Skip to main content
RuntimeRebel

All Articles

Security Intelligence

2495 articles · Updated every 4 hours

Advertisement

MA
HIGH
Malware

TCLBanker Malware Targets Fintech via WhatsApp and Outlook

TCLBanker malware uses trojanized Logitech AI installers to target 59 banking apps and spreads automatically via WhatsApp and Outlook messages.

Runtime Rebel Intel
4 min read·May 8, 2026
TH
HIGH
Threat Intel

ShinyHunters Defaces Canvas Login Portals in Extortion Campaign

ShinyHunters breached Instructure, defacing Canvas login portals for numerous educational institutions, potentially impacting user credentials and initiating extortion.

Runtime Rebel Intel
5 min read·May 8, 2026
TH
INFO
Threat Intel

AI Safety Debates Emerge From OpenAI Legal Clash

The legal dispute involving Elon Musk and OpenAI leaders spotlights critical discussions on AI's risks to humanity and the imperative for robust governance.

Runtime Rebel Intel
3 min read·May 7, 2026
TH
HIGH
Threat Intel

ClickFix Attacks Distribute Vidar Stealer: ACSC Warning & Mitigation

The ACSC warns Australian organizations of active ClickFix social engineering attacks deploying Vidar Stealer malware, risking data theft. Learn detection and mitigation.

Runtime Rebel Intel
4 min read·May 7, 2026
MA
HIGH
Malware

PCPJack Worm Steals Cloud Credentials, Cleans TeamPCP Access

New PCPJack worm actively targets exposed cloud infrastructure, stealing credentials and removing existing TeamPCP infections. Understand its TTPs and mitigation.

Runtime Rebel Intel
4 min read·May 7, 2026
PCPJack Credential Stealer: Cloud System Exploitation & Spread
HIGH
Malware

PCPJack Credential Stealer: Cloud System Exploitation & Spread

PCPJack, a new credential stealer, leverages 5 unspecified CVEs to achieve worm-like spread across cloud, container, developer, and financial service environments,

Runtime Rebel Intel
5 min read·May 7, 2026
Ivanti EPMM RCE via CVE-2026-6973 — Mitigation Guide
CRITICAL
Vulnerabilities

Ivanti EPMM RCE via CVE-2026-6973 — Mitigation Guide

Ivanti warns of active exploitation of CVE-2026-6973, a high-severity RCE flaw in Endpoint Manager Mobile (EPMM) allowing admin-level access on core servers.

Runtime Rebel Intel
3 min read·May 7, 2026
Harvest Now, Decrypt Later (HNDL): Quantum Risk for Long-Lived Data
MEDIUM
Threat Intel

Harvest Now, Decrypt Later (HNDL): Quantum Risk for Long-Lived Data

Understand the 'Harvest Now, Decrypt Later' (HNDL) threat model, where adversaries collect encrypted data today to decrypt with future quantum computers. Learn how this

Runtime Rebel Intel
5 min read·May 7, 2026
VU
CRITICAL
Vulnerabilities

CVE-2026-6973: Ivanti EPMM Exploited in the Wild — Patch Guidance

CISA adds CVE-2026-6973, an improper input validation vulnerability in Ivanti Endpoint Manager Mobile, to the KEV catalog following active exploitation.

Runtime Rebel Intel
3 min read·May 7, 2026
AI CLI Tools Vulnerable to RCE via Malicious Repositories
HIGH
Threat Intel

AI CLI Tools Vulnerable to RCE via Malicious Repositories

TrustFall research reveals RCE risks in Claude Code and Cursor CLI. AI agents can be manipulated via malicious repositories to execute arbitrary commands.

Runtime Rebel Intel
4 min read·May 7, 2026
AI-Driven Cyberattack Fails to Breach OT Systems via SCADA Login
INFO
Threat Intel

AI-Driven Cyberattack Fails to Breach OT Systems via SCADA Login

Analysis of the first AI-driven cyberattack targeting OT. Despite advanced automation, the campaign failed to bypass standard SCADA login interfaces.

Runtime Rebel Intel
3 min read·May 7, 2026
SU
INFO
Supply Chain

Boost Security Expands SDLC Defense via Strategic Acquisitions

Boost Security secures $4 million and acquires SecureIQx and Korbit.ai to streamline automated governance and security within the development lifecycle.

Runtime Rebel Intel
3 min read·May 7, 2026