Skip to main content
RuntimeRebel
LATEST_LOG: — CRITICAL: CVE-2026-18556: N-able N-central Authentication Bypass Actively Exploited — Botnet Targets Diagnostic Tools: Preventing OS Command Injection — Firebase Misconfiguration in tl;dv AI Tool Exposes Sensitive Meeting Data — ChainDrop npm Supply Chain Attack Steals Developer Credentials — Greatness PhaaS Adds Device Code Phishing for MFA Bypass

Cybersecurity news & threat intelligence

Automated threat intelligence for security practitioners: CVE tracking against CISA's KEV catalog, severity-rated breach and vulnerability reporting, and a free JSON API over the whole corpus.

13 sources · updated every 8 hours · last log

Global Threat Level

CRITICAL
LEVEL 5

Multiple critical threats under active exploitation

Supply Chain 27%
Ransomware 21%
Phishing 21%
Zero-Days 20%
Full threat dashboard

Corpus Snapshot

Featured Story

HIGH Vulnerabilities

CVE-2026-34486: Apache Tomcat Encryption Bypass – Detection and Mitigation Guide

Apache Tomcat CVE-2026-34486 enables EncryptInterceptor bypass, exposing sensitive data; learn impact, detection, and remediation steps.

  • Immediate impact: Active exploitation of Apache Tomcat can expose unencrypted sensitive data to attackers.
  • Affected systems: All Apache Tomcat deployments vulnerable to CVE-2026-34486, regardless of version, especially those exposing the EncryptInterceptor.
  • Remediation: Apply the vendor‑provided mitigations and patch by the 2026‑08‑07 federal deadline.
Runtime Rebel Intel
3 min read · Aug 4, 2026

Advertisement

Latest Intel

CRIT

CVE-2026-18556: N-able N-central Authentication Bypass Actively Exploited

#Authentication Bypass #CISA KEV
LOW

Botnet Targets Diagnostic Tools: Preventing OS Command Injection

#Botnet #Command Injection
HIGH

Firebase Misconfiguration in tl;dv AI Tool Exposes Sensitive Meeting Data

#Misconfiguration #Data Exposure
HIGH

ChainDrop npm Supply Chain Attack Steals Developer Credentials

#NPM #Supply Chain Attack
HIGH

Greatness PhaaS Adds Device Code Phishing for MFA Bypass

#PhaaS #MFA Bypass
HIGH

Claude AI Chats Exposed on Google: Personal Data and Crypto Keys At Risk

#AI #Data Privacy
MED

Device Code Phishing Surges 1,500% as Vishing Doubles

#Phishing #Social Engineering
HIGH

Google ADK for Python RCE: Agent-to-Agent Attacks Expose Secrets

#Supply Chain Attack #Remote Code Execution
HIGH

CVE-2026-58048: cPanel & WHM Critical SQL Privilege Escalation

#cPanel #SQL Injection
INFO

OpenAI Model Sandbox Escape Highlights Emerging AI Security Risks

#Zero-Day #Cloud Security
View all logs 3,151 total articles

Last completed week — Week 31, 2026

Jul 27 – Aug 2 149 articles 20 CVEs tracked Severity mix: 13 critical, 72 high, 19 medium, 2 low, 43 info.
  1. CVE-2026-50522: SharePoint RCE via Deserialization — Patch Now
  2. CVE-2026-60137: WordPress Core SQL Injection to RCE — Patch Now
  3. CVE-2026-16232: Check Point SmartConsole Admin Bypass via Auth Flaw
Read the Week 31, 2026 recap All weekly recaps

Severity Trend — last 6 months

308 616 Mar: 132 info articles Mar: 6 low articles Mar: 113 medium articles Mar: 313 high articles Mar: 52 critical articles Mar Apr: 118 info articles Apr: 9 low articles Apr: 115 medium articles Apr: 304 high articles Apr: 61 critical articles Apr May: 121 info articles May: 5 low articles May: 97 medium articles May: 320 high articles May: 52 critical articles May Jun: 128 info articles Jun: 2 low articles Jun: 94 medium articles Jun: 268 high articles Jun: 48 critical articles Jun Jul: 161 info articles Jul: 1 low article Jul: 88 medium articles Jul: 306 high articles Jul: 46 critical articles Jul Aug (to date): 4 info articles Aug (to date): 2 low articles Aug (to date): 4 medium articles Aug (to date): 14 high articles Aug (to date): 5 critical articles Aug*

* Aug is the current month, counted to date — not a full month against the five beside it.

View as table
Month InfoLowMediumHighCritical Total
Mar 132611331352 616
Apr 118911530461 607
May 12159732052 595
Jun 12829426848 540
Jul 16118830646 602
Aug (to date) 424145 29

Dashboards & Tools

Stay Current

Never miss a critical threat

RuntimeRebel publishes new threat intelligence every 8 hours. Subscribe via email or RSS to receive CVE alerts, breach reports, and security analysis.

RSS