Skip to main content
RuntimeRebel home
LATEST — CRITICAL: SonicWall SMA 1000 SSRF Under Active Attack — FBI Arrests Ransomware Negotiator Linked to ShinyHunters — Anthropic Warns Small AI Models Could Self-Replicate on IoT — CRITICAL: CVE-2026-105445: Docker Hub Flaw Enables User Impersonation, Supply Chain Risk — Xandr Fined Record €8.6M for Relaying Grindr Data

Cybersecurity news & threat intelligence

Automated threat intelligence for security practitioners: CVE tracking against CISA's KEV catalog, severity-rated breach and vulnerability reporting, and a free JSON API over the whole corpus.

16 sources · updated every 8 hours · last log

Global Threat Level

CRITICAL LEVEL 5/5

Multiple critical threats under active exploitation

Ransomware 30%
Phishing 30%
Zero-Days 26%
Supply Chain 22%
Full threat dashboard

Corpus Snapshot

Featured Story

CRITICAL Vulnerabilities

CVE-2026-104935: Ivanti Connect Secure RCE via Auth Bypass

CISA confirms active exploitation of CVE-2026-104935 in Ivanti Connect Secure, an auth bypass leading to remote code execution.

  • Remote unauthenticated attackers can execute arbitrary commands on Ivanti Connect Secure devices.
  • All Ivanti Connect Secure VPN appliances are vulnerable to this authentication bypass.
  • Apply vendor-supplied mitigations or discontinue product use by October 16, 2026.
Runtime Rebel Intel
3 min read · Oct 13, 2026

Advertisement

Latest Intel

CRIT

SonicWall SMA 1000 SSRF Under Active Attack

#SonicWall #SSRF
MED

FBI Arrests Ransomware Negotiator Linked to ShinyHunters

#ShinyHunters #Ransomware
INFO

Anthropic Warns Small AI Models Could Self-Replicate on IoT

#IoT #Zero-Day
CRIT

CVE-2026-105445: Docker Hub Flaw Enables User Impersonation, Supply Chain Risk

#Software Supply Chain
INFO

Xandr Fined Record €8.6M for Relaying Grindr Data

#Data Breach #Compliance
INFO

Recorded Future's AI Indicator Lists Enhance Governance

#AI Governance #Shadow AI
INFO

AI Agent Social Engineering: The Future of BEC by 2026

#Social Engineering #AI Security
HIGH

Weekly Threat Roundup: AI Banking Attacks & Nvidia Vulnerability

#NVIDIA #Supply Chain Attack
MED

Securing AI Agent Permissions: Preventing Cloud Data Loss

#AI Security #Agentic AI
MED

TP-Link Sued: Router Security Misrepresentation & China Ties

#TP Link #Router Security
View all logs 3,736 total articles

Last completed week — Week 41, 2026

Oct 5 – Oct 11 72 articles 48 CVEs tracked Severity mix: 5 critical, 26 high, 15 medium, 2 low, 24 info.
  1. CVE-2015-3306: ProFTPD Improper Access Control Exploitation
  2. CVE-2021-3199: ONLYOFFICE Docs RCE via Path Traversal
  3. CVE-2016-3081: Apache Struts RCE via Command Injection — Patch Now
Read the Week 41, 2026 recap All weekly recaps

Severity Trend — last 6 months

300 599 May: 112 info articles May: 5 low articles May: 96 medium articles May: 319 high articles May: 52 critical articles May Jun: 126 info articles Jun: 2 low articles Jun: 92 medium articles Jun: 267 high articles Jun: 48 critical articles Jun Jul: 159 info articles Jul: 1 low article Jul: 88 medium articles Jul: 305 high articles Jul: 46 critical articles Jul Aug: 96 info articles Aug: 12 low articles Aug: 66 medium articles Aug: 121 high articles Aug: 31 critical articles Aug Sep: 47 info articles Sep: 3 low articles Sep: 21 medium articles Sep: 41 high articles Sep: 22 critical articles Sep Oct (to date): 79 info articles Oct (to date): 5 low articles Oct (to date): 27 medium articles Oct (to date): 55 high articles Oct (to date): 19 critical articles Oct*

* Oct is the current month, counted to date — not a full month against the five beside it.

View as table
Month InfoLowMediumHighCritical Total
May 11259631952 584
Jun 12629226748 535
Jul 15918830546 599
Aug 96126612131 326
Sep 473214122 134
Oct (to date) 795275519 185

Dashboards & Tools

Stay Current

Never miss a critical threat

RuntimeRebel publishes new threat intelligence every 8 hours. Subscribe via email or RSS to receive CVE alerts, breach reports, and security analysis.

RSS