Daily Hunt Feed - 2026-09-09

Threat Hunt Feed (2026-09-09)

Krebs on Security

• Microsoft Plugs Nearly 1,000 Security Holes — Tue, 08 Sep 2026 21:44:22 +0000
  • Matched TTPs: Artificial Intelligence (T1588.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), Software (T1592.002), At (T1053.002)

BleepingComputer

• DoppelCart fraud network uses 119,000 fake shops to steal credit cards — Tue, 08 Sep 2026 16:35:14 -0400
  • Matched TTPs: Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Server (T1584.004), Email Addresses (T1589.002), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Impersonation (T1656), At (T1053.002)
• The EU CRA’s Real Question: What Shipped, and When Did You Know? — Tue, 08 Sep 2026 16:24:16 -0400
  • Matched TTPs: Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit — Tue, 08 Sep 2026 16:08:55 -0400
  • Matched TTPs: Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Web Shell (T1505.003), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days — Tue, 08 Sep 2026 14:18:05 -0400
  • Matched TTPs: Windows Management Instrumentation (T1047), Sharepoint (T1213.002), Rootkit (T1014), DNS (T1071.004), DNS Server (T1584.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Bind Mounts (T1564.013), Server (T1584.004), Proxy (T1090), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Firmware (T1592.003), Software (T1592.002), Credentials (T1589.001), Remote Desktop Protocol (T1021.001), At (T1053.002)
• Windows 11 cumulative updates KB5124008 & KB5122880 released — Tue, 08 Sep 2026 13:57:03 -0400
  • Matched TTPs: Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• August updates trigger 0xc0000409 errors on Windows Server 2016 — Tue, 08 Sep 2026 11:22:33 -0400
  • Matched TTPs: Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• SAP warns of maximum severity ‘OVERPASS’ kernel vulnerability — Tue, 08 Sep 2026 10:55:20 -0400
  • Matched TTPs: IP Addresses (T1590.005), Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

Darkreading

• Patch Tuesday Sets Another Record With 974 CVEs — Tue, 08 Sep 2026 21:26:02 GMT
  • Matched TTPs: Sharepoint (T1213.002), DNS (T1071.004), DNS Server (T1584.002), Vulnerabilities (T1588.006), Server (T1584.004), Phishing (T1566), Software (T1592.002), At (T1053.002)
• Attackers Use Multi-Hop Google Redirects for Phishing Campaign — Tue, 08 Sep 2026 21:03:46 GMT
  • Matched TTPs: JavaScript (T1059.007), DNS (T1071.004), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Email Addresses (T1589.002), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Credentials (T1589.001), Malicious Link (T1204.001), At (T1053.002)

The Hacker News

• Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution — Tue, 08 Sep 2026 21:50:23 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Tool (T1588.002), Phishing (T1566), Container Service (T1543.005), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours — Tue, 08 Sep 2026 19:18:16 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Vulnerability Scanning (T1595.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls — Tue, 08 Sep 2026 17:24:29 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials — Tue, 08 Sep 2026 16:52:07 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell — Tue, 08 Sep 2026 14:43:47 +0530
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Web Shell (T1505.003), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams — Tue, 08 Sep 2026 14:13:51 +0530
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Domains (T1584.001), Email Addresses (T1589.002), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), SEO Poisoning (T1608.006), At (T1053.002)