Daily Hunt Feed - 2026-10-08

Threat Hunt Feed (2026-10-08)

Hacker News: Best

• Tell HN: GitHub refuses to remove cracked copies of my software after a month — Tue, 06 Oct 2026 18:54:01 +0000
  • Matched TTPs: JavaScript (T1059.007), Software (T1592.002), At (T1053.002)

BleepingComputer

• Hackers hijack Google domains after breaching ccTLD registries — Wed, 07 Oct 2026 16:50:13 -0400
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• PoeLLM malware infects exposed AI servers in cryptomining attacks — Wed, 07 Oct 2026 11:04:08 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• Hackers exploit critical Atlassian flaw after public PoC release — Wed, 07 Oct 2026 08:49:01 -0400
  • Matched TTPs: Sharepoint (T1213.002), IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), Domains (T1584.001), Proxy (T1090), Confluence (T1213.001), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• SonicWall warns of max severity SSRF flaw in SMA1000 gateways — Wed, 07 Oct 2026 07:37:07 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Software (T1592.002), At (T1053.002)

The Hacker News

• Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains — Thu, 08 Oct 2026 00:18:17 +0530
  • Matched TTPs: DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Web Shell (T1505.003), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer — Wed, 07 Oct 2026 23:13:20 +0530
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely — Wed, 07 Oct 2026 21:04:53 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Python (T1059.006), At (T1053.002)
• PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet — Wed, 07 Oct 2026 21:03:51 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Botnet (T1584.005), Web Shell (T1505.003), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials — Wed, 07 Oct 2026 17:26:56 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Password Spraying (T1110.003), Tool (T1588.002), Phishing (T1566), Credential Stuffing (T1110.004), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details — Wed, 07 Oct 2026 17:19:26 +0530
  • Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Confluence (T1213.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• What Is Agentic Pentesting? What It Proves, and Where It Stops. — Wed, 07 Oct 2026 17:12:24 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws — Wed, 07 Oct 2026 13:37:38 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Web Shell (T1505.003), Server (T1584.004), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), At (T1053.002)
• 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer — Wed, 07 Oct 2026 12:27:54 +0530
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), DLL (T1574.001), Botnet (T1584.005), Msiexec (T1218.007), Web Shell (T1505.003), Server (T1584.004), PowerShell (T1059.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)