Skip to main content
RuntimeRebel home
LATEST — US Gov Email Systems Vulnerable to Abuse via DNS Typos — AI Voice Impersonation Ring Stole $129M From Global Companies — FBI and CISA Warn of Cyberattacks Targeting Refrigeration Systems — OpenAI AI Model Generates 948 Linux Kernel Exploits — AI Automation 'Doom Loop': Risks to Human Control & Oversight

Cybersecurity news & threat intelligence

Automated threat intelligence for security practitioners: CVE tracking against CISA's KEV catalog, severity-rated breach and vulnerability reporting, and a free JSON API over the whole corpus.

16 sources · updated every 8 hours · last log

Global Threat Level

CRITICAL LEVEL 5/5

Multiple critical threats under active exploitation

Ransomware 30%
Zero-Days 28%
Supply Chain 27%
Phishing 23%
Full threat dashboard

Corpus Snapshot

Featured Story

HIGH Vulnerabilities

CVE-2026-123158: *sshole Bypass in musl-based Linux SSH

A critical password bypass vulnerability, *sshole (CVE-2026-123158), affects musl-based Linux distributions, allowing unauthorized SSH access.

  • Immediate impact: Unauthorized SSH access to musl-based Linux systems, potentially leading to server takeover.
  • Affected systems: Linux distributions using musl libc, especially Alpine cloud images with passwordless users and non-PAM OpenSSH.
  • Remediation: Disable PasswordAuthentication in sshd_config or update OpenSSH to 10.6p2 and restart sshd immediately.
Runtime Rebel Intel
4 min read · Nov 6, 2026

Advertisement

Latest Intel

MED

US Gov Email Systems Vulnerable to Abuse via DNS Typos

#Email Security #Misconfiguration
MED

AI Voice Impersonation Ring Stole $129M From Global Companies

#Social Engineering #Financial Crime
HIGH

FBI and CISA Warn of Cyberattacks Targeting Refrigeration Systems

#Critical Infrastructure #Industrial Control Systems
INFO

OpenAI AI Model Generates 948 Linux Kernel Exploits

#Linux Kernel #Privilege Escalation
INFO

AI Automation 'Doom Loop': Risks to Human Control & Oversight

#AI #Automation
HIGH

VOLTA Infostealer: AI-Driven Credential & Crypto Wallet Compromise

#Infostealer #AI
INFO

Knicks Phishing Test and Government Agency Hacktivist Attack

#Phishing #Hacktivism
INFO

AI Agents Achieve Linux Root via 948 Kernel Flaws in Research

#Linux Kernel #AI
MED

Fake AI and SpaceX Events Used in Multi-Platform Phishing Campaign

#Phishing #Credential Theft
HIGH

OpenSSH Auth Bypass on Alpine Linux via Long Passwords

#Authentication Bypass #Vulnerability
View all logs 3,865 total articles

Last completed week — Week 44, 2026

Oct 26 – Nov 1 60 articles 20 CVEs tracked Severity mix: 9 critical, 23 high, 13 medium, 1 low, 14 info.
  1. TAG-193 Espionage: Central Asia Governments & WinRAR Exploit
  2. PHP 'php2shell' RCE Threatens Web Applications – Patch Now
  3. CVE-2026-0257: PAN-OS GlobalProtect Auth Bypass Exploited
Read the Week 44, 2026 recap All weekly recaps

Severity Trend — last 6 months

300 599 Jun: 126 info articles Jun: 2 low articles Jun: 92 medium articles Jun: 267 high articles Jun: 48 critical articles Jun Jul: 159 info articles Jul: 1 low article Jul: 88 medium articles Jul: 305 high articles Jul: 46 critical articles Jul Aug: 96 info articles Aug: 12 low articles Aug: 66 medium articles Aug: 121 high articles Aug: 31 critical articles Aug Sep: 47 info articles Sep: 3 low articles Sep: 21 medium articles Sep: 41 high articles Sep: 22 critical articles Sep Oct: 79 info articles Oct: 5 low articles Oct: 27 medium articles Oct: 55 high articles Oct: 19 critical articles Oct Nov (to date): 35 info articles Nov (to date): 2 low articles Nov (to date): 25 medium articles Nov (to date): 56 high articles Nov (to date): 11 critical articles Nov*

* Nov is the current month, counted to date — not a full month against the five beside it.

View as table
Month InfoLowMediumHighCritical Total
Jun 12629226748 535
Jul 15918830546 599
Aug 96126612131 326
Sep 473214122 134
Oct 795275519 185
Nov (to date) 352255611 129

Dashboards & Tools

Stay Current

Never miss a critical threat

RuntimeRebel publishes new threat intelligence every 8 hours. Subscribe via email or RSS to receive CVE alerts, breach reports, and security analysis.

RSS