Daily Hunt Feed - 2026-08-19

Threat Hunt Feed (2026-08-19)

BleepingComputer

• Password spraying attacks surge 155x as hackers exploit MFA gaps — Wed, 19 Aug 2026 10:00:10 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Password Spraying (T1110.003), Tool (T1588.002), Phishing (T1566), Brute Force (T1110), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), Impersonation (T1656), Conditional Access Policies (T1556.009), At (T1053.002)

Darkreading

• SilkParasite Threatens Central Asian Orgs With Flurry of RATs — Wed, 19 Aug 2026 16:58:23 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), At (T1053.002)

The Hacker News

• Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second — Thu, 20 Aug 2026 00:32:40 +0530
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Proxy (T1090), Confluence (T1213.001), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior — Wed, 19 Aug 2026 23:36:44 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Confluence (T1213.001), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs — Wed, 19 Aug 2026 18:42:17 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Confluence (T1213.001), Cloud Services (T1021.007), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P — Wed, 19 Aug 2026 17:04:28 +0530
  • Matched TTPs: IP Addresses (T1590.005), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Confluence (T1213.001), Shell History (T1552.003), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Phishing 3.0: The Fight Moves to Agent Versus Agent — Wed, 19 Aug 2026 17:00:00 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Code Repositories (T1213.003), Proxy (T1090), Confluence (T1213.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Impersonation (T1656), At (T1053.002)
• StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data — Wed, 19 Aug 2026 16:55:28 +0530
  • Matched TTPs: IP Addresses (T1590.005), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Confluence (T1213.001), PowerShell (T1059.001), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation — Wed, 19 Aug 2026 16:31:48 +0530
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Confluence (T1213.001), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure — Wed, 19 Aug 2026 11:31:53 +0530
  • Matched TTPs: JavaScript (T1059.007), DNS (T1071.004), Keychain (T1555.001), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), AppleScript (T1059.002), Domains (T1584.001), Server (T1584.004), Proxy (T1090), Confluence (T1213.001), Web Services (T1584.006), Chat Messages (T1552.008), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data — Wed, 19 Aug 2026 11:09:25 +0530
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Proxy (T1090), Confluence (T1213.001), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)