Cyber Risk Directory
Public-source intelligence across vulnerabilities, ransomware activity, industries and countries. Updated continuously.
Top known-exploited vulnerabilities (1,748 tracked)
| CVE | Name | EPSS | Ransomware |
|---|---|---|---|
| CVE-2025-53770 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 100.0% | Yes |
| CVE-2021-26086 | Atlassian Jira Server and Data Center Path Traversal Vulnerability | 100.0% | No |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 100.0% | No |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | 100.0% | Yes |
| CVE-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability | 100.0% | Yes |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request | 100.0% | Yes |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authenticati | 100.0% | Yes |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerabilit | 100.0% | Yes |
| CVE-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | 100.0% | No |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server Improper Authorization Vul | 100.0% | Yes |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerabili | 100.0% | Yes |
| CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability | 100.0% | No |
| CVE-2023-32315 | Ignite Realtime Openfire Path Traversal Vulnerability | 100.0% | No |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 100.0% | Yes |
| CVE-2023-1389 | TP-Link Archer AX-21 Command Injection Vulnerability | 100.0% | No |
Ransomware groups
thegentlemen (339)
qilin (305)
N0n (118)
incransom (97)
clop (91)
akira (88)
Storm (86)
krybit (79)
lockbit5 (64)
settra (63)
direwolf (62)
safepay (57)
Orova (53)
nightspire (49)
everest (49)
play (46)
SilentRansomGroup (46)
emperador (44)
Panzer (43)
Majinahanashi (42)
AuditTeam (41)
Wallstreet (38)
dragonforce (37)
Dark Project (30)
L Group (28)
metaencryptor (27)
rhysida (27)
shinyhunters (26)
ZaWoo (25)
medusalocker (25)
Source: Ransomware.live
Company security profiles (2,095 analyzed)
Cyber Exposure Scores computed from public signals — email authentication, DNS, TLS, internet exposure and breach history. Newly analyzed domains appear here automatically.
Country risk profiles
The United States (936)
Germany (130)
The United Kingdom (103)
Italy (92)
Brazil (91)
Canada (76)
India (68)
France (55)
Mexico (47)
Spain (44)
Australia (42)
Japan (39)
Argentina (38)
South Korea (37)
TW (34)
Turkey (33)
Switzerland (32)
Sweden (31)
Singapore (25)
TH (25)
South Africa (22)
The Netherlands (22)
The United Arab Emirates (21)
CO (19)
CL (19)
MY (18)
HK (18)
ID (18)
PE (16)
China (15)
Industry risk profiles
Manufacturing (382)
Technology (330)
Professional Services (301)
Healthcare (229)
Retail (197)
Finance (133)
Education (94)
Transportation (88)
Agriculture and Food Production (82)
Energy (68)
Government (65)
Hospitality (57)
Telecommunications (31)
Entertainment (15)
Real Estate (14)
Information (7)
Defense (1)
Is your domain exposed?
Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.
Get your free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.