Threat Hunt Feed (2026-09-28)
Hacker News: Best
- An agent used DNS to reach an external chatbot — Sat, 26 Sep 2026 04:14:11 +0000
- Matched TTPs: DNS (T1071.004), Domains (T1584.001), Server (T1584.004), Search Engines (T1593.002), Proxy (T1090), Tool (T1588.002), Python (T1059.006), At (T1053.002)
BleepingComputer
- Citrix confirms two NetScaler RCE zero-days exploited in attacks — Sun, 27 Sep 2026 12:02:37 -0400
- Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Cloud Services (T1021.007), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), At (T1053.002)
The Hacker News
- Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation — Sun, 27 Sep 2026 13:17:57 +0530
- Matched TTPs: Sharepoint (T1213.002), Vulnerabilities (T1588.006), SSH (T1021.004), Private Keys (T1552.004), Server (T1584.004), Proxy (T1090), Cloud Services (T1021.007), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)