Daily Hunt Feed - 2026-08-27

Threat Hunt Feed (2026-08-27)

Hacker News: Best

• Meta reaches $17B settlement over social media harms to children — Wed, 26 Aug 2026 13:28:32 +0000
  • Matched TTPs: Social Media (T1593.001)

BleepingComputer

• Critical Avada WordPress theme flaw enables zero-click RCE — Wed, 26 Aug 2026 17:33:20 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Meta agrees to $18 billion settlement over teen social media harms — Wed, 26 Aug 2026 12:41:05 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001)
• Hackers target Microsoft SharePoint RCE chain with PoC exploit — Wed, 26 Aug 2026 10:47:51 -0400
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001)
• FBI disrupts proxy network enabling Chinese espionage operations — Wed, 26 Aug 2026 10:17:59 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001)
• Ubiquiti patches three max severity security vulnerabilities — Wed, 26 Aug 2026 09:17:54 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001)

Darkreading

• Dark Caracal Adds New Malware to Cyber Espionage Arsenal — Wed, 26 Aug 2026 21:33:06 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Android Malware Hijacks Update System for Car Head Units — Wed, 26 Aug 2026 17:33:45 GMT
  • Matched TTPs: Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Supply Chain Compromise (T1195), Proxy (T1090), Firmware (T1592.003), Software (T1592.002), At (T1053.002)
• ‘NovaCookies’ Kit Steals Microsoft 365 Sessions for $320 a Month — Wed, 26 Aug 2026 11:33:40 GMT
  • Matched TTPs: Adversary-in-the-Middle (T1557), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Phishing (T1566), Credentials (T1589.001), At (T1053.002)

The Hacker News

• Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler — Wed, 26 Aug 2026 21:05:05 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions — Wed, 26 Aug 2026 19:14:31 +0530
  • Matched TTPs: Adversary-in-the-Middle (T1557), Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Proxy (T1090), Phishing (T1566), Multi-Factor Authentication (T1556.006), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Impersonation (T1656), Malicious Link (T1204.001), At (T1053.002)
• CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing — Wed, 26 Aug 2026 18:37:02 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Web Services (T1584.006), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), DCSync (T1003.006), At (T1053.002)
• Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code — Wed, 26 Aug 2026 17:25:00 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation — Wed, 26 Aug 2026 15:08:45 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Tool (T1588.002), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode — Wed, 26 Aug 2026 12:42:55 +0530
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), PowerShell (T1059.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes — Wed, 26 Aug 2026 11:17:28 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Tool (T1588.002), Phishing (T1566), Firmware (T1592.003), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)