Surviva-List
The Bundibugyo Strain of Ebola Is Active in DRC Right Now — And It's the Most Severe Event on Earth Today
Tuesday, September 15, 2026
The Signal
Bundibugyo virus is moving through eastern Democratic Republic of the Congo this morning, and WHO's confirmed case count climbed from 2,145 in mid-July to 3,626 by the first of August. Treatment units are absorbing that curve with staff who cannot be vaccinated against it. The licensed Ebola vaccine protects against the Zaire species. This is not the Zaire species.
⚡
The Brief
Bundibugyo virus disease in the Democratic Republic of the Congo is the most severe tracked event on Earth today, rated CRITICAL by both CDC and WHO. Confirmed cases went from 2,145 on July 17 to 3,626 on August 1. The licensed Ebola vaccine does not cover this species. Meanwhile: six Iowa counties are under a flash flood warning until 9 AM CDT, Great Sitkin and Kilauea both sit at aviation ORANGE, and CISA flagged an actively exploited SQL injection flaw in Cisco's Secure Email Gateway.
By The Numbers
3,626
Confirmed Bundibugyo cases, DRC
WHO's cumulative count as of the August 1 Disease Outbreak News, up from 2,145 just fifteen days earlier.
1,481
New confirmed cases in 15 days
That is roughly 99 new laboratory-confirmed filovirus infections per day during the steepest stretch of this outbreak.
6
Iowa counties under flash flood warning
Adair, Audubon, Cass, Dallas, Guthrie and Madison, issued at 3:01 AM CDT and running until 9 AM, with the Middle Raccoon and North River basins taking the water.
2
Volcanoes at aviation color ORANGE
Great Sitkin sits beneath the North Pacific great circle air route and Kilauea sits upwind of Kaʻū and Kona; both were reissued by USGS on Monday.
“A filovirus that kills fewer people is not a gentler filovirus. It is a quieter one. And quiet is exactly how outbreaks cross borders.”
Lead Story
Bundibugyo virus disease has been killing people in the Democratic Republic of the Congo week after week since spring, and as of this morning it sits at the top of a global feed tracking 75 separate emergencies as the single most severe event anywhere on Earth. Six events carry a CRITICAL rating today. This one has a body count that has been climbing for five straight WHO reporting cycles.Read the arithmetic slowly, because it is the story. On July 17, WHO logged 2,145 confirmed cases. By August 1, the cumulative figure was 3,626. That is 1,481 additional confirmed infections in fifteen days, in a region of eastern Congo where armed conflict has already displaced millions and where a treatment unit is often a tent with a generator and a plastic barrier. Every one of those cases required a contact list. Every contact list required someone willing to walk into a village and ask questions that families have learned to fear.Here is what almost nobody says out loud. Bundibugyo, first identified in Uganda's Bundibugyo District in 2007, is a genetically distinct ebolavirus species, and the entire pharmaceutical arsenal built after 2014 was built against Zaire ebolavirus. The licensed vaccine, the approved monoclonal antibodies, the ring vaccination playbook: Zaire. Against Bundibugyo the world reverts to 1976 medicine. Isolation. Contact tracing. Safe burial. Supportive care. Courage.The rest of today's briefing runs wide: six Iowa counties under a flash flood warning that expires at 9 AM, two volcanoes at aviation ORANGE, a geomagnetic K-index touching 4, and a CISA exploit alert sitting on the exact email software hospitals use. Stay with me.
🛡 Why This Matters
Filoviruses travel by airplane, not by air. The realistic US exposure is a returning traveler arriving at a hospital whose clinicians assume the standard Ebola vaccine and monoclonal antibodies apply, because for this species they do not, and that assumption costs hours in an infection where hours are the whole game.
Watch:Watch the next WHO Disease Outbreak News update for two specific things: whether Uganda reappears on the confirmed case line, and whether the 15-day case increase slows below the 1,481 figure logged between July 17 and August 1.
Recent Developments
CONFIDENTIAL
Five fronts were live overnight and none of them share a mechanism. Monsoon moisture parked over the Southwest and Midwest. The Pacific rim shrugged five times between Colombia and New Caledonia. Two Alaskan and Hawaiian volcanoes held at ORANGE. The sun pushed the planetary K-index to 4. And a federal cyber agency added a critical exploit to its catalog.
⚡ Key Insight
What connects them is not physics, it is capacity: the same emergency managers, the same hospital networks, the same federal budget line.
World Coverage
The Global Wire
Six Iowa Counties Get a Six-Hour Flash Flood Window Before Sunrise
Guthrie Center and Winterset, Iowa, United States · flood
NWS Des Moines issued the warning at 3:01 AM CDT for Adair, Audubon, Cass, Dallas, Guthrie and Madison counties, with southwestern Dallas County called out by name. The Middle Raccoon and North River basins are the ones to watch, and MODIS NDWI imagery from Sunday already showed saturated ground across the corridor. Rain on soil that cannot take more is how a warning becomes a rescue.
M5.0 Shakes the Ground 69 km Northwest of Lae, Papua New Guinea
Morobe Province, Papua New Guinea · earthquake
USGS logged the magnitude 5.0 on Monday with no tsunami threat issued. Lae is PNG's second city and its primary cargo port, roughly 150,000 people funneling most of the country's imported goods through one harbor. Moderate quakes rarely make headlines here, which is precisely why the port's structural inspection cycle matters more than the magnitude number.
Great Sitkin and Kilauea Both Holding at Aviation ORANGE
Aleutian Islands, Alaska and Hawaiʻi Island, United States · volcanic
Alaska Volcano Observatory reissued Great Sitkin at ORANGE / WATCH on Monday evening; Hawaiian Volcano Observatory did the same for Kilauea hours earlier. Great Sitkin sits under the North Pacific great circle route that carries a large share of transpacific air freight. Kilauea's issue is downwind: vog drifting toward Kaʻū and Kona communities with respiratory-vulnerable residents.
Planetary K-Index Touches 4 as Electron Flux Alert Enters a Third Day
Global, Earth-facing solar activity · space
NOAA SWPC recorded the K-index of 4 threshold at 1802 UTC Monday and holds a G1 geomagnetic storm watch. Separately, the 2 MeV electron integral flux alert has now continued across three consecutive issuances, which is a satellite charging concern more than a grid concern. HF radio operators at high latitudes should expect degraded propagation.
CISA Flags an Actively Exploited Flaw in the Email Gateway Hospitals Use
Cyberspace, All US Critical Infrastructure · other
Cisco's Secure Email Gateway contains a SQL injection vulnerability allowing unauthenticated remote exploitation, added to CISA's Known Exploited Vulnerabilities catalog on Monday. It joins the ConnectWise ScreenConnect privilege flaw from September 11. Health systems run both. During an active filovirus outbreak abroad, the software that carries lab results and case notifications is not a back-office concern.
Read the titles of WHO's last five Disease Outbreak News reports in sequence and something jumps out. The July 17 report is titled for the Democratic Republic of the Congo and Uganda. Every report since, August 1, August 14, August 28 and September 10, says additional cases have been reported only in the DRC. That is not a clerical detail. That is a country detecting an imported filovirus chain and closing it, which is one of the hardest things a public health system can do, and almost nobody outside the response has said it out loud.
⚡ Key Insight
Now the harder thread.
The global filovirus toolkit was purpose-built for Zaire ebolavirus after 2014, when that species reached Dallas, Madrid and London. The licensed vaccine and the approved monoclonal antibodies are species-specific. Bundibugyo gets none of them. Which means the case fatality rate, historically around 25 to 40 percent rather than Zaire's brutal 60 to 90, is a double-edged number: more survivors moving through communities, longer transmission chains, and a slower trigger on international alarm. Lower lethality buys the virus time.
Put those together and the picture sharpens. This outbreak is severe not because the pathogen is unusually vicious, but because it landed in the one filovirus species the world never finished arming against, in the one region where conflict has already hollowed out surveillance. That combination is the actual emergency.
Regional Analysis
TOP SECRET
Eastern DRC is the pressure point. North Kivu and Ituri provinces hold well over 10 million people between them, with millions already displaced by armed conflict, and health workers who cannot receive a protective vaccine for this species walk into isolation units every shift. Cross-border movement toward western Uganda runs through trading towns, not border posts, and the Kampala corridor is a trade artery, not a checkpoint. Response capacity here is measured in functioning cold chains and motorcycle fuel.
The region nobody is watching: the Upper Rio Grande headwaters in Colorado.
⚡ Key Insight
NWS Pueblo has a flood watch running through Thursday midnight for the Eastern San Juan Mountains above and below 10,000 feet, while NWS Albuquerque holds a separate watch for the San Francisco River Valley and San Agustin Plains.
Same monsoon surge, two states, one river system. What falls on the San Juans this week reaches Elephant Butte in weeks and shapes New Mexico's irrigation allocation months from now.
Impact Assessment
TOP SECRET
Second-order effects start with minerals. The DRC supplies roughly 70 percent of the world's cobalt, and outbreak-driven movement restrictions in the east have historically slowed transport corridors long before they slow production. Add the Kampala trade route, the airline screening protocols that follow any filovirus escalation, and the reallocation of WHO surge staff away from measles and cholera programs already running in the same provinces. An Ebola response does not add capacity to a health system. It borrows it.
⚡ Key Insight
Now run the chain 72 hours forward on the domestic side.
Monsoon rain lands on saturated Iowa and Missouri basins, the Kansas City metro's six-county flood watch covers 2.2 million people in the Blue River and Brush Creek drainages, FEMA is simultaneously processing Disaster 9808 housing registrations across five Pennsylvania counties, and a critical email gateway exploit sits unpatched in some fraction of the hospital networks that would handle both. The failure is never one system. It is the overlap.
Surviva Spotlight
Powered by Real-Time Intelligence
Here is what today looked like inside the platform. At 3:01 AM CDT, when NWS Des Moines issued the flash flood warning, Surviva's polygon matching fired to devices inside the actual warning shape across Adair, Audubon, Cass, Dallas, Guthrie and Madison counties, not to everyone in Iowa. That distinction is the whole product. A statewide alert teaches people to ignore alerts. A block-level alert teaches people to move.On the health side, the WHO Disease Outbreak News feed for Bundibugyo is ingested the same hour it publishes, tagged by species rather than by the word Ebola, because those are different operational pictures. And Monday's Cisco exploit alert routed to users who flagged healthcare or critical infrastructure in their profile. This is what it means to be prepared before the headline breaks.
The One Thing
Today's Essential Takeaway
If you take nothing else from today's briefing: the world built a vaccine for the Ebola that reached Dallas. It did not build one for the Ebola killing people in eastern Congo this morning. Zaire ebolavirus got a licensed vaccine and two approved antibody therapies because in 2014 it stepped onto an airplane and frightened wealthy countries. Bundibugyo, identified in 2007, has never had that moment, so a nurse in North Kivu this morning gowns up against a filovirus with nothing in her bloodstream to protect her.I am not telling you this to make you angry at a system. I am telling you because the pattern repeats in smaller ways everywhere, including where you live. We fund the hazard that already humiliated us, and we leave the adjacent one uncovered. The flood map gets updated after the flood. The building code gets rewritten after the collapse. Preparedness that only follows grief is not preparedness. It is bookkeeping.
— Ato Phoenix
Mission Briefing
NEXT 24 HOURS
If you live in Adair, Audubon, Cass, Dallas, Guthrie or Madison County, Iowa, do not drive any low-water crossing before the 9 AM CDT warning expiry, and check road status at 511ia.org before you leave the house.
Kansas City metro readers across Johnson, Wyandotte, Leavenworth, Platte, Clay and Jackson counties: move vehicles off Brush Creek and Blue River lowland parking now, because the flood watch runs to 1 PM Wednesday.
Colorado readers in the Upper Rio Grande Valley should check whether your property sits below a recent burn scar, since post-fire debris flows need far less rain than normal terrain. (water.weather.gov)
Anyone with international travel to East or Central Africa in the next 90 days: read the WHO Disease Outbreak News entry for Bundibugyo virus disease before you book, not after. (who.int/emergencies/disease-outbreak-news)
Add one line to your household medical card: recent international travel, with dates. If a fever ever puts you in an ER, that line changes the differential diagnosis immediately.
If you manage IT for any healthcare, water or energy organization, patch the Cisco Secure Email Gateway SQL injection flaw today, because CISA added it to the Known Exploited catalog on Monday. (cisa.gov/known-exploited-vulnerabilities-catalog)
Homeowners in Adams, Chester, Schuylkill, Somerset or Allegheny counties, Pennsylvania: Disaster 9808 registrations are open and inspection counts are still at zero, meaning you are early in the queue, not late. (disasterassistance.gov)
Hawaiʻi Island residents in Kaʻū and Kona should stage N95 masks near the door while Kilauea holds at ORANGE, since vog exposure is gradual and easy to underestimate.
High-latitude HF radio operators and precision-GPS users: expect intermittent degradation through midweek with the G1 watch active, and have a non-satellite backup plan for any critical task. (swpc.noaa.gov)
Everyone: verify that one out-of-state contact knows they are your family's message relay, and text them today so the number is fresh in both phones.
Preparedness Guidance
Start with the outbreak, because the lesson generalizes. Bundibugyo spreads through direct contact with the blood, vomit, stool or other body fluids of a symptomatic person, and with contaminated surfaces and burial practices. It is not airborne. That single fact should reshape how you think about filovirus risk: your exposure pathway is care and contact, not proximity. For a US household, the practical action is narrow and real. If anyone in your family travels to Central or East Africa, note the dates on a card in your wallet and hand that card to a clinician the moment a fever appears, because the differential diagnosis for travel-associated fever changes entirely when the travel history is on the table in minute one instead of hour six.
Now the flood threat, which is the one most of you actually face today. Six Iowa counties are under a flash flood warning until 9 AM CDT, and the Kansas City metro watch runs until 1 PM Wednesday across roughly 2.2 million people. Your block, not your region: if you live on Brush Creek or anywhere in the Blue River lowlands, you are in the drainage that killed 25 people in 1977, and the rule is not complicated. Six inches of moving water takes an adult off their feet. Twelve inches floats most cars. If you have a private well and water reaches the casing, treat your tap as contaminated until a lab says otherwise, and remember that boiling requires power the storm may take.
Here is the connecting principle, and it runs from North Kivu to New Hanover County. Every one of today's threats is defeated by the same thing: knowing your specific exposure pathway and acting on it before the alert arrives. Not general readiness. Pathway readiness. The nurse in Congo knows her risk is contact, so she gowns. The family in Winterset knows their risk is a low-water crossing, so they take the long way. Name your pathway. Your move.
The Phoenix Signal
Pattern recognition from the editorial desk
Something has been sitting with me since the WHO report landed. We have gotten very good at building countermeasures for the exact pathogen that last frightened us, and almost comically bad at building them for the one standing next to it. Bundibugyo has been a named ebolavirus species for nineteen years. It still has no licensed vaccine. Meanwhile I spent this morning reading five flood watches, two volcano notices, and a cyber exploit alert, and the common thread is the same human habit: we fund the memory, not the map. I do not think that is cynicism. I think it is the single most fixable thing in this field.
— Ato Phoenix
Coming Next
Tomorrow's Watch
Uganda's Line on the WHO Case Table
North Kivu, DRC and Western Uganda · 3-7 days
Watch for:Five consecutive WHO Disease Outbreak News reports have stated additional Bundibugyo cases were reported only in the DRC. Watch whether the next report changes that phrasing.
Escalation signal:A new Ugandan confirmed case reported outside an existing contact list.
Rio Grande Headwaters Runoff Window
Eastern San Juan Mountains, Colorado · 24-48h
Watch for:NWS Pueblo holds a flood watch through Thursday midnight above and below 10,000 feet. Watch for any upgrade to a warning over a burn scar drainage.
Escalation signal:A debris flow warning issued for any Upper Rio Grande tributary.
Great Sitkin Aviation Color Code
Aleutian Islands, Alaska · next 24h
Watch for:AVO reissued ORANGE / WATCH on Monday evening. The metric that matters is ash column height, not lava output, because the North Pacific great circle route runs overhead.
Escalation signal:An upgrade to aviation color RED or an ash advisory above flight level 200.
G1 Storm Verification and Electron Flux Persistence
Global, high-latitude · next 24h
Watch for:NOAA SWPC holds a G1 watch with the K-index at 4 and the 2 MeV electron flux alert in its third continued issuance. Watch for a Kp 5 escalation notice.
Escalation signal:A G2 warning issued, which widens GPS degradation and the visible aurora line.
Cisco Email Gateway Exploitation in Healthcare Networks
United States critical infrastructure · 24-48h
Watch for:CISA added the Cisco Secure Email Gateway SQL injection flaw to the Known Exploited catalog on Monday. Watch for any HHS sector alert naming hospital systems.
Escalation signal:A confirmed intrusion at a health system disrupting lab or case reporting.
Three things have my attention. First, the next WHO Disease Outbreak News cycle for Bundibugyo, where the question is whether Uganda reappears on the confirmed case line after five consecutive reports saying cases were logged only in the DRC. Second, the NWS Pueblo flood watch for the Eastern San Juan Mountains, which runs through Thursday midnight and feeds the Rio Grande headwaters. Third, Great Sitkin, where an ORANGE-to-RED shift reroutes transpacific air cargo within hours.
What I will actually be reading overnight is quieter than any of that: the inspection counts on FEMA Disaster 9808 in Pennsylvania. Six registrations, zero inspections. The gap between those two numbers is where recovery either starts or stalls, and nobody covers it. Tomorrow we will know which.
Stay satisfyingly prepared. — The Surviva-List Editorial Team
Editor's Note
From the Editorial Desk
Seventy-five events crossed the feed overnight and six of them carry a CRITICAL rating. Only one has been killing people continuously since spring: Bundibugyo virus disease in eastern Congo. WHO's twelfth situation report, filed September 10, locked today's lead.Watch the North Kivu to western Uganda corridor over the next 48 hours. The specific thing to monitor is whether the next WHO update adds Uganda back onto the case line. That one word changes the entire response map.Bundibugyo is not the Ebola you remember from 2014, and knowing the difference is the whole point of today's edition.
— Ato Phoenix, Editor-in-Chief