Surviva-List

The Ebola Strain Named After a Ugandan Town Just Crossed Back Into Congo — And WHO Just Called It Critical

Tuesday, September 22, 2026

The Signal

Bundibugyo virus is moving through 60 health zones of eastern Democratic Republic of the Congo this morning, and the Ugandan district it was named for sits directly across the border. WHO and CDC both carry it at critical. Contact tracers are chasing a frontier that traders, minibuses and grieving families cross every single day.

The Ebola Strain Named After a Ugandan Town Just Crossed Back Into Congo — And WHO Just Called It Critical
⚡

The Brief

Bundibugyo ebolavirus is active across 60 Congolese health zones with WHO and CDC both at critical, and no licensed vaccine exists for this strain. Great Sitkin and Kilauea both hold at ORANGE aviation code. Southeast Kentucky and southwest Colorado are under simultaneous flood alerts. CISA flagged a critical Linux kernel TLS flaw touching all US critical infrastructure. And DHS quietly finalized a rule on September 18 that reshapes where America's protective gear comes from.

By The Numbers

3,626

Confirmed Bundibugyo cases, DRC (Aug 1 WHO report)

Up from 2,145 in mid-July, a 69% rise across roughly two weeks of reporting.

60

Health zones now affected, up from 54

Geographic spread, not case count, is the metric that tells you a response is losing ground.

2

US volcanoes at ORANGE aviation color code

Great Sitkin in the Aleutians and Kilauea on Hawai'i Island both sit one tier below eruption warning.

$13,200

Minimum out-of-pocket flood recovery gap per household

NOAA puts full flood recovery at $18,000 to $25,000; FEMA's average grant is $4,800.

“The vaccine most people picture when they hear the word Ebola does not work on this strain. Against Bundibugyo, the countermeasure is human behavior.”

Lead Story

Bundibugyo virus, the Ebola strain named for a Ugandan border district of banana farms and market roads, is now the most severe public health event anywhere in our intelligence feed, and it is sitting on a frontier that thousands of people cross before breakfast. WHO rates it critical. CDC rates it critical. Both ratings landed in the same reporting window.Here are the numbers behind the numbers. In mid-July, WHO's Disease Outbreak News counted 2,145 confirmed cases under a headline that named two countries, Congo and Uganda. By the August 1 report, the Congolese total alone stood at 3,626. By August 28, the outbreak had widened from 54 health zones to 60. That is not a flare-up burning itself out in a single village. That is a pathogen that has found the road network.And here is the part almost nobody outside the response community says plainly: the vaccine most people picture when they hear the word Ebola does not apply here. Licensed vaccines and the two approved monoclonal antibody treatments target Zaire ebolavirus. Bundibugyo is a different species. Historically it has killed roughly a quarter to a third of the people it infects, and against it the world's pharmaceutical shield is mostly a blank wall.So the defense is people. Tracers, burial teams, triage nurses, border health officers, radio announcers. Below, we follow that logic through a Federal Register rule signed four days ago in Washington, two volcanoes holding at orange, a flood corridor in Appalachia, and a Linux flaw CISA just rated critical.

🛡 Why This Matters

No licensed vaccine or monoclonal antibody exists for Bundibugyo virus; the stockpiled countermeasures protect against Zaire ebolavirus only. That makes surveillance, travel screening and clinical suspicion the entire defense, including at any US hospital that sees a returning traveler with fever.

Watch:Watch whether WHO's next Disease Outbreak News restores Uganda to the title line, and whether the health zone count moves past 60, because both readings signal the corridor has reopened rather than closed.

Recent Developments

CONFIDENTIAL

Seventy-five events, three of them critical, across four broad regions and a quiet planet is not what the feed looks like. Eleven earthquakes logged overnight, none destructive. Twenty NWS alerts, most of them water. Two volcano observatories holding steady at orange without escalating.

⚡ Key Insight

The pattern here is not intensity, it is duration: almost everything on the board today has been on the board for weeks, which is exactly the condition under which attention fails and response budgets quietly run dry.

World Coverage

The Global Wire

M5.3 Rolls Under the Sarangani Sea South of Mindanao

Sarangani, Philippines · earthquake

A magnitude 5.3 breaks 97 km south of Sarangani, with no tsunami threat issued. It is the largest event in a 24-hour window that also produced a M4.7 near Ende, Indonesia and a M4.5 off Namie, Japan. Three separate segments of the circum-Pacific belt, all releasing modestly, all within a day.

Colorado's San Juan Basin Sits Under a Three-Day Flood Watch

Southwest San Juan Mountains, Colorado · flood

NWS Grand Junction issued a flood watch at 10:35 PM Monday running through Thursday midnight for the southwest San Juans and San Juan River Basin. Burn-scar drainages in this terrain convert an inch of rain into a debris flow within minutes. Mountain towns downstream of old fire perimeters have the shortest reaction window in the state.

Two American Volcanoes Hold at Orange, Neither Escalating

Great Sitkin, Alaska and Kilauea, Hawai'i · volcanic

Alaska Volcano Observatory and Hawaiian Volcano Observatory both reissued WATCH status at aviation color code ORANGE on Monday. Great Sitkin threatens North Pacific flight corridors carrying thousands of passengers daily; Kilauea threatens Volcano Village, four miles from the caldera. Holding steady for weeks is unusual, and it is not the same as calming down.

CISA Adds a Linux Kernel Flaw Rated Critical for All US Infrastructure

Cyberspace, United States · other

CISA's Known Exploited Vulnerabilities catalog absorbed 18 entries recently, including a critical Linux kernel fault in the TLS receive path and a Zyxel GS1900 switch buffer overflow added Monday. Water utilities, small hospitals and rural co-ops run exactly this gear. The switch in a municipal pump house is infrastructure, whether or not anyone budgets for it that way.

SWPC Posts a G1 Geomagnetic Watch as Cycle 25 Keeps Humming

Global, Earth-facing solar disk · space

NOAA's Space Weather Prediction Center issued watch WATA20 on Monday for G1-level storming, following a September run of Kp-4 and Kp-5 warnings. G1 is minor: weak grid fluctuations, mild GPS wobble, aurora pushed toward the northern tier. It is also a reminder that the quietest-looking hazard on this board is the one that touches every other system at once.

Key Developments

SECRET

Read WHO's September 10 language closely and something jumps. New confirmed cases and deaths were reported "only in the Democratic Republic of the Congo." But the July 17 Disease Outbreak News carried both Congo and Uganda in its title. Uganda's side of this outbreak went quiet in the reporting. Quiet is not the same as clear. In a district with porous crossings, an unreported chain and an extinguished chain look identical from a spreadsheet in Geneva.

⚡ Key Insight

Surveillance asymmetry across a border is not a data problem, it is a forecasting blind spot, and it is where regional outbreaks are born.

Now the piece nobody is connecting. On September 18, DHS finalized a Homeland Security Acquisition Regulation rule implementing the Make Personal Protective Equipment in America Act, codifying domestic-sourcing requirements for gowns, gloves and respirators. That is a policy decision about where America's protective gear comes from, written by people who lived through 2020. It is also, whether anyone intended it or not, a decision about global surge capacity. Every domestic-content floor reshapes which manufacturers scale, and outbreak responders in Bunia and Beni draw from the same finite world supply.

Put it together and today's landscape is defined less by violence than by duration. A virus with no licensed countermeasure grinding across 60 health zones. Two volcanoes parked at orange. A cyber catalog growing faster than rural utilities can patch. None of it is spectacular. All of it compounds.

Regional Analysis

TOP SECRET

Eastern Congo is the hardest environment on earth for outbreak control, and that is the honest framing. Sixty health zones is a footprint roughly the scale of a mid-sized European country, threaded with displacement camps, artisanal mining routes and armed-group territory where tracers cannot always go. Across the Rwenzori foothills sits Bundibugyo district, Uganda, roughly a quarter million people, connected to the Congolese side by Ntoroko landing sites and daily market traffic. Fort Portal is the nearest referral hospital with isolation capacity. That is the geometry of containment here: a handful of facilities, one mountain range, thousands of crossings.

Your block, not your region: the flood advisories that expired at 3 AM covered Bell, Harlan and Letcher counties in southeastern Kentucky, three of the same counties gutted by the 2022 floods.

⚡ Key Insight

Median household income across that corridor sits near half the national figure, and NFIP take-up in inland Appalachian hollows runs in the single digits, which means the next flood there is not an insurance event at all, it is a savings-account event.

Same rain, radically different recovery curve, decided by a policy map drawn decades ago.

Impact Assessment

TOP SECRET

The immediate stress is not hospital beds, it is cold chain and consumables. Bundibugyo responders burn through PPE at a rate no local supply chain absorbs, and because no licensed vaccine or monoclonal antibody covers this species, there is no ring-vaccination shortcut to shrink the transmission tree. Every chain has to be broken by hand: identify, isolate, trace, safely bury, repeat, for 42 days past the last case.

⚡ Key Insight

Countermeasure-free outbreaks consume roughly three times the human labor per case, which is why staffing burnout, not biology, is usually what breaks a response at month four.

Run the clock forward 72 hours. If a chain surfaces in Ntoroko, Uganda reactivates district task forces and screening at Mpondwe, regional airlines tighten exit screening, and the cost of the response roughly doubles because you are now funding two national systems. I would put the odds of Uganda reappearing in a WHO title line within the next three weeks at 45 to 55 percent. Not a prediction of catastrophe. A prediction that the border is still the variable.

Surviva Spotlight

Powered by Real-Time Intelligence

Here is how today's board looks inside Surviva. The southeastern Kentucky flood advisories that hit at 11:44 PM Monday would have triggered a county-level proximity alert for Bell, Harlan and Letcher users while most people were asleep, not a three-state banner they would scroll past. The San Juan Basin flood watch would have surfaced with its actual expiry, Thursday midnight, so a Durango family knows this is a three-day posture, not a one-night scare. For international readers with travel in the Rwenzori corridor, the WHO Disease Outbreak News thread lands as a tracked story with version history, so you can see that the health zone count moved from 54 to 60 rather than reading one static headline. Precision is the product. This is what it means to be prepared before the headline breaks.

The One Thing

Today's Essential Takeaway

If you take nothing else from today's briefing: stop asking about the fatality rate. It is the first question everyone asks about Ebola and it is close to useless for predicting what happens next. Bundibugyo has historically killed a quarter to a third of those infected, and that number has barely moved in twenty years. What moves is geography. Fifty-four health zones to sixty. That is the number that tells you whether a response is winning, and almost no headline reports it.The uncomfortable truth underneath is that outbreaks are not won in laboratories, they are won in living rooms. Whether a family reports a sick uncle instead of hiding him. Whether a burial team is trusted enough to be let through a gate. Whether a nurse in a two-room clinic, on her fourth month without relief, still asks the travel-history question. There is no licensed vaccine for this strain, which strips the story down to its actual mechanism: human trust, human stamina, human attention. Yours included.

— Ato Phoenix

Mission Briefing

NEXT 24 HOURS

Know the three warning signs for viral hemorrhagic fever if you or family have traveled through western Uganda or eastern DRC in the past 21 days: sudden fever, severe fatigue, unexplained bleeding or bruising. Call ahead before walking into any clinic and state your travel history first. (cdc.gov/vhf)

If you have family or colleagues working in the Rwenzori border corridor, send them the WHO Disease Outbreak News link today rather than a news article, because the primary source updates before the coverage does. (who.int/emergencies/disease-outbreak-news)

Kentucky readers in Bell, Harlan and Letcher counties: photograph your home's interior and exterior this week while it is dry. Flood claims and FEMA inspections move faster with time-stamped before images.

Southwest Colorado readers: the San Juan flood watch runs through Thursday midnight. Identify your nearest route out of a burn-scar drainage before rain starts, not during.

Never drive into moving water at night. Six inches will stall a sedan, twelve will float most SUVs, and flash flood deaths cluster after dark. Turn around.

Patch or segment any Zyxel GS1900 series switch on your network this week; CISA added it to the exploited catalog Monday. (cisa.gov/known-exploited-vulnerabilities-catalog)

Update Linux systems for the kernel TLS receive-path flaw CISA rated critical on September 18. Small clinics and water utilities: this means you.

Volcano Village and Big Island residents: confirm your N95 supply for vog and ashfall while Kilauea holds at ORANGE. (usgs.gov/observatories/hvo)

Check whether your homeowners policy excludes flood. Most do. NFIP policies carry a 30-day waiting period, so buying during a warning is too late. (floodsmart.gov)

Verify one out-of-state contact number that every family member knows by heart, not by phone contact list. Do it today, over dinner, in under five minutes. (ready.gov/plan)

Preparedness Guidance

Start with the outbreak, because it is the only critical on today's board with a direct action for ordinary people. If anyone in your household has been in western Uganda, the Rwenzori corridor, or eastern DRC within 21 days and develops sudden fever, severe weakness, vomiting or unexplained bleeding, do not walk into an emergency room unannounced. Call ahead. Lead with travel history. That single phone call is what lets a hospital place a patient in isolation instead of routing them through a full waiting room. For everyone else, the relevant skill is knowing that Ebola is not airborne; it moves through direct contact with body fluids, which means basic barrier precautions and hand hygiene are genuinely protective, not theater.

Now the water. Southeastern Kentucky and southwest Colorado are both under flood alerts this morning, and the failure mode in each is completely different. In Bell, Harlan and Letcher counties, the killer is a nighttime creek rise through a narrow hollow with one road out. In the San Juan Basin, it is a debris flow off a burn scar that arrives faster than rain gauges can register. Know which one you live in. If it is the hollow, leave early on the forecast, not on the water. If it is the burn scar, understand that your trigger is rainfall rate, not rainfall total.

The thread connecting both: every hazard on this board has a countermeasure gap. No licensed vaccine for Bundibugyo. No flood insurance for most inland Appalachian households. No patch team for a Zyxel switch in a rural water plant. Preparedness is not about the hazard you fear most. It is about finding the place where the system was never built to catch you, and standing there yourself.

The Phoenix Signal

Pattern recognition from the editorial desk

Something about a virus named after a place has always unsettled me. Bundibugyo is a real district with real markets and a real hospital, and in 2007 it was handed a permanent association with one of the worst deaths a human body can produce. Nineteen years later the name has outlived the outbreak that earned it, and it is back in the headlines describing a crisis across a border in another country entirely. That is what emergency intelligence actually looks like most days. Not explosions. Slow, patient, geographic facts that keep resurfacing because nobody ever finished dealing with them the first time.

— Ato Phoenix

Coming Next

Tomorrow's Watch

Uganda's Name Returns to the WHO Title Line

Bundibugyo and Ntoroko districts, Uganda · 3-7 days

Watch for:Whether the next WHO Disease Outbreak News reports confirmed cases outside DRC, and whether the health zone count moves past 60. Both readings define whether this is a national or regional emergency.

Escalation signal:A single confirmed Ugandan case with no established epidemiological link to a known Congolese chain.

San Juan Basin Rainfall Rate Test

Southwest San Juan Mountains, Colorado · 24-48h

Watch for:Hourly rainfall rate over burn-scar drainages, not storm totals. Half an inch in thirty minutes on a scarred slope produces debris flow regardless of the daily number.

Escalation signal:Any flash flood warning upgrade inside the San Juan River Basin before Thursday midnight.

Great Sitkin Notice Type Change

Aleutian Islands, Alaska · next 24h

Watch for:AVO has held WATCH at ORANGE without escalation for an extended stretch. A notice type change in either direction would be the first new information in weeks.

Escalation signal:Elevation to WARNING or RED, which would immediately reroute North Pacific air traffic.

Rural Utility Patch Window on the CISA Critical

United States, water and small-clinic networks · 3-7 days

Watch for:Whether small municipal utilities remediate the Linux kernel TLS flaw and Zyxel switch vulnerability within CISA's enforcement window, or whether the gap persists.

Escalation signal:Any confirmed intrusion at a water or healthcare operator traced to either catalog entry.

Late-Season Caribbean Genesis Watch

Western Caribbean and Gulf of Mexico · 3-7 days

Watch for:The Atlantic basin currently holds zero active systems during a historically warm stretch. Late September and early October genesis favors the western Caribbean.

Escalation signal:Any NHC invest area assigned a 40 percent or higher seven-day formation chance.

Three things through Thursday. First, the next WHO Disease Outbreak News on Bundibugyo, where the health zone count and whether Uganda returns to the title line will tell you more than any case number. Second, the San Juan Basin flood watch, which runs to Thursday midnight and turns dangerous the moment rainfall rate rather than total spikes over a burn scar. Third, whether Great Sitkin or Kilauea changes its notice type, because both have held at ORANGE long enough that a shift in either direction is now meaningful information.

Eyes on: the Ntoroko crossings. I will be reading Ugandan district health bulletins overnight, not wire copy, because the first sign that a regional outbreak has truly become regional almost never appears in a headline. It appears as a task force reactivating in a place that had stood down. Stay satisfyingly prepared. — The Surviva-List Editorial Team

Editor's Note

From the Editorial Desk

Bundibugyo is a district in western Uganda, banana farms and market roads, and in 2007 it gave its name to a new species of ebolavirus. This morning that virus is the most severe event in our entire feed, sitting in 60 Congolese health zones along a border thousands of people cross daily.Watch the Ntoroko and Bundibugyo crossings over the next 48 hours, and watch whether WHO's next Disease Outbreak News names Uganda again in the title. That single word change is the whole story.Named diseases travel on named roads. Today we follow the roads.

— Ato Phoenix, Editor-in-Chief