Daily Hunt Feed - 2026-08-28

Threat Hunt Feed (2026-08-28)

Hacker News: Best

• Saving 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache — Thu, 27 Aug 2026 17:17:57 +0000
  • Matched TTPs: Serverless (T1584.007), JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Phishing (T1566), Lua (T1059.011), Firmware (T1592.003), Social Media (T1593.001), Python (T1059.006), Remote Desktop Protocol (T1021.001), At (T1053.002), Compression (T1027.015)

Krebs on Security

• Two Alleged ‘TeamPCP’ Hackers Arrested in Australia — Thu, 27 Aug 2026 11:04:15 +0000
  • Matched TTPs: Artificial Intelligence (T1588.007), IP Addresses (T1590.005), JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Databases (T1213.006), Virtual Private Server (T1583.003), Domains (T1584.001), Server (T1584.004), Email Addresses (T1589.002), Code Repositories (T1213.003), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)

BleepingComputer

• PaperCut warns of NG, MF flaw exploited in zero-day attacks — Thu, 27 Aug 2026 12:31:53 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Android 17 adds ECH support to make web browsing harder to track — Thu, 27 Aug 2026 10:00:00 -0400
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Webinar: How Google Workspace breaches happen and what to do next — Thu, 27 Aug 2026 08:16:24 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), At (T1053.002)

Darkreading

• ‘HTTP Terminator’ Hunts for Novel Desync Attacks — Wed, 26 Aug 2026 19:54:34 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Tool (T1588.002), Exploits (T1588.005), At (T1053.002)

The Hacker News

• OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face — Fri, 28 Aug 2026 00:06:19 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE — Thu, 27 Aug 2026 20:43:00 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories — Thu, 27 Aug 2026 20:42:16 +0530
  • Matched TTPs: VNC (T1021.005), Screen Capture (T1113), Adversary-in-the-Middle (T1557), Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Local Account (T1136.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Botnet (T1584.005), Domains (T1584.001), Masquerading (T1036), Private Keys (T1552.004), Server (T1584.004), Active Scanning (T1595), Search Engines (T1593.002), Video Capture (T1125), Code Repositories (T1213.003), Proxy (T1090), Shell History (T1552.003), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Impersonation (T1656), Python (T1059.006), SEO Poisoning (T1608.006), At (T1053.002)
• Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers — Thu, 27 Aug 2026 19:09:56 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Learn How to Build Security Operations Ready for AI-Powered Attacks — Thu, 27 Aug 2026 17:26:30 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address — Thu, 27 Aug 2026 15:03:38 +0530
  • Matched TTPs: Keylogging (T1056.001), Sharepoint (T1213.002), IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access — Thu, 27 Aug 2026 13:43:11 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs — Thu, 27 Aug 2026 12:35:28 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)