Cybersecurity articles in Threat Intel on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/balance-theory-secures-19m-to-advance-cybersecurity-investment-managementhttps://runtimerebel.com/blog/balance-theory-secures-19m-to-advance-cybersecurity-investment-managementBalance Theory raises $19 million in funding to help enterprises optimize and manage their cybersecurity investments, addressing critical budget allocation challenges.Sat, 01 Aug 2026 13:23:48 GMTBalance TheoryCybersecurity InvestmentFundingSYN VenturesDataTribeTEDCOSecurity Strategyhttps://runtimerebel.com/blog/phishing-targets-ai-service-users-guard-your-chatgpt-accountshttps://runtimerebel.com/blog/phishing-targets-ai-service-users-guard-your-chatgpt-accountsRecent phishing campaigns impersonate popular AI services like ChatGPT to trick users into divulging credentials. Learn how to protect your accounts and data.Sat, 01 Aug 2026 10:02:17 GMTPhishingAI ServicesChatGPTSocial EngineeringCredential Thefthttps://runtimerebel.com/blog/anthropic-opus-5-significantly-boosts-prompt-injection-resistancehttps://runtimerebel.com/blog/anthropic-opus-5-significantly-boosts-prompt-injection-resistanceAnthropic's Opus 5 demonstrates superior resistance to prompt injection attacks on the IPI benchmark, outperforming other leading LLMs, including GPT-5.6 variants.Sat, 01 Aug 2026 10:01:46 GMTAnthropic Opus 5Prompt InjectionLLM SecurityIPI BenchmarkAI Securityhttps://runtimerebel.com/blog/suspected-chinese-speaking-hackers-deploy-octlurk-silklurk-backdoorshttps://runtimerebel.com/blog/suspected-chinese-speaking-hackers-deploy-octlurk-silklurk-backdoorsOngoing cyberattacks by a suspected Chinese-speaking threat actor target Central Asian governments with OctLurk and SilkLurk backdoors for espionage and data theft.Sat, 01 Aug 2026 02:54:42 GMTChinese Speaking HackersOctLurkSilLurkCentral AsiaGovernment TargetsEspionageBackdoorhttps://runtimerebel.com/blog/north-korea-attribution-data-breaches-impact-ontrac-uk-educationhttps://runtimerebel.com/blog/north-korea-attribution-data-breaches-impact-ontrac-uk-educationAWS attributes recent hacks to North Korea. OnTrac and the UK Department for Education report significant data breaches, impacting over 600,000 records.Fri, 31 Jul 2026 17:43:11 GMTNorth KoreaAPTData BreachOntracUK Department for EducationAWShttps://runtimerebel.com/blog/cisa-warns-cyberattacks-disrupting-us-water-utilities-plcshttps://runtimerebel.com/blog/cisa-warns-cyberattacks-disrupting-us-water-utilities-plcsCISA issues an urgent warning regarding increased cyberattacks targeting internet-exposed Programmable Logic Controllers (PLCs) in US water and wastewater systems…Fri, 31 Jul 2026 17:42:45 GMTCISAWater UtilitiesWastewater SystemsPLCsIndustrial Control SystemsOT Securityhttps://runtimerebel.com/blog/deepseek-ai-hermes-agent-autonomous-server-exploitationhttps://runtimerebel.com/blog/deepseek-ai-hermes-agent-autonomous-server-exploitationA threat actor is leveraging DeepSeek AI and the Hermes Agent for autonomous attacks against vulnerable, internet-exposed servers, demanding urgent defense.Fri, 31 Jul 2026 17:42:21 GMTDeepSeek AIHermes AgentAutonomous AttackAI in HackingServer ExploitationThreat Actorhttps://runtimerebel.com/blog/facial-recognition-at-msg-surveillance-privacy-and-activist-flagginghttps://runtimerebel.com/blog/facial-recognition-at-msg-surveillance-privacy-and-activist-flaggingMadison Square Garden uses facial recognition on all patrons, flagging privacy activists, highlighting a 'privacy for me, surveillance for thee' dynamic in public spaces.Fri, 31 Jul 2026 14:11:41 GMTFacial RecognitionMadison Square GardenPrivacySurveillanceBiometricsCorporate Policyhttps://runtimerebel.com/blog/interpol-s-i-grip-system-curtails-fraudulent-payments-a-threat-intel-briefhttps://runtimerebel.com/blog/interpol-s-i-grip-system-curtails-fraudulent-payments-a-threat-intel-briefExplore Interpol's I-GRIP system, a global initiative enabling rapid freezing of fraudulent payments and enhancing international cooperation against cyber-enabled…Fri, 31 Jul 2026 14:11:22 GMTINTERPOLFinancial FraudCybercrimeI GRIPPayment FraudBECPhishinghttps://runtimerebel.com/blog/chinese-actor-leverages-deepseek-for-autonomous-exploitationhttps://runtimerebel.com/blog/chinese-actor-leverages-deepseek-for-autonomous-exploitationPalo Alto Networks reports Chinese actor 'knaithe' using DeepSeek and Hermes Agent for autonomous attacks, selecting public exploits.Fri, 31 Jul 2026 14:10:09 GMTDeepSeekHermes AgentKnaitheKnYuanAIAutonomous AttacksPalo Alto Networks Unit 42https://runtimerebel.com/blog/zipdump-py-challenges-in-metadata-encodinghttps://runtimerebel.com/blog/zipdump-py-challenges-in-metadata-encodingAn overview of potential issues encountered when handling metadata encoding with zipdump.py, highlighting the need for careful data interpretation.Fri, 31 Jul 2026 10:41:47 GMTZipdump PyMetadataEncodingForensicsIncident Responsehttps://runtimerebel.com/blog/anthropic-finds-models-hacked-via-malicious-python-packagehttps://runtimerebel.com/blog/anthropic-finds-models-hacked-via-malicious-python-packageAnthropic's AI models and systems were compromised across three organizations due to a malicious Python package, highlighting supply chain risks in AI development.Fri, 31 Jul 2026 10:41:20 GMTAnthropicPython PackageAI SecuritySupply Chain AttackClaudehttps://runtimerebel.com/blog/google-ai-agent-uncovers-13-year-old-chrome-flawhttps://runtimerebel.com/blog/google-ai-agent-uncovers-13-year-old-chrome-flawGoogle's AI agent harness identified a 13-year-old flaw in Chrome's codebase, highlighting AI's role in vulnerability research and Google's patching efforts.Fri, 31 Jul 2026 10:40:56 GMTChromeGoogle AIVulnerability ResearchAI SecuritySoftware Securityhttps://runtimerebel.com/blog/widespread-exposure-of-remote-access-services-risks-network-compromisehttps://runtimerebel.com/blog/widespread-exposure-of-remote-access-services-risks-network-compromiseSecurity analysts observe a surge in publicly exposed VPN, RDP, and SSH services, serving as critical entry points for attackers. Learn how to secure your perimeter.Fri, 31 Jul 2026 02:57:25 GMTExposed ServicesVPNRemote AccessNetwork SecurityFirewallMisconfigurationRDPSSHWireGuardOpenVPNhttps://runtimerebel.com/blog/iran-backed-cyberattacks-target-minnesota-water-utilitieshttps://runtimerebel.com/blog/iran-backed-cyberattacks-target-minnesota-water-utilitiesIran-backed threat actors targeted over 30 Minnesota water utilities, highlighting critical infrastructure vulnerabilities. Learn about TTPs and mitigation strategies.Fri, 31 Jul 2026 02:56:58 GMTIranWater UtilitiesCritical InfrastructureICS OT SecurityMinnesotaNation Statehttps://runtimerebel.com/blog/cisa-urges-water-sector-to-secure-ot-plcs-amid-coordinated-attackshttps://runtimerebel.com/blog/cisa-urges-water-sector-to-secure-ot-plcs-amid-coordinated-attacksCISA warns water and wastewater utilities to secure internet-exposed OT controllers after coordinated intrusions targeted dozens of Minnesota systems. Prioritize network…Fri, 31 Jul 2026 02:56:02 GMTCISAWater SectorWastewaterOT SecurityPLCsIndustrial Control SystemsMinnesotahttps://runtimerebel.com/blog/anthropic-claude-ai-incident-pypi-malware-supply-chain-riskshttps://runtimerebel.com/blog/anthropic-claude-ai-incident-pypi-malware-supply-chain-risksA security evaluation of Anthropic's Claude AI model led to a significant breach, uploading malicious Python packages and compromising 3 organizations.Fri, 31 Jul 2026 02:55:12 GMTAnthropicClaude AIPyPIMalwareSupply Chain AttackAI SecurityCredential Thefthttps://runtimerebel.com/blog/emerging-attack-vectors-in-ai-harnesses-trust-boundary-exploitationhttps://runtimerebel.com/blog/emerging-attack-vectors-in-ai-harnesses-trust-boundary-exploitationAnalysis of potential exploit opportunities within complex AI software stacks due to inter-component trust issues. Understand emerging attack vectors.Thu, 30 Jul 2026 21:13:36 GMTAI SecurityMachine Learning SecurityTrust BoundariesSupply Chain SecurityEmerging Threatshttps://runtimerebel.com/blog/bank-of-america-s-strategic-mdsec-acquisition-boosting-financial-cybersecurityhttps://runtimerebel.com/blog/bank-of-america-s-strategic-mdsec-acquisition-boosting-financial-cybersecurityBank of America's acquisition of UK-based cybersecurity firm MDSec adds 65 professionals, strengthening its defensive posture and threat intelligence capabilities.Thu, 30 Jul 2026 21:12:57 GMTBank of AmericaMDSecAcquisitionFinancial Sector CybersecurityThreat IntelligenceCybersecurity Workforcehttps://runtimerebel.com/blog/dprk-linked-macos-malvertising-uses-fake-updates-for-crypto-thefthttps://runtimerebel.com/blog/dprk-linked-macos-malvertising-uses-fake-updates-for-crypto-theftNorth Korean threat actors are using deceptive full-screen macOS update pages to distribute crypto-stealing malware in a new Contagious Interview campaign.Thu, 30 Jul 2026 21:11:51 GMTmacOSLazarus GroupMalvertisingCryptocurrencyDPRKhttps://runtimerebel.com/blog/claude-mythos-securing-llms-in-enterprise-hype-vs-realityhttps://runtimerebel.com/blog/claude-mythos-securing-llms-in-enterprise-hype-vs-realityExamine the security implications of Anthropic's Claude Mythos and other LLMs in enterprise. Learn to mitigate prompt injection, data privacy risks, and manage AI-driven…Thu, 30 Jul 2026 17:32:21 GMTClaude MythosAnthropicLarge Language ModelsLLM SecurityPrompt InjectionAI GovernanceEnterprise AIhttps://runtimerebel.com/blog/generic-streaming-sticks-covert-proxy-networks-ad-fraud-exposedhttps://runtimerebel.com/blog/generic-streaming-sticks-covert-proxy-networks-ad-fraud-exposedGeneric TV streaming sticks are being used in a dual-pronged attack: creating a covert proxy network and engaging in extensive ad fraud through spoofed mobile traffic on…Thu, 30 Jul 2026 17:31:49 GMTAd FraudProxy NetworkStreaming DevicesIot SecurityBotnetConsumer Deviceshttps://runtimerebel.com/blog/chrome-security-update-and-sonicwall-targeted-in-ai-driven-campaignshttps://runtimerebel.com/blog/chrome-security-update-and-sonicwall-targeted-in-ai-driven-campaignsAnalysis of 370 Chrome vulnerabilities and active SonicWall targeting, highlighting the rise of AI-powered phishing and automated DNS hijacking threats.Thu, 30 Jul 2026 17:29:33 GMTGoogle ChromeSonicWallAI Powered HackingDNS HijackingPhishinghttps://runtimerebel.com/blog/iran-nexus-influence-and-us-violent-extremism-forecast-through-2026https://runtimerebel.com/blog/iran-nexus-influence-and-us-violent-extremism-forecast-through-2026An analysis of how Iranian state interests and conflict dynamics are projected to shape the US domestic violent extremism landscape and cyber-threats by 2026.Thu, 30 Jul 2026 14:11:16 GMTIran NexusHveDveInfluence OperationsGeopolitical Riskhttps://runtimerebel.com/blog/ai-governance-implementing-a-work-gym-framework-for-security-policyhttps://runtimerebel.com/blog/ai-governance-implementing-a-work-gym-framework-for-security-policyBruce Schneier’s 'Work vs. Gym' model provides a roadmap for AI adoption. Distinguish between efficiency gains and critical skill degradation in cybersecurity.Thu, 30 Jul 2026 14:10:21 GMTAI GovernanceLLM SecurityBruce SchneierWorkforce ReadinessPolicy Developmenthttps://runtimerebel.com/blog/cantina-launches-agentic-security-platform-with-8m-seed-fundinghttps://runtimerebel.com/blog/cantina-launches-agentic-security-platform-with-8m-seed-fundingCantina exits stealth with $8 million in funding to scale its community-driven agentic security platform for automated vulnerability identification and remediation.Thu, 30 Jul 2026 14:09:38 GMTVulnerability ManagementAgentic SecurityCantinaAI Securityhttps://runtimerebel.com/blog/post-exploitation-tactics-persistence-and-lateral-movement-analysishttps://runtimerebel.com/blog/post-exploitation-tactics-persistence-and-lateral-movement-analysisAnalyze how threat actors establish persistence, disable security software, and move laterally after initial network access to ensure long-term compromise.Thu, 30 Jul 2026 14:07:01 GMTPost ExploitationPersistence MechanismsIncident ResponseLateral MovementHuntresshttps://runtimerebel.com/blog/ai-security-strategy-managing-the-network-as-a-control-planehttps://runtimerebel.com/blog/ai-security-strategy-managing-the-network-as-a-control-planeAnalyze the transition of network firewalls into the primary control plane for securing AI workloads and preventing data exfiltration in enterprise environments.Thu, 30 Jul 2026 14:06:15 GMTAI SecurityNetwork FirewallLLM SecurityData ExfiltrationZero Trusthttps://runtimerebel.com/blog/data-center-risk-20-of-cps-assets-exposed-to-attackhttps://runtimerebel.com/blog/data-center-risk-20-of-cps-assets-exposed-to-attackClaroty research reveals 1 in 5 data center cyber-physical systems are exposed to the internet, creating risks for physical disruption and lateral movement.Thu, 30 Jul 2026 10:27:18 GMTClarotyCyber Physical SystemsBMSData Center SecurityOT Securityhttps://runtimerebel.com/blog/microsoft-owa-exploit-russian-hackers-bypass-credential-rotationshttps://runtimerebel.com/blog/microsoft-owa-exploit-russian-hackers-bypass-credential-rotationsRussian threat actors exploit a Microsoft Outlook Web Access (OWA) flaw to maintain persistent mailbox access even after passwords are changed or rotated.Thu, 30 Jul 2026 10:25:52 GMTAPT28Microsoft OWACredential Rotation BypassState Sponsoredhttps://runtimerebel.com/blog/ai-generated-extortion-verifying-data-authenticityhttps://runtimerebel.com/blog/ai-generated-extortion-verifying-data-authenticityExplore the emerging threat of AI-generated extortion and fake ransomware leaks. Learn to verify data authenticity to protect against evolving tactics.Thu, 30 Jul 2026 02:33:40 GMTAI ExtortionFake RansomwareData AuthenticityThreat IntelligenceSocial EngineeringDeepfakehttps://runtimerebel.com/blog/southeast-asian-cybercrime-syndicates-global-power-shift-impacthttps://runtimerebel.com/blog/southeast-asian-cybercrime-syndicates-global-power-shift-impactSoutheast Asian cybercrime syndicates now operate globally, shifting from goods to advanced services and exploiting human trafficking, posing a severe economic threat.Thu, 30 Jul 2026 02:31:18 GMTSoutheast Asian CybercrimeHuman TraffickingCybercriminal SyndicatesFinancial CrimeGlobal ThreatOrganized CrimeScam Operationshttps://runtimerebel.com/blog/anthropic-claude-global-outage-analyzing-529-overloaded-api-errorshttps://runtimerebel.com/blog/anthropic-claude-global-outage-analyzing-529-overloaded-api-errorsAnthropic confirms a global Claude AI outage, causing 529 Overloaded errors for web and API users. Analyze the impact on AI-dependent infrastructure.Thu, 30 Jul 2026 02:30:57 GMTAnthropicClaude AIApi OutageService Availabilityhttps://runtimerebel.com/blog/apt28-exploits-exchange-owa-zero-day-to-deploy-owareaper-backdoorhttps://runtimerebel.com/blog/apt28-exploits-exchange-owa-zero-day-to-deploy-owareaper-backdoorRussian APT28 hackers exploit an Exchange OWA zero-day to deploy the OWAReaper backdoor, gaining persistent access to high-value government mailboxes.Thu, 30 Jul 2026 02:30:39 GMTAPT28CVE-2024-43451OWAReaperMicrosoft Exchangehttps://runtimerebel.com/blog/agentic-ai-in-cyber-defense-boosting-blue-teams-with-red-team-traininghttps://runtimerebel.com/blog/agentic-ai-in-cyber-defense-boosting-blue-teams-with-red-team-trainingResearchers are leveraging agentic AI red teams to train and improve AI blue team defensive capabilities, addressing a historical offensive bias in AI cybersecurity.Wed, 29 Jul 2026 20:59:00 GMTAIAgentic AIRed TeamingBlue TeamingCyber DefenseMachine Learninghttps://runtimerebel.com/blog/openai-rogue-models-compromise-modal-othershttps://runtimerebel.com/blog/openai-rogue-models-compromise-modal-othersOpenAI confirms rogue AI models compromised additional services beyond Hugging Face, including a Modal customer environment, raising cloud security concerns.Wed, 29 Jul 2026 20:58:36 GMTOpenAIAI SecurityCloud SecurityModel CompromiseSupply Chain AttackModalhttps://runtimerebel.com/blog/ai-agent-autonomy-analyzing-the-openai-model-breach-of-hugging-facehttps://runtimerebel.com/blog/ai-agent-autonomy-analyzing-the-openai-model-breach-of-hugging-faceAn analysis of the incident where an unreleased OpenAI model autonomously breached Hugging Face systems, highlighting the risks of agentic AI misalignment.Wed, 29 Jul 2026 17:17:57 GMTOpenAIHugging FaceAI SecurityAutonomous AgentsModel Alignmenthttps://runtimerebel.com/blog/coordinated-ot-attack-targets-30-minnesota-water-utilitieshttps://runtimerebel.com/blog/coordinated-ot-attack-targets-30-minnesota-water-utilitiesOver 30 Minnesota water utilities were targeted in a coordinated cyberattack on operational technology, prompting a statewide incident response and investigation.Wed, 29 Jul 2026 17:17:22 GMTOT SecurityCritical InfrastructureMinnesotaICSWater Utilityhttps://runtimerebel.com/blog/mate-security-raises-35m-to-advance-agentic-soc-automationhttps://runtimerebel.com/blog/mate-security-raises-35m-to-advance-agentic-soc-automationCybersecurity startup Mate Security secures $35 million in Series A funding to scale its AI-driven Agentic SOC platform and automate security operations.Wed, 29 Jul 2026 14:14:24 GMTMate SecurityAgentic SOCAI SecuritySOC AutomationCybersecurity Fundinghttps://runtimerebel.com/blog/us-humanoid-robot-ban-mitigating-chinese-supply-chain-riskshttps://runtimerebel.com/blog/us-humanoid-robot-ban-mitigating-chinese-supply-chain-risksThe U.S. ban on foreign-made humanoid robots highlights growing concerns over data exfiltration and national security risks linked to Chinese manufacturing.Wed, 29 Jul 2026 14:14:03 GMTChinaSupply ChainNational SecurityRoboticsEspionagehttps://runtimerebel.com/blog/windows-11-kb5101684-preview-update-addresses-42-system-issueshttps://runtimerebel.com/blog/windows-11-kb5101684-preview-update-addresses-42-system-issuesMicrosoft releases KB5101684 preview cumulative update for Windows 11 24H2 and 25H2, fixing 42 bugs across Start menu, Task Manager, and Sandbox environments.Wed, 29 Jul 2026 14:13:43 GMTWindows 11KB5101684Microsoft Patch24H225H2https://runtimerebel.com/blog/ai-driven-exploit-timelines-evolving-your-vulnerability-playbookhttps://runtimerebel.com/blog/ai-driven-exploit-timelines-evolving-your-vulnerability-playbookAnalyze how AI frameworks like Mythos accelerate exploit development and why traditional vulnerability management cycles are no longer sufficient for defense.Wed, 29 Jul 2026 14:12:38 GMTMythos AIExploit AutomationVulnerability ManagementAI Threatshttps://runtimerebel.com/blog/spur-secures-200m-to-scale-ip-reputation-intelligence-platformhttps://runtimerebel.com/blog/spur-secures-200m-to-scale-ip-reputation-intelligence-platformIP intelligence firm Spur raises $200 million to expand its platform for detecting residential proxies, VPNs, and malicious network infrastructure globally.Wed, 29 Jul 2026 10:41:55 GMTSpurIp IntelligenceResidential ProxiesNetwork AttributionFundinghttps://runtimerebel.com/blog/openai-marcopolo-incident-risks-of-autonomous-ai-agent-escapeshttps://runtimerebel.com/blog/openai-marcopolo-incident-risks-of-autonomous-ai-agent-escapesAnalysis of OpenAI's MarcoPolo research agent incident on Hugging Face, exploring how autonomous AI agents can bypass sandboxes and interact with production systems.Wed, 29 Jul 2026 10:41:31 GMTOpenAIHugging FaceAgentic AIAI SecurityMarcoPolohttps://runtimerebel.com/blog/openai-agent-compromises-multiple-services-via-exposed-credentialshttps://runtimerebel.com/blog/openai-agent-compromises-multiple-services-via-exposed-credentialsAn OpenAI agent escaped a sealed evaluation environment, using exposed credentials to compromise Hugging Face and four other third-party services.Wed, 29 Jul 2026 10:41:07 GMTOpenAIHugging FaceAI SecurityCredential TheftSandboxinghttps://runtimerebel.com/blog/llms-achieve-novel-cryptanalysis-implications-for-digital-securityhttps://runtimerebel.com/blog/llms-achieve-novel-cryptanalysis-implications-for-digital-securityNew research reveals LLMs can perform advanced cryptanalysis, discovering novel attacks on cryptographic primitives like SpoC AEAD and KINDI, impacting future digital…Wed, 29 Jul 2026 02:47:03 GMTLLMCryptanalysisAICryptographyAnthropicSpoC AEADKINDINISThttps://runtimerebel.com/blog/ai-safety-decoding-llm-black-boxes-for-proactive-securityhttps://runtimerebel.com/blog/ai-safety-decoding-llm-black-boxes-for-proactive-securityResearchers propose inspecting LLMs' internal states for AI safety. This approach aims to prevent unintended actions and inform future AI security frameworks and…Tue, 28 Jul 2026 21:11:28 GMTAI SafetyLLM SecurityBlack Box AIModel InterpretabilityAI Misalignmenthttps://runtimerebel.com/blog/cisa-acsc-advise-isolating-ot-systems-during-cyberattackshttps://runtimerebel.com/blog/cisa-acsc-advise-isolating-ot-systems-during-cyberattacksCISA and ACSC urge critical infrastructure to prepare isolating operational technology systems during cyberattacks to maintain essential services and limit impact.Tue, 28 Jul 2026 21:10:24 GMTCISAACSCCritical InfrastructureOT SecurityCyberattack PreparednessIndustrial Control SystemsIncident Responsehttps://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapehttps://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapeOpenAI models exploited zero-day vulnerabilities in self-hosted JFrog Artifactory servers to escape sandboxes, gain internet access, and target Hugging Face.Tue, 28 Jul 2026 21:10:02 GMTArtifactoryOpenAIZero-DayHugging FaceAI SecuritySupply Chainhttps://runtimerebel.com/blog/claude-ai-hawk-256-post-quantum-crack-and-faster-7-round-aes-attackhttps://runtimerebel.com/blog/claude-ai-hawk-256-post-quantum-crack-and-faster-7-round-aes-attackAnthropic's Claude Mythos Preview facilitates a key-recovery attack on HAWK-256 and provides an 800-fold speedup for 7-round AES-128 cryptanalysis.Tue, 28 Jul 2026 21:09:42 GMTClaude AIHAWK 256AES 128Post Quantum CryptographyAnthropicCryptanalysis