Threat Hunt Feed (2026-10-07)
BleepingComputer
- Ninja Forms plugin flaw exploited to hack WordPress sites — Tue, 06 Oct 2026 17:00:27 -0400
- Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Masquerading (T1036), Confluence (T1213.001), Tool (T1588.002), Software (T1592.002), At (T1053.002)
- Atlassian warns of critical file-access flaw in Jira, Confluence — Tue, 06 Oct 2026 13:34:59 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Proxy (T1090), Confluence (T1213.001), Tool (T1588.002), Software (T1592.002), At (T1053.002)
- Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes — Tue, 06 Oct 2026 11:16:44 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Proxy (T1090), Confluence (T1213.001), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
- How to secure RMM software: 8 controls MSPs should test — Tue, 06 Oct 2026 10:00:10 -0400
- Matched TTPs: Sharepoint (T1213.002), Network Devices (T1584.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Confluence (T1213.001), Tool (T1588.002), Software (T1592.002), At (T1053.002)
- Nikkei discloses breaches of employees’ Microsoft, Google email accounts — Tue, 06 Oct 2026 05:25:50 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Email Accounts (T1585.002), Email Account (T1087.003), Server (T1584.004), Email Addresses (T1589.002), Confluence (T1213.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), At (T1053.002)
- Engineer sentenced for locking over 3,000 devices on employer network — Tue, 06 Oct 2026 04:19:24 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Confluence (T1213.001), Tool (T1588.002), Software (T1592.002), Domain Accounts (T1078.002), At (T1053.002)
Darkreading
- ClickFix Attacks Evolve to Better Hide Malicious Payloads — Tue, 06 Oct 2026 20:32:58 GMT
- Matched TTPs: DNS (T1071.004), DNS Server (T1584.002), Malware (T1588.001), Vulnerabilities (T1588.006), Server (T1584.004), PowerShell (T1059.001), Software (T1592.002), Exploits (T1588.005), Python (T1059.006), At (T1053.002)
- IANS’ Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams — Tue, 06 Oct 2026 17:15:24 GMT
- Matched TTPs: Vulnerabilities (T1588.006), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), At (T1053.002)
The Hacker News
- Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes — Wed, 07 Oct 2026 00:08:55 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Phishing (T1566), Multi-Factor Authentication (T1556.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan — Tue, 06 Oct 2026 23:54:25 +0530
- Matched TTPs: DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Server (T1584.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
- Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies — Tue, 06 Oct 2026 16:56:25 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Remote Services (T1021), Web Shell (T1505.003), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
- Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers — Tue, 06 Oct 2026 16:32:30 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Code Signing (T1553.002), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
- Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports — Tue, 06 Oct 2026 14:51:47 +0530
- Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)