Threat Hunt Feed (2026-10-26)
Hacker News: Best
- I refuse to accept a censored Internet. Join Me at FOSDEM 27 — Sun, 25 Oct 2026 17:30:55 +0000
- Matched TTPs: Tool (T1588.002), Software (T1592.002), Domain Fronting (T1090.004), At (T1053.002)
- We should be more ambitious with the software we build — Sat, 24 Oct 2026 21:47:31 +0000
- Matched TTPs: Domains (T1584.001), Tool (T1588.002), Lua (T1059.011), Software (T1592.002), At (T1053.002)
- Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more — Sat, 24 Oct 2026 08:06:39 +0000
- Matched TTPs: Serverless (T1584.007), JavaScript (T1059.007), Server (T1584.004), Proxy (T1090), CDNs (T1596.004), Firmware (T1592.003), Software (T1592.002), Python (T1059.006), At (T1053.002)
The Hacker News
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers — Sun, 25 Oct 2026 23:14:09 +0530
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Trap (T1546.005), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking — Sun, 25 Oct 2026 22:49:46 +0530
- Matched TTPs: Artificial Intelligence (T1588.007), DNS (T1071.004), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Trap (T1546.005), Proxy (T1090), Multi-Factor Authentication (T1556.006), Software (T1592.002), Exploits (T1588.005), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)