Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,768 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2022-31199 | Netwrix Auditor Insecure Object Deserialization Vulnerability | 36.0% | Yes |
| CVE-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability | 35.5% | No |
| CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 33.7% | No |
| CVE-2022-4135 | Google Chromium GPU Heap Buffer Overflow Vulnerability | 31.9% | No |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerabil | 30.9% | Yes |
| CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escal | 28.5% | Yes |
| CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability | 25.2% | No |
| CVE-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | 24.9% | No |
| CVE-2022-1096 | Google Chromium V8 Type Confusion Vulnerability | 24.7% | No |
| CVE-2022-41128 | Microsoft Windows Scripting Languages Remote Code Execution Vulnerabil | 24.6% | No |
| CVE-2022-4262 | Google Chromium V8 Type Confusion Vulnerability | 23.5% | No |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | 22.4% | No |
| CVE-2022-26871 | Trend Micro Apex Central Arbitrary File Upload Vulnerability | 19.5% | No |
| CVE-2022-22047 | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Es | 18.8% | No |
| CVE-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 18.5% | No |
| CVE-2022-38181 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 18.5% | No |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vu | 17.6% | No |
| CVE-2022-26904 | Microsoft Windows User Profile Service Privilege Escalation Vulnerabil | 16.9% | No |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | 16.3% | No |
| CVE-2022-38028 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 14.9% | No |
781–800 of 1,768
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
thegentlemen (418)
qilin (389)
N0n (194)
akira (114)
incransom (107)
clop (92)
Storm (89)
krybit (86)
safepay (75)
SilentRansomGroup (74)
lockbit5 (74)
settra (71)
direwolf (65)
everest (62)
Orova (62)
emperador (61)
play (58)
nightspire (51)
AuditTeam (51)
Majinahanashi (50)
Booba Project (47)
Panzer (46)
medusalocker (43)
Wallstreet (42)
rhysida (42)
BrainCipher (40)
dragonforce (40)
Dark Project (37)
aurora (32)
pear (29)
Source: Ransomware.live
Company security profiles (2,485 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1178)
Germany (177)
The United Kingdom (132)
Italy (107)
Brazil (99)
Canada (93)
India (73)
France (65)
Mexico (62)
Spain (58)
Australia (51)
Argentina (48)
South Korea (44)
Japan (43)
Turkey (41)
Switzerland (41)
TW (38)
Sweden (35)
Singapore (31)
MY (30)
TH (26)
The Netherlands (25)
The United Arab Emirates (25)
South Africa (24)
CO (22)
CL (22)
ID (21)
China (19)
HK (18)
PH (18)
Industry risk profiles
Manufacturing (444)
Technology (416)
Professional Services (350)
Healthcare (273)
Retail (226)
Finance (157)
Education (117)
Transportation (99)
Agriculture and Food Production (90)
Government (83)
Energy (79)
Hospitality (66)
Telecommunications (33)
Entertainment (21)
Real Estate (18)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.