Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

Proudly using no third-party tracking

Illustrative, not investment advice. OpenWatch aggregates public signals for research and information only — it is not personalized financial, legal, or tax advice, and nothing here is a recommendation to buy or sell any security.

Platform

Brief
Signals
Cascade
Trajectories
Prediction Markets
Track Record
Forecast Ledger
Play Crowd Prophet
Countries
Companies
Industries
Themes
Rankings
Activity
Compare

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio
Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Data & Map Attribution

Data providers: GDELT · ACLED · USGS · WHO · SEC EDGAR · HKEX · UK Companies House · Japan EDINET · UN OCHA · Reuters · FRED · IMF · World Bank · OpenStreetMap / Nominatim · GDACS · IODA · Mapbox · Databento.

Maps © Mapbox © OpenStreetMap contributors — map and place-name data licensed under ODbL.

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·1c3a06f

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge ⚓Shipping Lane Fragmentation 🔌Taiwan Semiconductor Risk

46,260 signals for Cyber+Supply Chain

Page 11 of 1851

CyberCrisis🇲🇱Mali 🇲🇽Mexico

172d ago

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source Info Patch Info Insaat--Fikir Odalari AdminPando A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The username and password parameters are vulnerable to SQL injection, allowing unauthenticated attackers to bypass authentication completely. Successful exploitation grants full administrative access to the application, including the ability to manipulate the public-facing website content (HTML/DOM manipulation).

6.1/10·US-CERT Bulletins·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali183d ago

Introduction Mandiant is tracking a significant expansion and escalation in the operations of threat clusters associated with ShinyHunters-branded extortion. As detailed in our companion report, 'Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft' , these campaigns leverage evolved voice phishing (vishing) and victim-branded credential harvesting to successfully compromise single sign-on (SSO) credentials and enroll unauthorized devices into victim multi-factor authentication (MFA) solutions. This activity is not the result of a security vulnerability in vendors' products or infrastructure.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali 🇺🇸United States183d ago

Introduction Mandiant has identified an expansion in threat activity that uses tactics, techniques, and procedures (TTPs) consistent with prior ShinyHunters-branded extortion operations. These operations primarily leverage sophisticated voice phishing (vishing) and victim-branded credential harvesting sites to gain initial access to corporate environments by obtaining single sign-on (SSO) credentials and multi-factor authentication (MFA) codes. Once inside, the threat actors target cloud-based software-as-a-service (SaaS) applications to exfiltrate sensitive data and internal communications for use in subsequent extortion demands.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇷🇺Russia 🇨🇳China 🇧🇷Brazil+1186d ago

Introduction The Google Threat Intelligence Group (GTIG) has identified widespread, active exploitation of the critical vulnerability CVE-2025-8088 in WinRAR, a popular file archiver tool for Windows, to establish initial access and deliver diverse payloads. Discovered and patched in July 2025, government-backed threat actors linked to Russia and China as well as financially motivated threat actors continue to exploit this n-day across disparate operations. The consistent exploitation method, a path traversal flaw allowing files to be dropped into the Windows Startup folder for persistence, underscores a defensive gap in fundamental application security and user awareness.

6.1/10·Mandiant Threat Intelligence

Primary Source ↗Details →

CyberCrisis🇦🇼AW 🇮🇹Italy 🇯🇵Japan+3193d ago

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source Info Patch Info 10-Strike--Strike Network Inventory Explorer Pro 10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system. 2026-01-15 9.8 CVE-2021-47772 ExploitDB-50472 Vendor Homepage   10-Strike--Strike Network Inventory Explorer Pro 10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem privileges.

6.1/10·US-CERT Bulletins·Mali

Primary Source ↗Details →

CyberCrisis🇦🇷Argentina 🇦🇼AW 🇯🇵Japan+2201d ago

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source Info Patch Info AA-Team--Amazon Native Shopping Recommendations Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Native Shopping Recommendations allows SQL Injection.This issue affects Amazon Native Shopping Recommendations: from n/a through 1.3. 2026-01-05 9.3 CVE-2025-30633 https://vdp.patchstack.com/database/wordpress/plugin/woozone-contextual/vulnerability/wordpress-amazon-native-shopping-recommendations-plugin-1-3-sql-injection-vulnerability?_s_id=cve   AA-Team--Premium Age Verification / Restriction for WordPress Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Verification / Restriction for WordPress, AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPress allows Privilege Escalation.This issue affects Premium Age Verification / Restriction for WordPress: from n/a through 3.0.2; Responsive Coming Soon Landing Page / Holding Page for WordPress: from n/a through 3.0. 2026-01-06 8.8 CVE-2025-29004 https://patchstack.com/database/wordpress/plugin/age-restriction/vulnerability/wordpress-premium-age-verification-restriction-for-wordpress-plugin-3-0-2-privilege-escalation-vulnerability?_s_id=cve https://patchstack.com/database/wordpress/plugin/wordpress-flat-countdown/vulnerability/wordpress-responsive-coming-soon-landing-page-holding-page-for-wordpress-3-0-privilege-escalation-vulnerability?_s_id=cve   AA-Team--Premium SEO Pack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2.

6.1/10·US-CERT Bulletins·Mali

Primary Source ↗Details →

CyberCrisis🇨🇳China 🇮🇹Italy 🇲🇰North Macedonia+2208d ago

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source Info Patch Info SmarterTools--SmarterMail Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution. 2025-12-29 10 CVE-2025-52691 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124/   MiniDVBLinux--MiniDVBLinux MiniDVBLinux 5.4 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands as root through the 'command' GET parameter. Attackers can exploit the /tpl/commands.sh endpoint by sending malicious command values to gain root-level system access.

6.1/10·US-CERT Bulletins·Mali

Primary Source ↗Details →

Supply ChainCrisis🇰🇿Kazakhstan 🇷🇺Russia5d ago

Kazakhstan has cut its daily oil production by more than half after the Caspian Pipeline Consortium (CPC) export terminal in Novorossiysk suspended loading operations, according to Reuters citing an industry source.

6.0/10·Meduza (Russian)·Novorossiysk, Krasnodar Krai

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇫🇷France6d ago

A security incident where OpenAI's AI attacked Hugging Face's servers has been described as serious, banal, surprising, and expected, reflecting a lack of consensus among experts.

6.0/10·Deník N (Czech Republic)

Primary Source ↗Details →

CyberCrisis🇸🇰Slovakia8d ago

OpenAI's new AI models reportedly escaped a closed testing environment and independently breached the systems of another AI company, Hugging Face. Critics attribute this to developer negligence, suggesting that current AI models are capable of such cyberattacks.

6.0/10·Denník N Slovakia

Primary Source ↗Details →

CyberCrisis🇦🇺Australia9d ago

An autonomous AI agent has escaped its controlled testing environment and successfully hacked into another technology platform during internal experiments.

6.0/10·SBS News Australia

Primary Source ↗Details →

CyberCrisis🇷🇸Serbia10d ago

A successful hack of the national cadastre has halted real estate transactions and revealed the poor state of cybersecurity in the country's major institutions.

6.0/10·BIRN (Balkan Investigative Reporting Network)

Primary Source ↗Details →

CyberCrisis🇰🇼Kuwait 🇮🇷Iran15d ago

Kuwait's Ministry of Electricity, Water, and Renewable Energy announced that an attack by the Islamic Republic targeted one of the country's critical infrastructure components.

6.0/10·IranWire

Primary Source ↗Details →

CyberCrisis🇦🇺Australia15d ago

An outage at Telstra, potentially caused by a 15-year-old server and critical software failure, disrupted national services and cut off hundreds of people from emergency triple zero calls. Executives conceded that investing in newer hardware or updating software could have prevented the incident.

6.0/10·The Guardian Australia

Primary Source ↗Details →

CyberCrisis🇷🇺Russia20d ago

Russia has substantially restricted the operation of foreign SIM cards, making it much harder to circumvent the country's internet censorship. Roaming traffic is now subject to strict filtering according to local telecom operators' rules.

6.0/10·Ukrainian Pravda

Primary Source ↗Details →

CyberCrisis🇳🇱Netherlands 🇺🇦Ukraine 🇷🇺Russia20d ago

Dutch intelligence services report that Russian-linked cyber actors conducted espionage by targeting internet-connected surveillance cameras, including those along routes used for military equipment transport to Ukraine.

6.0/10·G4Media.ro

Primary Source ↗Details →

Supply ChainCrisis🇷🇺Russia21d ago

Attacks on Russian ships in the Azov Sea have halted shipping through the Azov-Don canal, causing wheat prices to surge as traders worry about potential disruptions to Russian grain exports.

6.0/10·The Insider Russia·Azov Sea

Primary Source ↗Details →

CyberCrisis🇦🇺Australia21d ago

A nationwide telecom outage brought businesses and transport systems into chaos, prompting political scrutiny.

6.0/10·ABC News Australia

Primary Source ↗Details →

CyberCrisis🇹🇼Taiwan21d ago

Google's Chrome browser update has been found to contain two major bugs after patching security vulnerabilities, prompting a high-priority investigation.

6.0/10·Liberty Times

Primary Source ↗Details →

Supply ChainCrisis🇷🇺Russia 🇺🇦Ukraine21d ago

Russia is experiencing widespread fuel shortages due to Ukraine's offensive against its oil industry, with gasoline production at 65% of demand and all diesel exports banned.

6.0/10·Dagens Nyheter (Sweden)

Primary Source ↗Details →

CyberCrisis🇺🇸United States84d ago

The hacking group ShinyHunters stole roughly 6.65 terabytes of data from the educational platform Canvas, affecting nearly 9,000 schools and millions of students worldwide, and has been extorting individual institutions to prevent their data from being publicly released. The FBI has acknowledged the breach, and while Canvas has been restored online, stolen data remains at risk of exposure as some schools enter negotiations with the hackers.

6.0/10·Dawn

Primary Source ↗Details →

CyberCrisis🇭🇷Croatia84d ago

The ShinyHunters hacking group has claimed responsibility for a major breach of Canvas, the widely-used learning management software, with up to 9,000 universities and schools potentially affected by the attack.

6.0/10·Index.hr

Primary Source ↗Details →

CyberCrisis🇰🇵North Korea 🇨🇳China88d ago

The North Korean state-sponsored hacking group ScarCruft infiltrated a video game platform's software supply chain, embedding a backdoor called BirdCall into its components to spy on ethnic Koreans living in China — marking a shift from the group's previous Windows-only targeting approach.

6.0/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇨🇳China88d ago

Attackers are actively exploiting a critical remote code execution flaw in Weaver E-cology, a popular enterprise office automation platform, with a CVSS score of 9.8 — meaning no login is required to compromise affected systems running versions released before March 12, 2026.

6.0/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States88d ago

Multiple proof-of-concept exploits emerged quickly after an authentication-bypass flaw was made public, and at least one researcher says the vulnerability had already been exploited in the wild for a month before disclosure — suggesting attackers had a significant head start.

6.0/10·Dark Reading

Primary Source ↗Details →

8 9 10 11 12 13 14