Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,768 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | 41.4% | No |
| CVE-2023-29336 | Microsoft Win32K Privilege Escalation Vulnerability | 41.2% | No |
| CVE-2023-2033 | Google Chromium V8 Type Confusion Vulnerability | 40.8% | No |
| CVE-2023-39780 | ASUS RT-AX55 Routers OS Command Injection Vulnerability | 39.5% | No |
| CVE-2023-3079 | Google Chromium V8 Type Confusion Vulnerability | 37.9% | No |
| CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escal | 34.2% | No |
| CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 29.0% | No |
| CVE-2023-2533 | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | 28.8% | No |
| CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 28.1% | No |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 27.9% | No |
| CVE-2023-28205 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 27.1% | No |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unautho | 26.6% | Yes |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | 24.3% | No |
| CVE-2023-32439 | Apple Multiple Products WebKit Type Confusion Vulnerability | 24.0% | No |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write | 23.2% | No |
| CVE-2023-32435 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 23.0% | No |
| CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerabilit | 21.6% | No |
| CVE-2023-36563 | Microsoft WordPad Information Disclosure Vulnerability | 20.3% | No |
| CVE-2023-50224 | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | 20.0% | No |
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | 19.6% | No |
641–660 of 1,768
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
thegentlemen (418)
qilin (389)
N0n (194)
akira (114)
incransom (107)
clop (92)
Storm (89)
krybit (86)
safepay (75)
SilentRansomGroup (74)
lockbit5 (74)
settra (71)
direwolf (65)
everest (62)
Orova (62)
emperador (61)
play (58)
nightspire (51)
AuditTeam (51)
Majinahanashi (50)
Booba Project (47)
Panzer (46)
medusalocker (43)
rhysida (42)
Wallstreet (42)
dragonforce (40)
BrainCipher (40)
Dark Project (37)
aurora (32)
pear (29)
Source: Ransomware.live
Company security profiles (2,485 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1178)
Germany (177)
The United Kingdom (132)
Italy (107)
Brazil (99)
Canada (93)
India (73)
France (65)
Mexico (62)
Spain (58)
Australia (51)
Argentina (48)
South Korea (44)
Japan (43)
Switzerland (41)
Turkey (41)
TW (38)
Sweden (35)
Singapore (31)
MY (30)
TH (26)
The Netherlands (25)
The United Arab Emirates (25)
South Africa (24)
CL (22)
CO (22)
ID (21)
China (19)
HK (18)
PH (18)
Industry risk profiles
Manufacturing (444)
Technology (416)
Professional Services (350)
Healthcare (273)
Retail (226)
Finance (157)
Education (116)
Transportation (99)
Agriculture and Food Production (90)
Government (83)
Energy (79)
Hospitality (66)
Telecommunications (33)
Entertainment (20)
Real Estate (18)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.