Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,766 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2025-43520 | Apple Multiple Products Classic Buffer Overflow Vulnerability | 0.4% | No |
| CVE-2025-43510 | Apple Multiple Products Improper Locking Vulnerability | 0.4% | No |
| CVE-2025-48633 | Android Framework Information Disclosure Vulnerability | 0.3% | No |
| CVE-2025-48572 | Android Framework Privilege Escalation Vulnerability | 0.3% | No |
| CVE-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability | 100.0% | Yes |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | 100.0% | Yes |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerabilit | 100.0% | Yes |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request | 100.0% | Yes |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 100.0% | No |
| CVE-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability | 100.0% | No |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source Improper Restriction of XML Ext | 100.0% | No |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 100.0% | No |
| CVE-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability | 100.0% | Yes |
| CVE-2024-4577 | PHP-CGI OS Command Injection Vulnerability | 100.0% | Yes |
| CVE-2024-45195 | Apache OFBiz Forced Browsing Vulnerability | 100.0% | No |
| CVE-2024-1709 | ConnectWise ScreenConnect Authentication Bypass Vulnerability | 100.0% | Yes |
| CVE-2024-24919 | Check Point Quantum Security Gateways Information Disclosure Vulnerabi | 100.0% | Yes |
| CVE-2024-4879 | ServiceNow Improper Input Validation Vulnerability | 100.0% | No |
| CVE-2024-38475 | Apache HTTP Server Improper Escaping of Output Vulnerability | 100.0% | No |
| CVE-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability | 99.9% | Yes |
381–400 of 1,766
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
thegentlemen (393)
qilin (375)
N0n (167)
akira (102)
incransom (101)
clop (92)
Storm (89)
krybit (86)
lockbit5 (72)
SilentRansomGroup (68)
settra (67)
safepay (66)
direwolf (63)
everest (62)
emperador (61)
Orova (55)
play (53)
Majinahanashi (50)
nightspire (50)
AuditTeam (50)
Panzer (46)
Booba Project (43)
Wallstreet (42)
dragonforce (40)
rhysida (39)
Dark Project (33)
aurora (32)
BrainCipher (29)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,372 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1110)
Germany (162)
The United Kingdom (119)
Italy (106)
Brazil (93)
Canada (85)
India (72)
France (63)
Mexico (62)
Spain (55)
Australia (49)
Argentina (46)
Japan (41)
TW (38)
Turkey (38)
South Korea (38)
Switzerland (37)
Sweden (34)
MY (27)
Singapore (27)
TH (26)
The Netherlands (25)
The United Arab Emirates (24)
South Africa (23)
CO (21)
CL (20)
ID (19)
HK (18)
PH (18)
PE (17)
Industry risk profiles
Manufacturing (423)
Technology (394)
Professional Services (338)
Healthcare (261)
Retail (215)
Finance (146)
Education (110)
Transportation (96)
Agriculture and Food Production (87)
Government (79)
Energy (78)
Hospitality (64)
Telecommunications (33)
Entertainment (19)
Real Estate (18)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.