Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,764 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2018-20753 | Kaseya VSA Remote Code Execution Vulnerability | 29.6% | Yes |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerabilit | 28.9% | Yes |
| CVE-2018-8581 | Microsoft Exchange Server Privilege Escalation Vulnerability | 27.6% | Yes |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangero | 27.3% | No |
| CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 25.1% | No |
| CVE-2018-19943 | QNAP NAS File Station Cross-Site Scripting Vulnerability | 22.7% | Yes |
| CVE-2018-8639 | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnera | 22.2% | Yes |
| CVE-2018-8440 | Microsoft Windows Privilege Escalation Vulnerability | 18.5% | Yes |
| CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization Vulnerability | 18.2% | No |
| CVE-2018-14634 | Linux Kernel Integer Overflow Vulnerability | 14.7% | No |
| CVE-2018-0151 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote | 14.2% | No |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-S | 9.4% | No |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 8.5% | No |
| CVE-2018-19323 | GIGABYTE Multiple Products Privilege Escalation Vulnerability | 8.4% | Yes |
| CVE-2018-0172 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 7.8% | No |
| CVE-2018-0155 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vu | 7.7% | No |
| CVE-2018-0174 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation | 7.6% | No |
| CVE-2018-0173 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 7.6% | No |
| CVE-2018-0158 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerabil | 7.2% | No |
| CVE-2018-0154 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Servic | 7.1% | No |
1,381–1,400 of 1,764
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (362)
thegentlemen (343)
N0n (165)
incransom (100)
akira (99)
clop (92)
Storm (89)
krybit (86)
lockbit5 (72)
SilentRansomGroup (63)
direwolf (63)
settra (63)
everest (62)
emperador (58)
safepay (57)
Orova (55)
play (53)
Majinahanashi (49)
nightspire (49)
Panzer (46)
AuditTeam (45)
Booba Project (43)
Wallstreet (41)
dragonforce (39)
rhysida (36)
Dark Project (33)
aurora (30)
BrainCipher (29)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,284 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1069)
Germany (155)
The United Kingdom (118)
Italy (103)
Brazil (92)
Canada (84)
India (71)
France (61)
Mexico (54)
Spain (52)
Australia (46)
Argentina (44)
Japan (40)
South Korea (38)
Switzerland (36)
Turkey (36)
TW (35)
Sweden (31)
TH (26)
Singapore (26)
MY (25)
The Netherlands (24)
The United Arab Emirates (23)
South Africa (22)
CL (20)
CO (19)
HK (18)
ID (18)
China (17)
PE (16)
Industry risk profiles
Manufacturing (407)
Technology (370)
Professional Services (322)
Healthcare (252)
Retail (210)
Finance (145)
Education (107)
Transportation (94)
Agriculture and Food Production (86)
Government (76)
Energy (75)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.