Threat Hunt Feed (2026-09-13)
The Hacker News
- CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV — Sat, 12 Sep 2026 21:24:45 +0530
- Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Visual Basic (T1059.005), At (T1053.002)
- OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers — Sat, 12 Sep 2026 14:37:56 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Email Addresses (T1589.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure — Fri, 11 Sep 2026 22:00:18 +0530
- Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Claude Used to Automate Exploitation and Data Theft Across Multiple Victims — Fri, 11 Sep 2026 19:59:47 +0530
- Matched TTPs: Keylogging (T1056.001), Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection — Fri, 11 Sep 2026 19:40:20 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Your Critical Vulnerabilities Might Not Be Your Biggest Risk — Fri, 11 Sep 2026 17:00:00 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Databases (T1213.006), Vulnerabilities (T1588.006), SSH (T1021.004), Vulnerability Scanning (T1595.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors — Fri, 11 Sep 2026 13:01:05 +0530
- Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws — Fri, 11 Sep 2026 12:16:18 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware — Fri, 11 Sep 2026 11:49:59 +0530
- Matched TTPs: Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), SSH (T1021.004), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)