Threat Hunt Feed (2026-10-31)
BleepingComputer
- Critical Linux kernel flaw allows remote root attacks on MPTCP servers — Fri, 30 Oct 2026 17:09:46 -0400
- Matched TTPs: IP Addresses (T1590.005), Malware (T1588.001), Hardware (T1592.001), SSH (T1021.004), Server (T1584.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
- Trezor warns of suspected crypto-theft implant in hardware wallet — Fri, 30 Oct 2026 11:58:20 -0400
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), SSH (T1021.004), Private Keys (T1552.004), Tool (T1588.002), Software (T1592.002), Credentials (T1589.001)
- Malicious Claude Code extension on Cursor planted SSH backdoors — Fri, 30 Oct 2026 10:36:54 -0400
- Matched TTPs: Scheduled Task (T1053.005), JavaScript (T1059.007), Malware (T1588.001), Hardware (T1592.001), SSH (T1021.004), Server (T1584.004), PowerShell (T1059.001), Tool (T1588.002), Unix Shell (T1059.004), Software (T1592.002), Credentials (T1589.001), At (T1053.002)
Darkreading
- Undead Software Projects Continue to Raise Security Risks — Fri, 30 Oct 2026 14:10:37 GMT
- Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), Code Signing (T1553.002), Domains (T1584.001), Phishing (T1566), Software (T1592.002), Exploits (T1588.005), Python (T1059.006), At (T1053.002)
- Why CTF Competitions May Be More Important Than Ever — Thu, 29 Oct 2026 19:56:44 GMT
- Matched TTPs: Artificial Intelligence (T1588.007), Browser Extensions (T1176.001), Vulnerabilities (T1588.006), Tool (T1588.002), Software (T1592.002), At (T1053.002)
The Hacker News
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide — Fri, 30 Oct 2026 22:28:44 +0530
- Matched TTPs: Screen Capture (T1113), Keylogging (T1056.001), Artificial Intelligence (T1588.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), DLL (T1574.001), Server (T1584.004), Proxy (T1090), Cloud Services (T1021.007), Tool (T1588.002), Software (T1592.002), Social Media (T1593.001), Python (T1059.006), At (T1053.002)
- Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis — Fri, 30 Oct 2026 17:51:56 +0530
- Matched TTPs: Malware (T1588.001), Hardware (T1592.001), Vulnerabilities (T1588.006), SSH (T1021.004), Private Keys (T1552.004), Proxy (T1090), Phishing (T1566), Software (T1592.002), Social Media (T1593.001), Python (T1059.006), At (T1053.002)
- Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor — Fri, 30 Oct 2026 14:25:47 +0530
- Matched TTPs: Scheduled Task (T1053.005), Artificial Intelligence (T1588.007), JavaScript (T1059.007), Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Proxy (T1090), Software (T1592.002), Social Media (T1593.001), Credentials (T1589.001), Python (T1059.006), At (T1053.002)
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV — Fri, 30 Oct 2026 12:57:05 +0530
- Matched TTPs: Malware (T1588.001), Vulnerabilities (T1588.006), SSH (T1021.004), Server (T1584.004), Proxy (T1090), Software (T1592.002), Social Media (T1593.001), Python (T1059.006), At (T1053.002)