Discord Adds a Twitch-like Auto-Moderating Feature

On Thursday, Discord introduced AutoMod, "a feature that can automatically detect and block harmful messages before they're posted," reports Engadget:
Accessible through Discord's "Server Settings" menu, the tool allows admins and moderators to create a list of words and phrases they want Discord to look for, along with a set of repercussions for those who use them... Discord has put together three starting lists that cover "certain categories of not-nice words or phrases." Moderators can add up to three additional custom filter lists to suit the needs of their users. At launch, AutoMod is only available to Community servers.

"Moderating your growing community should feel rewarding and fulfilling, not add constant stress from dealing with bad actors or unruly members," Discord said in a blog post Thursday.

To introduce the feature, Discord created a cartoon where chicken superheroes thank AutoMod for patrolling their egg server.


Edgadget notes that Discord also has created "a dedicated admin community server run by Discord staff. Here, the company says moderators can gather to chat and learn from one another. Discord also plans to run educational events and share news through the space." Gizmodo adds that Discord also announced this summer's expansion of premium memberships, "a feature that allows a community's creators and owners to put their server behind a paid subscription."

Read more of this story at Slashdot.

nmap -sV --script vuln -p- <target-network>

tail -f /var/log/suricata/fast.log | grep <cve>

Check Vendor Security Advisory Bulletin

title: Detect Exploitation - Discord Adds a Twitch-like Auto-Moderating Feature
id: 7b687ff2-0d53-4891-9141-6bceb1580853
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "Discord Adds a Twitch-like Aut" ascii wide
    condition:
        any of them
}

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Discord Adds a Twitch-like Auto-Moderati")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

message: "*Discord Adds a Twitch-like Auto-Moderati*"

CommonSecurityLog
| where Message has "Discord Adds a Twitch-like Auto-Moderati"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc