Daily Hunt Feed - 2026-10-02

Threat Hunt Feed (2026-10-02)

BleepingComputer

• Microsoft says threat actors are ahead in the early AI race — Thu, 01 Oct 2026 15:32:47 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), PowerShell (T1059.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• The Day-One Hole in Zero Trust Architecture — Thu, 01 Oct 2026 10:01:11 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Kiteworks patches max severity code injection vulnerability — Thu, 01 Oct 2026 09:51:08 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

The Hacker News

• WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory — Thu, 01 Oct 2026 20:07:35 +0530
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), JavaScript (T1059.007), Malware (T1588.001), Cron (T1053.003), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), File Deletion (T1070.004), At (T1053.002)
• How Financial Services Companies Can Modernize Their Software Supply Chain — Thu, 01 Oct 2026 17:15:00 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates — Thu, 01 Oct 2026 16:12:36 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Social Media (T1593.001), At (T1053.002)
• CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV — Thu, 01 Oct 2026 16:03:16 +0530
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Social Media (T1593.001), At (T1053.002)
• Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version — Thu, 01 Oct 2026 13:19:36 +0530
  • Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path — Thu, 01 Oct 2026 11:24:41 +0530
  • Matched TTPs: Sharepoint (T1213.002), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Social Media (T1593.001), At (T1053.002)
• Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft — Thu, 01 Oct 2026 10:51:10 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Web Shell (T1505.003), Server (T1584.004), Tool (T1588.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• MetaMask Security Incident Prompts Exit of Affected Ethereum Validators — Thu, 01 Oct 2026 10:40:09 +0530
  • Matched TTPs: Sharepoint (T1213.002), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
• Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs — Thu, 01 Oct 2026 10:05:34 +0530
  • Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Local Account (T1136.001), Vulnerabilities (T1588.006), SSH (T1021.004), Web Shell (T1505.003), Server (T1584.004), Tool (T1588.002), Social Media (T1593.001), Python (T1059.006), At (T1053.002)