Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Known-exploited vulnerabilities (1,758 tracked)
Newest first: by CVE year, then by how likely exploitation is (EPSS).
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2026-21514 | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decis | 1.6% | No |
| CVE-2026-67277 | MikroTik RouterOS Missing Authentication for Critical Function Vulnera | 1.6% | No |
| CVE-2026-72529 | TrueConf Server Missing Authentication for Critical Function Vulnerabi | 1.5% | No |
| CVE-2026-8398 | Daemon Tools Lite Embedded Malicious Code Vulnerability | 1.5% | No |
| CVE-2026-54420 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnera | 1.4% | No |
| CVE-2026-93952 | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 1.4% | No |
| CVE-2026-21385 | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 1.3% | No |
| CVE-2026-7473 | Arista Extensible Operating System Incomplete Comparison with Missing | 1.1% | No |
| CVE-2026-114625 | Arista VeloCloud Orchestrator SQL Injection Vulnerability | 1.0% | No |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Ope | 1.0% | No |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Functi | 1.0% | No |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Fir | 1.0% | No |
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerabili | 1.0% | No |
| CVE-2026-110936 | Siemens Software Center Uncontrolled Search Path Element Vulnerability | 1.0% | No |
| CVE-2026-53266 | Linux Kernel Out-of-Bounds Write Vulnerability | 0.9% | No |
| CVE-2026-84869 | ConnectWise ScreenConnect Improper Privilege Management and Missing Au | 0.9% | No |
| CVE-2026-55255 | Langflow Authorization Bypass Through User-Controlled Key Vulnerabilit | 0.9% | No |
| CVE-2026-102490 | Zammad GmbH Zammad Improper Privilege Management Vulnerability | 0.9% | No |
| CVE-2026-59822 | BerriAI LiteLLM Improper Authentication Vulnerability | 0.8% | No |
| CVE-2026-53362 | Linux Kernel Unspecified Vulnerability | 0.7% | No |
161–180 of 1,758
Sources: CISA KEV catalog · FIRST EPSS
Ransomware groups
qilin (356)
thegentlemen (343)
N0n (163)
incransom (100)
akira (96)
clop (92)
Storm (89)
krybit (85)
lockbit5 (70)
settra (63)
direwolf (62)
SilentRansomGroup (57)
safepay (57)
emperador (55)
Orova (55)
everest (54)
Majinahanashi (49)
nightspire (49)
play (46)
AuditTeam (45)
Panzer (45)
Wallstreet (39)
dragonforce (39)
Dark Project (33)
rhysida (31)
BrainCipher (29)
L Group (28)
aurora (27)
metaencryptor (27)
shinyhunters (26)
Source: Ransomware.live
Company security profiles (2,230 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (1038)
Germany (152)
The United Kingdom (114)
Italy (99)
Brazil (92)
Canada (81)
India (70)
France (60)
Mexico (52)
Spain (51)
Australia (46)
Argentina (44)
Japan (39)
South Korea (38)
Switzerland (36)
Turkey (36)
TW (35)
Sweden (31)
Singapore (25)
TH (25)
The Netherlands (24)
MY (23)
South Africa (22)
The United Arab Emirates (22)
CL (20)
CO (19)
HK (18)
ID (18)
China (17)
PE (16)
Industry risk profiles
Manufacturing (404)
Technology (362)
Professional Services (317)
Healthcare (242)
Retail (208)
Finance (138)
Education (100)
Transportation (91)
Agriculture and Food Production (86)
Energy (73)
Government (70)
Hospitality (62)
Telecommunications (33)
Entertainment (17)
Real Estate (15)
Information (8)
Defense (2)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.