Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

Proudly using no third-party tracking

Illustrative, not investment advice. OpenWatch aggregates public signals for research and information only — it is not personalized financial, legal, or tax advice, and nothing here is a recommendation to buy or sell any security.

Platform

Brief
Signals
Cascade
Trajectories
Prediction Markets
Track Record
Forecast Ledger
Play Crowd Prophet
Countries
Companies
Industries
Themes
Rankings
Activity
Compare

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio
Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Data & Map Attribution

Data providers: GDELT · ACLED · USGS · WHO · SEC EDGAR · HKEX · UK Companies House · Japan EDINET · UN OCHA · Reuters · FRED · IMF · World Bank · OpenStreetMap / Nominatim · GDACS · IODA · Mapbox · Databento.

Maps © Mapbox © OpenStreetMap contributors — map and place-name data licensed under ODbL.

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·eed2ac3

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge ⚓Shipping Lane Fragmentation 🔌Taiwan Semiconductor Risk

45,638 signals for Cyber+Supply Chain

Page 5 of 1826

CyberCrisis🇫🇷France 🇷🇺Russia

18d ago

France summoned Russia's ambassador on July 13, 2026, in response to a broad cyberattack and espionage campaign attributed to Russian services, alongside a disinformation video released before France's national holiday designed to undermine diplomatic credibility.

6.5/10·RFI Français·Paris, Île-de-France

Primary Source ↗Details →

CyberUpdate🇫🇷France 🇷🇺Russia18d ago

French Foreign Minister Barrot announced a sweeping cyber campaign attributed to Russia's FSB, involving sabotage and espionage, and signaled plans to impose sanctions on nine individuals and four entities held responsible for the operation.

6.5/10·La Repubblica·null, null

Primary Source ↗Details →

CyberCrisis🇧🇷Brazil41d ago

Hackers apparently breached Brazil's Civil Defense alert system and issued a false extreme event warning, exposing vulnerabilities in the country's critical public warning infrastructure and raising concerns about future message credibility.

6.5/10·Folha de S.Paulo·null, null

Primary Source ↗Details →

CyberCrisis🇮🇷Iran42d ago

Four of Iran's major state-owned banks—Bank Melli, Bank Tejarat, Bank Saderat, and Bank Sepah—experienced widespread service disruptions on Saturday, June 13, affecting customer transactions and digital banking services nationwide.

6.5/10·IranWire·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali 🇹🇩Chad56d ago

Mandiant has documented a financially motivated extortion campaign by the threat cluster UNC3753 (also known as Luna Moth, Chatty Spider, or Silent Ransom Group) targeting dozens of U.S. legal, financial, and professional services organizations from January through May 2026. The group uses voice phishing and social engineering to trick employees into enabling remote access via screen-sharing tools and remote monitoring software, then searches for and steals highly sensitive data—including client agreements, tax documents, and personal identifiable information—within hours. After exfiltration, attackers issue aggressive three-day extortion demands threatening to notify employees, clients, and regulators and publish stolen files on the LEAKEDDATA leak site. A notable escalation involves suspected UNC3753 actors conducting in-person intrusions, posing as IT technicians to steal data directly from corporate endpoints using USB storage media.

6.5/10·Mandiant Threat Intelligence

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇮🇷Iran60d ago

Official Instagram accounts belonging to the Obama White House and the Chief Master Sergeant of the U.S. Space Force were defaced with pro-Iranian content after attackers exploited a flaw in Meta's AI support chatbot to reset passwords. Instructions for the attack were being shared on Telegram.

6.5/10·Krebs on Security

Primary Source ↗Details →

CyberCrisis🇮🇷Iran64d ago

Iran has maintained an internet blackout for 90 days, with Kentik traffic analysis revealing sustained suppression of international internet traffic. The prolonged shutdown affects the entire nation's connectivity and represents one of the longest sustained internet outages by a state actor.

6.5/10·IranWire

Primary Source ↗Details →

Supply ChainCrisis🇮🇳India 🇦🇪United Arab Emirates 🇴🇲Oman65d ago

A critical logistics route for Indian pharmaceuticals destined for African patients has been disrupted by the closure of the Strait of Hormuz, a strategic maritime chokepoint. The disruption threatens access to essential medicines across both continents and exposes fragility in global pharmaceutical supply chains.

6.5/10·Deutsche Welle (DW) English·Strait Of Hormuz

Primary Source ↗Details →

CyberCrisis🇮🇷Iran66d ago

Iran has maintained a near-total internet blackout for 88 consecutive days, despite official assurances from the government that connectivity would be restored. The prolonged shutdown has crippled commerce, isolated communities, and blocked access to independent news sources.

6.5/10·IranWire

Primary Source ↗Details →

CyberCrisis🇮🇷Iran67d ago

Iran's internet has remained largely cut off for 87 consecutive days, according to internet monitoring firm NetBlocks, with Iranian media reporting on ongoing government plans regarding the outage. The prolonged blackout is affecting communications, commerce, and access to information across the nation.

6.5/10·IranWire

Primary Source ↗Details →

CyberUpdate🇳🇱Netherlands 🇷🇺Russia67d ago

Dutch authorities arrested the co-owners of two related Internet hosting companies that provided IT infrastructure used by Russia for cyberattacks, influence operations, and disinformation campaigns targeting the European Union. The companies had taken control of technical infrastructure previously belonging to Stark Industries Solutions, an ISP already sanctioned by the EU for facilitating cyber operations by Russian intelligence agencies.

6.5/10·Krebs on Security·Netherlands

Primary Source ↗Details →

CyberCrisis🇺🇸United States70d ago

A contractor working for the U.S. Cybersecurity and Infrastructure Security Agency (CISA) intentionally published AWS GovCloud access keys and classified agency secrets to a public GitHub account, prompting Congressional lawmakers to demand answers as CISA attempts to contain the breach and revoke compromised credentials.

6.5/10·Krebs on Security·Washington, District of Columbia

Primary Source ↗Details →

CyberCrisis🇨🇳China71d ago

A Chinese cyber-espionage operation has been discovered targeting telecommunications providers worldwide using previously unknown malware for both Linux and Windows systems. Security researchers identified the malware variants as Showboat and JFMBackdoor, suggesting a sophisticated, sustained effort to establish persistent backdoor access to telecom infrastructure.

6.5/10·Bleeping Computer

Primary Source ↗Details →

CyberCrisis🇺🇸United States71d ago

Microsoft has disclosed that a privilege escalation flaw in Windows Defender (CVE-2026-41091) is being actively exploited in the wild. The vulnerability, rated 7.8 on the CVSS scale, could allow attackers to gain SYSTEM privileges through improper link resolution before file access.

6.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali71d ago

GitHub confirmed that attackers breached 3,800 of its internal repositories by exploiting a malicious version of the Nx Console VS Code extension, which was itself compromised during last week's TanStack npm supply-chain attack.

6.5/10·Bleeping Computer

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇨🇳China 🇷🇺Russia+272d ago

Popular @antv npm packages have been compromised with malware that steals CI/CD secrets from developers' systems. The 'Mini Shai-Hulud' payload executes during npm install and exfiltrates credentials for GitHub, AWS, Kubernetes, Vault, npm, and 1Password from Linux automation environments.

6.5/10·Microsoft Security Blog

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali72d ago

Microsoft disrupted a malware-signing-as-a-service (MSaaS) operation attributed to threat actor Fox Tempest that exploited Microsoft's Artifact Signing system to deliver ransomware and other malicious code, compromising thousands of machines and networks worldwide.

6.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali72d ago

GitHub confirmed that approximately 3,800 of its internal repositories were breached after an employee installed a malicious Visual Studio Code extension, marking a supply-chain compromise of one of the world's largest code hosting platforms.

6.5/10·Bleeping Computer·San Francisco, California

Primary Source ↗Details →

CyberCrisis🇺🇸United States78d ago

Cisco Talos is tracking active exploitation of an authentication bypass vulnerability (CVE-2026-20182) affecting Cisco Catalyst SD-WAN Controller and SD-WAN Manager, core network management components used widely across enterprise and government environments.

6.5/10·Cisco Talos Intelligence

Primary Source ↗Details →

CyberCrisis🇺🇸United States84d ago

A major edtech company is locked in an ongoing struggle to reclaim control of its systems from hackers, with the personal data of hundreds of millions of users potentially exposed or at risk of exfiltration.

6.5/10·Dark Reading

Primary Source ↗Details →

CyberCrisis🇺🇸United States84d ago

A cybercrime group defaced the login page of the Canvas education platform with a ransom demand, disrupting classes at school districts and universities across the United States and threatening to leak data from an estimated 275 million students and faculty at nearly 9,000 institutions.

6.5/10·Krebs on Security

Primary Source ↗Details →

CyberCrisis🇷🇺Russia 🇺🇸United States85d ago

A secret department at the military training center of Bauman Moscow State Technical University is training hackers and saboteurs for the GRU, a joint investigation by The Insider, The Guardian, Le Monde, Der Spiegel, Frontstory, and VSquare has found. The journalists reviewed more than two thousand internal documents from the department, including curricula, contracts, promotional materials, and lists of students, graduates, and faculty. The investigation describes how promising students are groomed for careers in the GRU — an organization known for hacking Western government systems, poisoning opposition figures abroad, and interfering in elections across Europe and the United States. Meduza summarizes the key findings.

6.5/10·Meduza (English)·Moscow, Moscow

Primary Source ↗Details →

CyberCrisis🇮🇷Iran86d ago

The Iranian state-sponsored hacking group MuddyWater has been linked to a ransomware attack disguised as a false flag operation, using Microsoft Teams-based social engineering to initiate infections — a technique observed by Rapid7 in early 2026.

6.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States86d ago

Palo Alto Networks has warned that a critical remote code execution flaw in its PAN-OS firewall software — tracked as CVE-2026-0300 with a CVSS score of 9.3 — is being actively exploited by attackers, requiring no authentication to trigger against internet-facing management portals.

6.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇦🇪United Arab Emirates 🇮🇷Iran86d ago

Cyberattacks targeting the UAE have tripled in a matter of weeks since the outbreak of war with Iran, with a significant portion of attempts aimed at critical infrastructure — raising fears of potential disruption to essential services.

6.5/10·Dark Reading·Abu Dhabi, Abu Dhabi

Primary Source ↗Details →