Daily Hunt Feed - 2026-10-17

Threat Hunt Feed (2026-10-17)

Hacker News: Best

• I Love Software Rendering — Fri, 16 Oct 2026 12:52:08 +0000
  • Matched TTPs: Hardware (T1592.001), Software (T1592.002), At (T1053.002)
• More on Anthropic’s Scion ripping off Mononoke — Thu, 15 Oct 2026 17:05:19 +0000
  • Matched TTPs: Server (T1584.004), At (T1053.002)
• Krea 3 – An image model built for editing at scale — Thu, 15 Oct 2026 16:04:05 +0000
  • Matched TTPs: Hardware (T1592.001), At (T1053.002)

BleepingComputer

• Targeted ads installed Candiru spyware in zero-click attacks — Fri, 16 Oct 2026 13:20:03 -0400
  • Matched TTPs: JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), DLL (T1574.001), Domains (T1584.001), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Credentials (T1589.001), At (T1053.002)
• Employees using personal ChatGPT at work? Here’s what IT admins need to do — Fri, 16 Oct 2026 09:50:59 -0400
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Hardware (T1592.001), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
• Burger King Japan data breach exposes 11 million customer records — Fri, 16 Oct 2026 08:01:29 -0400
  • Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), Email Accounts (T1585.002), Server (T1584.004), Email Addresses (T1589.002), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)

Darkreading

• BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs — Fri, 16 Oct 2026 20:34:37 GMT
  • Matched TTPs: Network Devices (T1584.008), Malware (T1588.001), Vulnerabilities (T1588.006), Process Injection (T1055), Server (T1584.004), Proxy (T1090), Tool (T1588.002), Credentials (T1589.001), At (T1053.002)
• Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk — Fri, 16 Oct 2026 19:49:30 GMT
  • Matched TTPs: Malvertising (T1583.008), Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Domains (T1584.001), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), SEO Poisoning (T1608.006), Malicious Link (T1204.001), At (T1053.002)
• AI Takes Control of Robotic Arm in 16 Minutes Flat — Fri, 16 Oct 2026 18:37:50 GMT
  • Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Firmware (T1592.003), Software (T1592.002), Exploits (T1588.005), Python (T1059.006), At (T1053.002)

The Hacker News

• Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug — Fri, 16 Oct 2026 23:18:45 +0530
  • Matched TTPs: Hardware (T1592.001), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor — Fri, 16 Oct 2026 22:13:39 +0530
  • Matched TTPs: Scheduled Task (T1053.005), Malware (T1588.001), Vulnerabilities (T1588.006), DLL (T1574.001), Supply Chain Compromise (T1195), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing — Fri, 16 Oct 2026 21:46:44 +0530
  • Matched TTPs: Adversary-in-the-Middle (T1557), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Vulnerabilities (T1588.006), Domains (T1584.001), Server (T1584.004), Trap (T1546.005), Proxy (T1090), Tool (T1588.002), Phishing (T1566), Multi-Factor Authentication (T1556.006), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Impersonation (T1656), At (T1053.002)
• OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract — Fri, 16 Oct 2026 19:33:04 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Vulnerabilities (T1588.006), Domains (T1584.001), Private Keys (T1552.004), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• AI Decision Models and Their Impact on AI SOC Platforms — Fri, 16 Oct 2026 17:00:00 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), PowerShell (T1059.001), Tool (T1588.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing — Fri, 16 Oct 2026 12:23:09 +0530
  • Matched TTPs: Artificial Intelligence (T1588.007), Databases (T1213.006), Vulnerabilities (T1588.006), Domains (T1584.001), Trap (T1546.005), Code Repositories (T1213.003), Tool (T1588.002), Multi-Factor Authentication (T1556.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)
• PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions — Fri, 16 Oct 2026 10:29:36 +0530
  • Matched TTPs: IP Addresses (T1590.005), JavaScript (T1059.007), Malware (T1588.001), Databases (T1213.006), Vulnerabilities (T1588.006), SSH (T1021.004), Network Topology (T1590.004), Domains (T1584.001), Private Keys (T1552.004), Server (T1584.004), Trap (T1546.005), Tool (T1588.002), Inter-Process Communication (T1559), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), At (T1053.002)