Daily Hunt Feed - 2026-09-04

Threat Hunt Feed (2026-09-04)

Hacker News: Best

• Qwen 3.8 27B available on Cerebras at 1500 tokens/s — Thu, 03 Sep 2026 18:32:13 +0000
  • Matched TTPs: Server (T1584.004), Tool (T1588.002), Python (T1059.006), At (T1053.002), Compression (T1027.015)
• OpenAI begins rolling out GPT-6 Astra — Thu, 03 Sep 2026 18:18:22 +0000
  • Matched TTPs: Artificial Intelligence (T1588.007), Web Services (T1584.006), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Any Human Ever – One life, drawn at random from all who have ever lived — Thu, 03 Sep 2026 14:51:10 +0000
  • Matched TTPs: At (T1053.002)

BleepingComputer

• Critical Elementor Pro flaw exploited to take over WordPress sites — Thu, 03 Sep 2026 10:52:20 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Plex warns users to patch security vulnerabilities immediately — Thu, 03 Sep 2026 07:02:22 -0400
  • Matched TTPs: Keylogging (T1056.001), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001)

Darkreading

• What We Missed: Did ShinyHunters ‘Breach’ ReliaQuest? — Thu, 03 Sep 2026 19:42:39 GMT
  • Matched TTPs: Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)

The Hacker News

• ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories — Thu, 03 Sep 2026 23:32:47 +0530
  • Matched TTPs: Keylogging (T1056.001), Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Msiexec (T1218.007), Domains (T1584.001), Control Panel (T1218.002), Server (T1584.004), Windows Remote Management (T1021.006), Trap (T1546.005), Mshta (T1218.005), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), Malicious Link (T1204.001), At (T1053.002)
• BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory — Thu, 03 Sep 2026 20:56:47 +0530
  • Matched TTPs: Digital Certificates (T1587.003), Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Process Injection (T1055), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), Visual Basic (T1059.005), At (T1053.002)
• Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data — Thu, 03 Sep 2026 20:09:05 +0530
  • Matched TTPs: Sharepoint (T1213.002), Databases (T1213.006), Vulnerabilities (T1588.006), Botnet (T1584.005), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries — Thu, 03 Sep 2026 17:28:00 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks — Thu, 03 Sep 2026 16:13:01 +0530
  • Matched TTPs: Sharepoint (T1213.002), JavaScript (T1059.007), Malware (T1588.001), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means — Thu, 03 Sep 2026 16:06:39 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), Botnet (T1584.005), Cloud Accounts (T1078.004), Server (T1584.004), Shell History (T1552.003), Cloud Account (T1136.003), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners — Thu, 03 Sep 2026 10:49:04 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Proxy (T1090), Phishing (T1566), Social Media (T1593.001), Credentials (T1589.001), Resource Hijacking (T1496), At (T1053.002)