Daily Hunt Feed - 2026-08-29

Threat Hunt Feed (2026-08-29)

BleepingComputer

• PaperCut releases second emergency patch for exploited flaws — Fri, 28 Aug 2026 15:08:26 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• GiveWP WordPress donation plugin flaw lets hackers execute server commands — Fri, 28 Aug 2026 14:18:55 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Vulnerabilities (T1588.006), Server (T1584.004), Email Addresses (T1589.002), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up? — Fri, 28 Aug 2026 10:00:10 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• ServiceNow warns of three max severity security vulnerabilities — Fri, 28 Aug 2026 06:29:42 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)

The Hacker News

• Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers — Fri, 28 Aug 2026 21:50:46 +0530
  • Matched TTPs: Sharepoint (T1213.002), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body — Fri, 28 Aug 2026 21:26:55 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Mshta (T1218.005), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), Visual Basic (T1059.005), At (T1053.002)
• Key Reasons Why Identity Fabric Matters in 2026 — Fri, 28 Aug 2026 17:00:00 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Cloud Services (T1021.007), Phishing (T1566), Multi-Factor Authentication (T1556.006), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access — Fri, 28 Aug 2026 16:28:29 +0530
  • Matched TTPs: Sharepoint (T1213.002), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Firmware (T1592.003), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server — Fri, 28 Aug 2026 15:15:15 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions — Fri, 28 Aug 2026 13:55:36 +0530
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)