Threat Hunt Feed (2026-10-15)
Hacker News: Best
- Fire at Starlink site in Bulgaria after suspected sabotage in Poland — Wed, 14 Oct 2026 18:37:21 +0000
- Matched TTPs: At (T1053.002)
- Passkeys are not a trap — Wed, 14 Oct 2026 15:15:45 +0000
- Matched TTPs: Keychain (T1555.001), Hardware (T1592.001), Trap (T1546.005), Phishing (T1566), Firmware (T1592.003), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
BleepingComputer
- The Blind Spots of Agentic Pentesting and How to Close Them — Wed, 14 Oct 2026 10:00:10 -0400
- Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), At (T1053.002)
- Global takedown hits network behind 1 billion phishing messages — Wed, 14 Oct 2026 09:12:52 -0400
- Matched TTPs: Sharepoint (T1213.002), Malware (T1588.001), Hardware (T1592.001), Cloud Accounts (T1078.004), Email Accounts (T1585.002), Domains (T1584.001), Tool (T1588.002), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), Impersonation (T1656), At (T1053.002)
- CISA warns admins to immediately fix Ivanti flaw exploited as zero-day — Wed, 14 Oct 2026 08:58:07 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002), Local Accounts (T1078.003)
- Hirudo Android malware replaces banking apps to evade security checks — Wed, 14 Oct 2026 07:41:20 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
Darkreading
- Yam Store: The Phishing Network Behind a Billion Messages — Wed, 14 Oct 2026 20:57:16 GMT
- Matched TTPs: Vulnerabilities (T1588.006), Domains (T1584.001), Cloud Services (T1021.007), Tool (T1588.002), Phishing (T1566), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Anthropic ‘SneakPeek’ Flaw Is a Silent Zero-Click Threat — Wed, 14 Oct 2026 20:09:42 GMT
- Matched TTPs: Vulnerabilities (T1588.006), SSH (T1021.004), Private Keys (T1552.004), Phishing (T1566), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
The Hacker News
- Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability — Thu, 15 Oct 2026 00:08:56 +0530
- Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Domains (T1584.001), Private Keys (T1552.004), Trap (T1546.005), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App — Wed, 14 Oct 2026 23:08:31 +0530
- Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Web Shell (T1505.003), Server (T1584.004), Trap (T1546.005), Proxy (T1090), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages — Wed, 14 Oct 2026 22:39:15 +0530
- Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution — Wed, 14 Oct 2026 17:43:36 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team — Wed, 14 Oct 2026 17:20:00 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days — Wed, 14 Oct 2026 16:49:02 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), JavaScript (T1059.007), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host — Wed, 14 Oct 2026 13:16:57 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave — Wed, 14 Oct 2026 11:22:28 +0530
- Matched TTPs: Vulnerabilities (T1588.006), DLL (T1574.001), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Phishing (T1566), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug — Wed, 14 Oct 2026 10:04:43 +0530
- Matched TTPs: Sharepoint (T1213.002), Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
- OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room — Wed, 14 Oct 2026 07:29:25 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)