Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,760 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2016-7855 | Adobe Flash Player Use-After-Free Vulnerability | 25.2% | No |
| CVE-2016-0040 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 24.3% | No |
| CVE-2016-9563 | SAP NetWeaver XML External Entity (XXE) Vulnerability | 24.2% | No |
| CVE-2016-4656 | Apple iOS Memory Corruption Vulnerability | 23.6% | No |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vuln | 22.6% | No |
| CVE-2016-1019 | Adobe Flash Player Arbitrary Code Execution Vulnerability | 22.3% | Yes |
| CVE-2016-0162 | Microsoft Internet Explorer Information Disclosure Vulnerability | 21.9% | No |
| CVE-2016-3309 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 20.5% | Yes |
| CVE-2016-4171 | Adobe Flash Player Remote Code Execution Vulnerability | 20.1% | No |
| CVE-2016-1010 | Adobe Flash Player and AIR Integer Overflow Vulnerability | 19.3% | No |
| CVE-2016-7836 | SKYSEA Client View Improper Authentication Vulnerability | 19.2% | No |
| CVE-2016-7892 | Adobe Flash Player Use-After-Free Vulnerability | 18.8% | No |
| CVE-2016-0165 | Microsoft Win32k Privilege Escalation Vulnerability | 13.7% | No |
| CVE-2016-0167 | Microsoft Win32k Privilege Escalation Vulnerability | 5.7% | Yes |
| CVE-2016-3643 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 3.7% | No |
| CVE-2016-8562 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | 3.6% | No |
| CVE-2015-1635 | Microsoft HTTP.sys Remote Code Execution Vulnerability | 100.0% | No |
| CVE-2015-1427 | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerabil | 99.9% | No |
| CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | 99.8% | No |
| CVE-2015-5477 | ISC BIND Data Processing Errors Vulnerability | 99.6% | No |
1,541–1,560 of 1,760
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (358)
thegentlemen (343)
N0n (164)
incransom (100)
akira (96)
clop (92)
Storm (89)
krybit (85)
lockbit5 (70)
settra (63)
direwolf (63)
everest (62)
safepay (57)
SilentRansomGroup (57)
emperador (56)
Orova (55)
play (53)
Majinahanashi (49)
nightspire (49)
Panzer (45)
AuditTeam (45)
Wallstreet (40)
dragonforce (39)
Booba Project (36)
Dark Project (33)
rhysida (32)
BrainCipher (29)
aurora (28)
L Group (28)
metaencryptor (27)
Source: Ransomware.live
Company security profiles (2,251 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1051)
Germany (152)
The United Kingdom (115)
Italy (101)
Brazil (92)
Canada (83)
India (70)
France (60)
Mexico (53)
Spain (51)
Australia (46)
Argentina (44)
Japan (39)
South Korea (38)
Turkey (36)
Switzerland (36)
TW (35)
Sweden (31)
Singapore (26)
TH (25)
The Netherlands (24)
MY (24)
The United Arab Emirates (23)
South Africa (22)
CL (20)
CO (19)
HK (18)
ID (18)
China (17)
PE (16)
Industry risk profiles
Manufacturing (404)
Technology (364)
Professional Services (319)
Healthcare (248)
Retail (210)
Finance (141)
Education (102)
Transportation (92)
Agriculture and Food Production (86)
Energy (74)
Government (72)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.