<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>RuntimeRebel — #Threat Actors</title><description>Cybersecurity articles tagged #Threat Actors on RuntimeRebel.</description><link>https://runtimerebel.com</link><item><title>LLMJacking: Threat Actors Monetize Compromised Cloud LLMs</title><link>https://runtimerebel.com/blog/llmjacking-threat-actors-monetize-compromised-cloud-llms</link><guid isPermaLink="true">https://runtimerebel.com/blog/llmjacking-threat-actors-monetize-compromised-cloud-llms</guid><description>Threat actors are hijacking enterprise LLMs and cloud resources, leading to significant fraudulent charges and data risks. Learn about LLMJacking tactics.</description><pubDate>Mon, 02 Nov 2026 17:37:36 GMT</pubDate><category>Cloud Security</category><category>LLM</category><category>API Keys</category><category>LLMJacking</category><category>Threat Actors</category></item><item><title>ClickFix Campaigns: Threat Actors Exploit Legitimate Services</title><link>https://runtimerebel.com/blog/clickfix-campaigns-threat-actors-exploit-legitimate-services</link><guid isPermaLink="true">https://runtimerebel.com/blog/clickfix-campaigns-threat-actors-exploit-legitimate-services</guid><description>Threat actors leverage social engineering in &apos;ClickFix&apos; campaigns, abusing legitimate services to gain persistent access and compromise organizations.</description><pubDate>Tue, 08 Sep 2026 19:11:12 GMT</pubDate><category>Social Engineering</category><category>Endpoint Security</category><category>ClickFix Campaigns</category><category>Persistent Access</category><category>Threat Actors</category></item><item><title>Malware Crypting Services: Evading Detection and Analysis</title><link>https://runtimerebel.com/blog/malware-crypting-services-evading-detection-and-analysis</link><guid isPermaLink="true">https://runtimerebel.com/blog/malware-crypting-services-evading-detection-and-analysis</guid><description>Threat actors use crypting services to modify malicious payloads, bypassing AV/EDR detection and complicating analysis. This enables stealthier, persistent campaigns.</description><pubDate>Thu, 13 Aug 2026 16:48:33 GMT</pubDate><category>Malware Evasion</category><category>Endpoint Security</category><category>Anti Analysis</category><category>Crypting Services</category><category>Threat Actors</category></item><item><title>Unit 42: AI Enhances Attack Efficiency, Not Novel TTPs</title><link>https://runtimerebel.com/blog/unit-42-ai-enhances-attack-efficiency-not-novel-ttps</link><guid isPermaLink="true">https://runtimerebel.com/blog/unit-42-ai-enhances-attack-efficiency-not-novel-ttps</guid><description>Unit 42&apos;s report reveals AI accelerates attacker operations, shortening attack lifecycles without fundamentally changing TTPs.</description><pubDate>Sat, 08 Aug 2026 16:26:01 GMT</pubDate><category>AI</category><category>Cyberattacks</category><category>Incident Response</category><category>Unit 42</category><category>Threat Actors</category></item><item><title>Adversaries Weaponize AI: New Threat Landscape &amp; Defensive Strategies</title><link>https://runtimerebel.com/blog/adversaries-weaponize-ai-new-threat-landscape-defensive-strategies</link><guid isPermaLink="true">https://runtimerebel.com/blog/adversaries-weaponize-ai-new-threat-landscape-defensive-strategies</guid><description>An analysis of how adversaries weaponize AI to generate malicious code, scale fraud, and accelerate zero-day discovery, shortening response times for defenders.</description><pubDate>Fri, 07 Aug 2026 02:12:30 GMT</pubDate><category>AI Weaponization</category><category>Cybersecurity Strategy</category><category>Defensive AI</category><category>Zero Day Exploits</category><category>Threat Actors</category></item><item><title>Cybercrime&apos;s Coordination Gap: Attackers Outpace Law Enforcement</title><link>https://runtimerebel.com/blog/cybercrime-s-coordination-gap-attackers-outpace-law-enforcement</link><guid isPermaLink="true">https://runtimerebel.com/blog/cybercrime-s-coordination-gap-attackers-outpace-law-enforcement</guid><description>Analysis of the widening gap between agile cybercrime organizations and fragmented global law enforcement efforts, highlighting the impact on cybersecurity.</description><pubDate>Fri, 07 Aug 2026 02:11:05 GMT</pubDate><category>Cybercrime</category><category>Law Enforcement</category><category>Threat Actors</category><category>Information Sharing</category><category>Global Cooperation</category></item><item><title>Advanced Persistent Threat Tracking: Intelligence for Detection</title><link>https://runtimerebel.com/blog/advanced-persistent-threat-tracking-intelligence-for-detection</link><guid isPermaLink="true">https://runtimerebel.com/blog/advanced-persistent-threat-tracking-intelligence-for-detection</guid><description>Understand the methodologies and critical role of real-time cyber intelligence in detecting and mitigating Advanced Persistent Threat (APT) group activities.</description><pubDate>Fri, 17 Jul 2026 17:15:19 GMT</pubDate><category>APT</category><category>Threat Intelligence</category><category>Cybersecurity</category><category>Detection</category><category>Threat Actors</category><category>Real Time Intelligence</category></item><item><title>Axios NPM Compromise: Supply Chain Threat Analysis</title><link>https://runtimerebel.com/blog/axios-npm-compromise-supply-chain-threat-analysis</link><guid isPermaLink="true">https://runtimerebel.com/blog/axios-npm-compromise-supply-chain-threat-analysis</guid><description>Analysis of the Axios NPM package compromise, a potential supply chain attack impacting JavaScript HTTP client library users, possibly by North Korean threat actors.</description><pubDate>Wed, 01 Apr 2026 00:44:25 GMT</pubDate><category>Axios</category><category>NPM</category><category>JavaScript</category><category>Supply Chain Attack</category><category>Threat Actors</category></item></channel></rss>