Daily Hunt Feed - 2026-10-14

Threat Hunt Feed (2026-10-14)

Hacker News: Best

• Redesigning source control at Anthropic — Tue, 13 Oct 2026 15:49:56 +0000
  • Matched TTPs: Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Brute Force (T1110), Software (T1592.002), At (T1053.002), Compression (T1027.015)
• Thunderbird for iOS — Tue, 13 Oct 2026 15:07:37 +0000
  • Matched TTPs: Email Accounts (T1585.002), Email Account (T1087.003), Social Media (T1593.001), At (T1053.002)
• AI is a tool and using it well takes skill — Mon, 12 Oct 2026 21:40:18 +0000
  • Matched TTPs: Tool (T1588.002), Software (T1592.002)
• ‘AI’ Is Not a Tool by Rich Hickey — Mon, 12 Oct 2026 18:00:25 +0000
  • Matched TTPs: Artificial Intelligence (T1588.007), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• Ledger confirms spy chip implant behind wallet crypto thefts — Mon, 12 Oct 2026 10:09:37 +0000
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Private Keys (T1552.004), Tool (T1588.002), Software (T1592.002), At (T1053.002)

Krebs on Security

• Microsoft Patches More Than 1,400 Security Flaws — Tue, 13 Oct 2026 23:24:53 +0000
  • Matched TTPs: Vulnerabilities (T1588.006), Server (T1584.004), Software (T1592.002), At (T1053.002)

BleepingComputer

• OpenAI engineer arrested for allegedly planting spy device in office — Tue, 13 Oct 2026 18:33:02 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Business Relationships (T1591.002), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days — Tue, 13 Oct 2026 15:56:09 -0400
  • Matched TTPs: Windows Management Instrumentation (T1047), Sharepoint (T1213.002), Artificial Intelligence (T1588.007), JavaScript (T1059.007), DNS (T1071.004), Security Account Manager (T1003.002), DNS Server (T1584.002), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Security Support Provider (T1547.005), Server (T1584.004), Confluence (T1213.001), PowerShell (T1059.001), Tool (T1588.002), Lua (T1059.011), Firmware (T1592.003), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), Windows Credential Manager (T1555.004), Remote Desktop Protocol (T1021.001), At (T1053.002), MMC (T1218.014)
• Windows 11 KB5127648 & KB5126653 cumulative updates released — Tue, 13 Oct 2026 13:49:38 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), At (T1053.002)
• TFG London cyberattack disrupts systems at Hobbs and Whistles retailers — Tue, 13 Oct 2026 12:44:18 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• The MFA Gaps Attackers are Still Exploiting — Tue, 13 Oct 2026 10:01:11 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Cloud Services (T1021.007), Tool (T1588.002), Multi-Factor Authentication (T1556.006), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• SAP warns of maximum severity OAuth2 SSRF security flaw — Tue, 13 Oct 2026 09:51:02 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), Python (T1059.006), At (T1053.002)

Darkreading

• North Korea Phishes Ukrainians for War Intel — Tue, 13 Oct 2026 21:24:45 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Phishing (T1566), Command Obfuscation (T1027.010), At (T1053.002)

The Hacker News

• Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets — Tue, 13 Oct 2026 23:50:57 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft — Tue, 13 Oct 2026 22:58:50 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
• GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking — Tue, 13 Oct 2026 21:48:18 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls — Tue, 13 Oct 2026 17:27:06 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network — Tue, 13 Oct 2026 16:39:10 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Firmware (T1592.003), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), System Services (T1569), At (T1053.002)
• Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers — Tue, 13 Oct 2026 14:18:41 +0530
  • Matched TTPs: IP Addresses (T1590.005), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control — Tue, 13 Oct 2026 14:14:01 +0530
  • Matched TTPs: Vulnerabilities (T1588.006), Domains (T1584.001), Private Keys (T1552.004), Server (T1584.004), Trap (T1546.005), Cloud Services (T1021.007), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code — Tue, 13 Oct 2026 14:13:37 +0530
  • Matched TTPs: JavaScript (T1059.007), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies — Tue, 13 Oct 2026 11:30:11 +0530
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Botnet (T1584.005), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Proxy (T1090), Tool (T1588.002), Firmware (T1592.003), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)