Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,766 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2020-3153 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Searc | 28.5% | Yes |
| CVE-2020-5135 | SonicWall SonicOS Buffer Overflow Vulnerability | 26.9% | Yes |
| CVE-2020-8196 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | 26.3% | No |
| CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnera | 24.2% | No |
| CVE-2020-24363 | TP-link TL-WA855RE Missing Authentication for Critical Function Vulner | 22.2% | No |
| CVE-2020-27930 | Apple Multiple Products Memory Corruption Vulnerability | 22.0% | No |
| CVE-2020-9377 | D-Link DIR-610 Devices Remote Command Execution | 21.9% | No |
| CVE-2020-11899 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | 18.4% | No |
| CVE-2020-4006 | Multiple VMware Products Command Injection Vulnerability | 17.3% | No |
| CVE-2020-27950 | Apple Multiple Products Memory Initialization Vulnerability | 16.5% | No |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 16.4% | No |
| CVE-2020-10181 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 14.9% | No |
| CVE-2020-3837 | Apple Multiple Products Memory Corruption Vulnerability | 14.8% | No |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerabilit | 11.9% | No |
| CVE-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 11.7% | No |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerabilit | 10.9% | No |
| CVE-2020-15069 | Sophos XG Firewall Buffer Overflow Vulnerability | 10.7% | No |
| CVE-2020-6572 | Google Chrome Media Use-After-Free Vulnerability | 10.6% | No |
| CVE-2020-27932 | Apple Multiple Products Type Confusion Vulnerability | 10.3% | No |
| CVE-2020-3433 | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vuln | 10.0% | Yes |
1,161–1,180 of 1,766
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (373)
thegentlemen (343)
N0n (166)
akira (102)
incransom (101)
clop (92)
Storm (89)
krybit (86)
lockbit5 (72)
SilentRansomGroup (68)
direwolf (63)
settra (63)
everest (62)
emperador (59)
safepay (57)
Orova (55)
play (53)
Majinahanashi (49)
nightspire (49)
Panzer (46)
AuditTeam (45)
Booba Project (43)
Wallstreet (42)
dragonforce (40)
rhysida (38)
Dark Project (33)
aurora (32)
BrainCipher (29)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,284 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1087)
Germany (156)
The United Kingdom (119)
Italy (104)
Brazil (92)
Canada (85)
India (71)
France (61)
Mexico (59)
Spain (52)
Australia (46)
Argentina (44)
Japan (40)
South Korea (38)
Switzerland (36)
Turkey (36)
TW (36)
Sweden (31)
MY (26)
Singapore (26)
TH (26)
The Netherlands (24)
The United Arab Emirates (24)
South Africa (22)
CL (20)
CO (19)
HK (18)
ID (18)
PH (17)
China (17)
Industry risk profiles
Manufacturing (411)
Technology (374)
Professional Services (330)
Healthcare (254)
Retail (211)
Finance (145)
Education (107)
Transportation (96)
Agriculture and Food Production (86)
Government (76)
Energy (76)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.