

Threat Hunt Feed (2026-08-07)

Hacker News: Best

• Show HN: I spent 2 years designing a mechanical Magic Keyboard — Thu, 06 Aug 2026 14:26:14 +0000
  • Matched TTPs: Hardware (T1592.001), Firmware (T1592.003), Software (T1592.002), At (T1053.002)

Krebs on Security

• Canadian Man Pleads Guilty in Snowflake Extortions — Thu, 06 Aug 2026 17:00:56 +0000
  • Matched TTPs: Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

BleepingComputer

• ClickFix attack pushes macOS infostealer for crypto theft attacks — Thu, 06 Aug 2026 18:37:17 -0400
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), Keychain (T1555.001), Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)
• Swiss government SharePoint breach compromised 200 accounts — Thu, 06 Aug 2026 14:14:19 -0400
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

Darkreading

• Researcher Claims Control of ChatGPT Secure Sandbox — Thu, 06 Aug 2026 20:38:51 GMT
  • Matched TTPs: Vulnerabilities (T1588.006), Server (T1584.004), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)

The Hacker News

• Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs — Thu, 06 Aug 2026 22:43:15 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs — Thu, 06 Aug 2026 21:47:13 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories — Thu, 06 Aug 2026 20:54:31 +0530
  • Matched TTPs: Scheduled Task (T1053.005), Serverless (T1584.007), Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Social Media Accounts (T1585.001), Vulnerabilities (T1588.006), SSH (T1021.004), Cloud Accounts (T1078.004), Email Accounts (T1585.002), Domains (T1584.001), Server (T1584.004), Search Engines (T1593.002), Proxy (T1090), Cloud Services (T1021.007), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Credential Stuffing (T1110.004), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), ClickOnce (T1127.002), Drive-by Compromise (T1189), At (T1053.002)
• CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps — Thu, 06 Aug 2026 17:19:48 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Private Keys (T1552.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses — Thu, 06 Aug 2026 17:03:08 +0530
  • Matched TTPs: Sharepoint (T1213.002), DNS (T1071.004), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Email Addresses (T1589.002), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• AI Recommendation Poisoning: How “Ask AI” Buttons Silently Alter LLM Memory — Thu, 06 Aug 2026 17:00:00 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model — Thu, 06 Aug 2026 14:27:30 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Cloud API (T1059.009), Server (T1584.004), Web Services (T1584.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells — Thu, 06 Aug 2026 13:35:22 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Firmware (T1592.003), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service — Thu, 06 Aug 2026 12:49:54 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild — Thu, 06 Aug 2026 12:21:43 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People — Thu, 06 Aug 2026 11:34:30 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

데일리시큐 - 최근인기기사

• [블랙햇 USA 2026] “AI 에이전트가 새로운 내부자 위협으로 부상” — 2026-08-06 05:19:30
  • Matched TTPs: At (T1053.002)

Threat Hunt Feed (2026-08-07)

Hacker News: Best

• Launch HN: ProvenMetal (YC S26) delivers circuit boards in days instead of weeks — Thu, 06 Aug 2026 15:59:15 +0000
  • Matched TTPs: Hardware (T1592.001), Software (T1592.002), At (T1053.002)
• Software development with AI is starting to feel like cooking steak — Thu, 06 Aug 2026 15:30:48 +0000
  • Matched TTPs: Software (T1592.002), At (T1053.002)

BleepingComputer

• Unlimited Technology Systems breach impacts 3.8 million people — Fri, 07 Aug 2026 15:30:41 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002)
• Real emails, hijacked payments: Two H1 2026 attack chains — Fri, 07 Aug 2026 10:00:10 -0400
  • Matched TTPs: JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Proxy (T1090), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• North Carolina Ports confirms cyberattack disrupting operations — Fri, 07 Aug 2026 09:34:40 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)

The Hacker News

• Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer — Sat, 08 Aug 2026 00:18:17 +0530
  • Matched TTPs: Scheduled Task (T1053.005), Sharepoint (T1213.002), JavaScript (T1059.007), DNS (T1071.004), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Password Managers (T1555.005), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Python (T1059.006), At (T1053.002)
• ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets — Fri, 07 Aug 2026 23:59:08 +0530
  • Matched TTPs: Rundll32 (T1218.011), Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Keychain (T1555.001), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Domains (T1584.001), Server (T1584.004), PowerShell (T1059.001), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Steganography (T1001.002), SEO Poisoning (T1608.006), At (T1053.002)
• UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data — Fri, 07 Aug 2026 23:46:13 +0530
  • Matched TTPs: Adversary-in-the-Middle (T1557), Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Email Accounts (T1585.002), Domains (T1584.001), PowerShell (T1059.001), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP — Fri, 07 Aug 2026 18:26:23 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables — Fri, 07 Aug 2026 16:28:38 +0530
  • Matched TTPs: Sharepoint (T1213.002), DNS (T1071.004), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails — Fri, 07 Aug 2026 16:08:27 +0530
  • Matched TTPs: Adversary-in-the-Middle (T1557), Sharepoint (T1213.002), IP Addresses (T1590.005), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Proxy (T1090), Device Registration (T1098.005), Account Manipulation (T1098), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day — Fri, 07 Aug 2026 15:39:54 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access — Fri, 07 Aug 2026 14:22:11 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Cloud Services (T1021.007), PowerShell (T1059.001), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Conditional Access Policies (T1556.009), At (T1053.002)
• Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets — Fri, 07 Aug 2026 13:48:35 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign — Fri, 07 Aug 2026 12:20:05 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malvertising (T1583.008), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs — Thu, 06 Aug 2026 22:43:15 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)