Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,766 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2021-25337 | Samsung Mobile Devices Improper Access Control Vulnerability | 2.8% | No |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vu | 2.7% | No |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnera | 2.6% | No |
| CVE-2021-1782 | Apple Multiple Products Race Condition Vulnerability | 2.2% | No |
| CVE-2021-41357 | Microsoft Win32k Privilege Escalation Vulnerability | 1.6% | No |
| CVE-2021-40450 | Microsoft Win32k Privilege Escalation Vulnerability | 1.6% | No |
| CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 1.5% | No |
| CVE-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability | 1.5% | No |
| CVE-2021-25369 | Samsung Mobile Devices Improper Access Control Vulnerability | 1.1% | No |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability | 1.1% | No |
| CVE-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerabil | 1.0% | No |
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File Download | 0.9% | No |
| CVE-2021-25370 | Samsung Mobile Devices Memory Corruption Vulnerability | 0.9% | No |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability | 0.9% | No |
| CVE-2021-25372 | Samsung Mobile Devices Improper Boundary Check Vulnerability | 0.8% | No |
| CVE-2021-25371 | Samsung Mobile Devices Unspecified Vulnerability | 0.8% | No |
| CVE-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | 0.7% | No |
| CVE-2021-25487 | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | 0.6% | No |
| CVE-2021-25489 | Samsung Mobile Devices Improper Input Validation Vulnerability | 0.5% | No |
| CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action | 0.5% | No |
1,041–1,060 of 1,766
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
thegentlemen (393)
qilin (384)
N0n (167)
akira (102)
incransom (101)
clop (92)
Storm (89)
krybit (86)
lockbit5 (73)
SilentRansomGroup (68)
settra (67)
safepay (66)
direwolf (64)
everest (62)
emperador (61)
Orova (55)
play (53)
Majinahanashi (50)
nightspire (50)
AuditTeam (50)
Panzer (46)
Booba Project (43)
Wallstreet (42)
dragonforce (40)
rhysida (39)
Dark Project (33)
aurora (32)
BrainCipher (29)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,385 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1114)
Germany (166)
The United Kingdom (120)
Italy (106)
Brazil (92)
Canada (85)
India (72)
France (63)
Mexico (62)
Spain (55)
Australia (49)
Argentina (46)
Japan (42)
Turkey (39)
South Korea (38)
TW (38)
Switzerland (37)
Sweden (34)
MY (27)
Singapore (27)
TH (26)
The Netherlands (25)
The United Arab Emirates (24)
South Africa (23)
CO (21)
ID (20)
CL (20)
HK (18)
PH (18)
China (17)
Industry risk profiles
Manufacturing (424)
Technology (396)
Professional Services (342)
Healthcare (262)
Retail (218)
Finance (146)
Education (112)
Transportation (97)
Agriculture and Food Production (87)
Government (79)
Energy (78)
Hospitality (64)
Telecommunications (33)
Entertainment (19)
Real Estate (18)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.