Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,762 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2018-0824 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerabil | 73.0% | No |
| CVE-2018-8414 | Microsoft Windows Shell Remote Code Execution Vulnerability | 72.6% | No |
| CVE-2018-7841 | Schneider Electric U.motion Builder SQL Injection Vulnerability | 72.5% | No |
| CVE-2018-8453 | Microsoft Win32k Privilege Escalation Vulnerability | 70.0% | Yes |
| CVE-2018-7445 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | 65.8% | No |
| CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 61.8% | No |
| CVE-2018-8373 | Microsoft Scripting Engine Memory Corruption Vulnerability | 61.5% | No |
| CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability | 60.3% | No |
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution Vulnerability | 55.2% | No |
| CVE-2018-5430 | TIBCO JasperReports Server Information Disclosure Vulnerability | 48.1% | No |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 38.1% | Yes |
| CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability | 35.9% | No |
| CVE-2018-17480 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 35.6% | No |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy Out-of-bounds Write | 32.5% | Yes |
| CVE-2018-19953 | QNAP NAS File Station Cross-Site Scripting Vulnerability | 30.5% | Yes |
| CVE-2018-19949 | QNAP NAS File Station Command Injection Vulnerability | 30.2% | Yes |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vu | 29.8% | Yes |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnera | 29.6% | No |
| CVE-2018-20753 | Kaseya VSA Remote Code Execution Vulnerability | 29.6% | Yes |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerabilit | 28.9% | Yes |
1,361–1,380 of 1,762
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (358)
thegentlemen (343)
N0n (165)
incransom (100)
akira (99)
clop (92)
Storm (89)
krybit (85)
lockbit5 (70)
direwolf (63)
settra (63)
SilentRansomGroup (62)
everest (62)
safepay (57)
emperador (56)
Orova (55)
play (53)
Majinahanashi (49)
nightspire (49)
Panzer (46)
AuditTeam (45)
Wallstreet (41)
dragonforce (39)
Booba Project (36)
rhysida (34)
Dark Project (33)
aurora (30)
BrainCipher (29)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,257 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1059)
Germany (155)
The United Kingdom (116)
Italy (101)
Brazil (92)
Canada (83)
India (70)
France (60)
Mexico (53)
Spain (51)
Australia (46)
Argentina (44)
Japan (39)
South Korea (38)
Turkey (36)
Switzerland (36)
TW (35)
Sweden (31)
Singapore (26)
MY (25)
TH (25)
The Netherlands (24)
The United Arab Emirates (23)
South Africa (22)
CL (20)
CO (19)
ID (18)
HK (18)
China (17)
PE (16)
Industry risk profiles
Manufacturing (404)
Technology (367)
Professional Services (320)
Healthcare (248)
Retail (210)
Finance (141)
Education (103)
Transportation (93)
Agriculture and Food Production (86)
Energy (74)
Government (72)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.