Daily Hunt Feed - 2026-09-10

Threat Hunt Feed (2026-09-10)

Hacker News: Best

• How I advertise malicious software on Google Ads — Wed, 09 Sep 2026 11:43:21 +0000
  • Matched TTPs: Software (T1592.002)
• DeepSeek launching v4.1 flash cheaper and more capable than v4 pro — Wed, 09 Sep 2026 11:19:26 +0000
  • Matched TTPs: Hardware (T1592.001), Databases (T1213.006), Server (T1584.004), Tool (T1588.002), At (T1053.002)

BleepingComputer

• Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks — Wed, 09 Sep 2026 17:40:44 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• US says Chinese firms extracted billions of tokens from frontier AI models — Wed, 09 Sep 2026 12:48:33 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Cloud Services (T1021.007), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Veradigm warns of patient data breach after ransomware gang claims attack — Wed, 09 Sep 2026 11:31:23 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Botnet (T1584.005), Email Addresses (T1589.002), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• MFA’s Weakest Link: Account Recovery Is the New Attack Path — Wed, 09 Sep 2026 10:01:11 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), Impersonation (T1656), At (T1053.002)
• Over 36,000 exposed Plex servers vulnerable to recent flaws — Wed, 09 Sep 2026 06:11:29 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Google warns of new Chrome zero-day bug exploited in attacks — Wed, 09 Sep 2026 02:25:48 -0400
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)

Darkreading

• Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites — Tue, 08 Sep 2026 12:00:00 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Search Engines (T1593.002), Proxy (T1090), Local Groups (T1069.001), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)

The Hacker News

• U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto — Wed, 09 Sep 2026 23:56:05 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week — Wed, 09 Sep 2026 22:04:05 +0530
  • Matched TTPs: Scheduled Task (T1053.005), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), System Checks (T1497.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Domains (T1584.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Malicious Link (T1204.001), At (T1053.002)
• Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA — Wed, 09 Sep 2026 19:53:55 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), IP Addresses (T1590.005), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval — Wed, 09 Sep 2026 16:47:07 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets — Wed, 09 Sep 2026 16:13:04 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok — Wed, 09 Sep 2026 15:02:26 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Proxy (T1090), Phishing (T1566), Credential Stuffing (T1110.004), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox — Wed, 09 Sep 2026 14:41:03 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Vulnerabilities (T1588.006), SSH (T1021.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root — Wed, 09 Sep 2026 13:49:32 +0530
  • Matched TTPs: Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), SSH (T1021.004), Control Panel (T1218.002), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans — Wed, 09 Sep 2026 13:06:49 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Web Shell (T1505.003), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution — Wed, 09 Sep 2026 11:55:45 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days — Wed, 09 Sep 2026 10:11:29 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), DNS (T1071.004), DNS Server (T1584.002), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Malicious Link (T1204.001), At (T1053.002)
• N-able N-central Pre-Auth RCE Flaw Exploited in the Wild — Wed, 09 Sep 2026 09:57:51 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)