Skip to main content
RuntimeRebel
LATEST — AI Token Jacking: How Cybercriminals Steal API Keys for Profit — Talos Intelligence at Black Hat: Diverse Journeys in Threat Research — Meta AI Models Exploit Vulnerabilities During Security Testing — khunt Toolkit Leverages SQLi in Oracle for SYSTEM Access — Hugging Face Compromise by Autonomous AI Agents: Mitigating Risks

Cybersecurity news & threat intelligence

Automated threat intelligence for security practitioners: CVE tracking against CISA's KEV catalog, severity-rated breach and vulnerability reporting, and a free JSON API over the whole corpus.

16 sources · updated every 8 hours · last log

Global Threat Level

CRITICAL LEVEL 5/5

Multiple critical threats under active exploitation

Supply Chain 27%
Ransomware 22%
Phishing 21%
Zero-Days 21%
Full threat dashboard

Corpus Snapshot

Featured Story

INFO Threat Intel

Cloudflare's Flue Automates Open Source Issue Triage

Cloudflare details how its Flue framework automates Astro's GitHub issue triage, significantly reducing open issues and improving maintainer efficiency.

  • Immediate impact: Improves open-source project health and significantly reduces maintainer burden.
  • Affected systems: Cloudflare's Astro project, applicable to any GitHub-hosted open-source repository.
  • Remediation: Explore agent-based automation frameworks like Flue for managing project issues.
Runtime Rebel Intel
4 min read · Aug 6, 2026

Advertisement

Latest Intel

HIGH

AI Token Jacking: How Cybercriminals Steal API Keys for Profit

#Cloud Security #Credential Theft
INFO

Talos Intelligence at Black Hat: Diverse Journeys in Threat Research

#Threat Intelligence #Incident Response
MED

Meta AI Models Exploit Vulnerabilities During Security Testing

#AI Security
HIGH

khunt Toolkit Leverages SQLi in Oracle for SYSTEM Access

#SQL Injection #Post Exploitation
HIGH

Hugging Face Compromise by Autonomous AI Agents: Mitigating Risks

#AI Agents #Hugging Face
HIGH

Keyv npm Supply-Chain Attack: Worm Infection and Dead-Man Switch

#Supply Chain Attack #NPM
MED

Automated SSH Actors Achieve Persistence in 22 Seconds

#Ransomware #Brute Force
INFO

Direct-to-IP Malware C2 Bypass: Threat Landscape and ZT‑IP Mitigation

#C2 #Malware
INFO

Frontier AI and Autonomous Zero-Day Discovery in Open-Source Software

#Zero-Day #Supply Chain Attack
INFO

Talos Q2 2026 Report: Phishing and Living-off-the-Land Trends

#Phishing #Ransomware
View all logs 3,145 total articles

Last completed week — Week 31, 2026

Jul 27 – Aug 2 149 articles 20 CVEs tracked Severity mix: 13 critical, 72 high, 19 medium, 2 low, 43 info.
  1. CVE-2026-50522: SharePoint RCE via Deserialization — Patch Now
  2. CVE-2026-60137: WordPress Core SQL Injection to RCE — Patch Now
  3. CVE-2026-16232: Check Point SmartConsole Admin Bypass via Auth Flaw
Read the Week 31, 2026 recap All weekly recaps

Severity Trend — last 6 months

306 612 Mar: 130 info articles Mar: 6 low articles Mar: 111 medium articles Mar: 313 high articles Mar: 52 critical articles Mar Apr: 113 info articles Apr: 9 low articles Apr: 113 medium articles Apr: 303 high articles Apr: 61 critical articles Apr May: 112 info articles May: 5 low articles May: 96 medium articles May: 319 high articles May: 52 critical articles May Jun: 126 info articles Jun: 2 low articles Jun: 92 medium articles Jun: 267 high articles Jun: 48 critical articles Jun Jul: 159 info articles Jul: 1 low article Jul: 88 medium articles Jul: 305 high articles Jul: 46 critical articles Jul Aug (to date): 14 info articles Aug (to date): 2 low articles Aug (to date): 10 medium articles Aug (to date): 22 high articles Aug (to date): 6 critical articles Aug*

* Aug is the current month, counted to date — not a full month against the five beside it.

View as table
Month InfoLowMediumHighCritical Total
Mar 130611131352 612
Apr 113911330361 599
May 11259631952 584
Jun 12629226748 535
Jul 15918830546 599
Aug (to date) 14210226 54

Dashboards & Tools

Stay Current

Never miss a critical threat

RuntimeRebel publishes new threat intelligence every 8 hours. Subscribe via email or RSS to receive CVE alerts, breach reports, and security analysis.

RSS