Daily Hunt Feed - 2026-09-11

Threat Hunt Feed (2026-09-11)

Hacker News: Best

• I have a theory that software drives people insane — Thu, 10 Sep 2026 16:13:42 +0000
  • Matched TTPs: Software (T1592.002), At (T1053.002)
• Rust is tier-1 language at Microsoft — Thu, 10 Sep 2026 13:39:16 +0000
  • Matched TTPs: Firmware (T1592.003), Software (T1592.002), At (T1053.002)

BleepingComputer

• New Android malware encrypts files, steals data, and harasses victims — Thu, 10 Sep 2026 17:40:43 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• September Windows Server updates break Remote Desktop Services — Thu, 10 Sep 2026 16:34:37 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
• Surfshark VPN says hackers breached internal testing, proxy servers — Thu, 10 Sep 2026 15:15:07 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Browser Extensions (T1176.001), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers — Thu, 10 Sep 2026 11:43:58 -0400
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Domain Account (T1136.002), Hardware (T1592.001), Databases (T1213.006), Vulnerabilities (T1588.006), SSH (T1021.004), Web Shell (T1505.003), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• New ‘BlueMoon’ kit exploited Windows and Chrome zero-day flaws — Thu, 10 Sep 2026 10:11:34 -0400
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), At (T1053.002)
• Trezor warns users of email provider breach, phishing attacks — Thu, 10 Sep 2026 02:56:33 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Email Addresses (T1589.002), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)

Darkreading

• Indonesia Hit by Android Banking App-Cloning Campaign — Fri, 11 Sep 2026 01:00:00 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Proxy (T1090), Exploits (T1588.005), At (T1053.002)

The Hacker News

• ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories — Thu, 10 Sep 2026 23:17:38 +0530
  • Matched TTPs: Adversary-in-the-Middle (T1557), Artificial Intelligence (T1588.007), IP Addresses (T1590.005), JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Databases (T1213.006), Vulnerabilities (T1588.006), SSH (T1021.004), Remote Access Tools (T1219), Domains (T1584.001), Masquerading (T1036), Server (T1584.004), Email Addresses (T1589.002), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Malicious Link (T1204.001), Kerberoasting (T1558.003), At (T1053.002), Wi-Fi Networks (T1669)
• Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE — Thu, 10 Sep 2026 17:15:05 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances — Thu, 10 Sep 2026 17:11:53 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks — Thu, 10 Sep 2026 17:03:43 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline — Thu, 10 Sep 2026 16:06:46 +0530
  • Matched TTPs: IP Addresses (T1590.005), JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example “sk-1234” Admin Key — Thu, 10 Sep 2026 12:42:55 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Proxy (T1090), Cloud Account (T1136.003), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 — Thu, 10 Sep 2026 12:34:01 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)