Skip to main content
RuntimeRebel home
LATEST — AI Email Summarizers Vulnerable to Hidden HTML Prompts — Alice Secures $140M to Enhance AI Model Defenses and Guardrails — U.S. Sanctions Iran-Linked Hackers Targeting Critical Infrastructure — Mexico’s Cybersecurity Plan 2025-2030: Addressing Rising Threats — Detecting SSRF Hostname Obfuscation: 1u.ms and Cloud Metadata

Cybersecurity news & threat intelligence

Automated threat intelligence for security practitioners: CVE tracking against CISA's KEV catalog, severity-rated breach and vulnerability reporting, and a free JSON API over the whole corpus.

16 sources · updated every 8 hours · last log

Global Threat Level

CRITICAL LEVEL 5/5

Multiple critical threats under active exploitation

Supply Chain 29%
Zero-Days 25%
Ransomware 24%
Phishing 22%
Full threat dashboard

Corpus Snapshot

Featured Story

CRITICAL Vulnerabilities

CVE-2026-60004: Gitea Code Injection Under Active Exploitation

CISA confirms active exploitation of CVE-2026-60004, a Gitea code injection vulnerability allowing shell command execution with repository write access.

  • Attackers are actively exploiting Gitea via CVE-2026-60004, enabling shell command execution through code injection.
  • Gitea instances are vulnerable if attackers have repository write access, allowing compromise of the service account.
  • Immediately apply vendor-specific mitigations and patches to secure all Gitea instances against this critical flaw.
Runtime Rebel Intel
4 min read · Aug 26, 2026

Advertisement

Latest Intel

MED

AI Email Summarizers Vulnerable to Hidden HTML Prompts

#AI #Prompt Injection
INFO

Alice Secures $140M to Enhance AI Model Defenses and Guardrails

#AI Security #Adversarial AI
HIGH

U.S. Sanctions Iran-Linked Hackers Targeting Critical Infrastructure

#Iran #Sanctions
INFO

Mexico’s Cybersecurity Plan 2025-2030: Addressing Rising Threats

#Mexico #Ransomware
INFO

Detecting SSRF Hostname Obfuscation: 1u.ms and Cloud Metadata

#SSRF #Obfuscation
LOW

State of AI-Enabled Malware: Real-World Impact and Defenses

#LLM #Ransomware
INFO

Operational Sovereignty: Managing AI Guardrails in SOCs

#AI #Cloud Security
INFO

Black Hat 2026: The State of Security Vendors and AI's Influence

#AI #Threat Intelligence
INFO

Cybersecurity Affordability Crisis: Impact on Small Businesses

#Supply Chain Risk #Risk Management
INFO

Linux Foundation to Govern TRACE: AI Runtime Attestation Standard

#AI Security
View all logs 3,414 total articles

Last completed week — Week 34, 2026

Aug 17 – Aug 23 93 articles 32 CVEs tracked Severity mix: 9 critical, 28 high, 21 medium, 5 low, 30 info.
  1. CVE-2026-72529: Critical RCE in TrueConf Server via Missing Auth
  2. CVE-2026-72530: TrueConf Server Remote Code Execution
  3. Zimbra CVE-2026-73570 Actively Exploited: Patch Now
Read the Week 34, 2026 recap All weekly recaps

Severity Trend — last 6 months

306 612 Mar: 130 info articles Mar: 6 low articles Mar: 111 medium articles Mar: 313 high articles Mar: 52 critical articles Mar Apr: 113 info articles Apr: 9 low articles Apr: 113 medium articles Apr: 303 high articles Apr: 61 critical articles Apr May: 112 info articles May: 5 low articles May: 96 medium articles May: 319 high articles May: 52 critical articles May Jun: 126 info articles Jun: 2 low articles Jun: 92 medium articles Jun: 267 high articles Jun: 48 critical articles Jun Jul: 159 info articles Jul: 1 low article Jul: 88 medium articles Jul: 305 high articles Jul: 46 critical articles Jul Aug (to date): 95 info articles Aug (to date): 12 low articles Aug (to date): 65 medium articles Aug (to date): 120 high articles Aug (to date): 31 critical articles Aug*

* Aug is the current month, counted to date — not a full month against the five beside it.

View as table
Month InfoLowMediumHighCritical Total
Mar 130611131352 612
Apr 113911330361 599
May 11259631952 584
Jun 12629226748 535
Jul 15918830546 599
Aug (to date) 95126512031 323

Dashboards & Tools

Stay Current

Never miss a critical threat

RuntimeRebel publishes new threat intelligence every 8 hours. Subscribe via email or RSS to receive CVE alerts, breach reports, and security analysis.

RSS