Threat Hunt Feed (2026-10-03)
Hacker News: Best
- Several vulnerabilities have been discovered in the Linux kernel — Thu, 01 Oct 2026 23:10:44 +0000
- Matched TTPs: Vulnerabilities (T1588.006), At (T1053.002)
- Cloudflare K2: serverless event streams — Thu, 01 Oct 2026 14:09:10 +0000
- Matched TTPs: Serverless (T1584.007), Artificial Intelligence (T1588.007), JavaScript (T1059.007), DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Server (T1584.004), Phishing (T1566), Lua (T1059.011), Firmware (T1592.003), Software (T1592.002), Social Media (T1593.001), Python (T1059.006), Remote Desktop Protocol (T1021.001), At (T1053.002), Compression (T1027.015)
BleepingComputer
- Frontline Education breach exposes school district employee data — Fri, 02 Oct 2026 15:01:40 -0400
- Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Email Addresses (T1589.002), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
- Warlock ransomware breach SharePoint in water, telecom operator attacks — Fri, 02 Oct 2026 14:33:01 -0400
- Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Email Accounts (T1585.002), Domains (T1584.001), Web Shell (T1505.003), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)
- Dell asks admins to patch max severity CSM flaws as soon as possible — Fri, 02 Oct 2026 08:37:40 -0400
- Matched TTPs: Sharepoint (T1213.002), Rootkit (T1014), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
Darkreading
- SWIFT Banking & Government Middleware Enables RCE — Fri, 02 Oct 2026 16:27:54 GMT
- Matched TTPs: Hardware (T1592.001), Vulnerabilities (T1588.006), DLL (T1574.001), Software (T1592.002), Exploits (T1588.005), At (T1053.002)
- Is Your Organization Ready for 2027’s AI Accountability Era? — Fri, 02 Oct 2026 16:01:22 GMT
- Matched TTPs: Artificial Intelligence (T1588.007), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
- Is It Fair to Blame ‘Rogue’ AI for Security Failures? — Fri, 02 Oct 2026 15:51:33 GMT
- Matched TTPs: Databases (T1213.006), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
The Hacker News
- Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes — Fri, 02 Oct 2026 22:32:12 +0530
- Matched TTPs: Sharepoint (T1213.002), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report — Fri, 02 Oct 2026 17:00:00 +0530
- Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), SSH (T1021.004), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Phishing (T1566), Social Media (T1593.001), At (T1053.002)
- Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools — Fri, 02 Oct 2026 13:31:30 +0530
- Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
- Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes — Fri, 02 Oct 2026 11:19:50 +0530
- Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Social Media (T1593.001), At (T1053.002)