Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

Proudly using no third-party tracking

Illustrative, not investment advice. OpenWatch aggregates public signals for research and information only — it is not personalized financial, legal, or tax advice, and nothing here is a recommendation to buy or sell any security.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·eed287a

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest Relevance

↓Export CSV (requires API key)

Congress & Markets0 trades · 0 bills · 0 markets · 0 hearings

Found 57 results across signals (57)

No results in congress & markets for “india OR infrastructure”

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🔌Taiwan Semiconductor Risk

57 signals for "india OR infrastructure" · Cyber · Crisis

Page 1 of 3

Crisis

68d ago

A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other malware. This type of attack leverages trusted development infrastructure to distribute malicious code to multiple downstream users and organizations.

8.5/10·Dark Reading

Primary Source ↗Details →

CyberCrisis🇧🇷Brazil10d ago

A suspected cyberattack compromised Brazil's Civil Defense emergency alert system, sending false warnings with the message "misanthropy" to millions of citizens instead of legitimate disaster alerts. The breach highlights vulnerability in critical infrastructure used to warn the public of natural disasters and other emergencies.

7.5/10·Folha de S.Paulo·null, null

Primary Source ↗Details →

CyberCrisis🇷🇺Russia 🇺🇸United States 🇪🇺EU+325d ago

Russian military early-warning satellites have caused at least 75 GPS signal disruptions across Europe since 2019, according to a joint study by the University of Texas and Spanish firm GMV reviewed by The New York Times. The interference, lasting under ten seconds per incident, affects US, Chinese, and EU positioning systems while sparing Russian GLONASS. Researchers warn that while individual disruptions are minor, the capability to selectively jam GPS across 450 kilometers—including critical infrastructure like power grids and cellular networks—fundamentally changes vulnerability assessments for NATO and European defense systems.

6.8/10·The Insider Russia

Primary Source ↗Details →

CyberCrisis🇧🇷Brazil10d ago

Hackers apparently breached Brazil's Civil Defense alert system and issued a false extreme event warning, exposing vulnerabilities in the country's critical public warning infrastructure and raising concerns about future message credibility.

6.5/10·Folha de S.Paulo·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States39d ago

A contractor working for the U.S. Cybersecurity and Infrastructure Security Agency (CISA) intentionally published AWS GovCloud access keys and classified agency secrets to a public GitHub account, prompting Congressional lawmakers to demand answers as CISA attempts to contain the breach and revoke compromised credentials.

6.5/10·Krebs on Security·Washington, District of Columbia

Primary Source ↗Details →

CyberCrisis🇨🇳China40d ago

A Chinese cyber-espionage operation has been discovered targeting telecommunications providers worldwide using previously unknown malware for both Linux and Windows systems. Security researchers identified the malware variants as Showboat and JFMBackdoor, suggesting a sophisticated, sustained effort to establish persistent backdoor access to telecom infrastructure.

6.5/10·Bleeping Computer

Primary Source ↗Details →

CyberCrisis🇦🇪United Arab Emirates 🇮🇷Iran55d ago

Cyberattacks targeting the UAE have tripled in a matter of weeks since the outbreak of war with Iran, with a significant portion of attempts aimed at critical infrastructure — raising fears of potential disruption to essential services.

6.5/10·Dark Reading·Abu Dhabi, Abu Dhabi

Primary Source ↗Details →

CyberCrisis68d ago

IT infrastructure has traditionally focused on managing electrical power supply adequacy. The item warns that cyberattackers are now exploiting voltage fluctuations as a new attack methodology, extending the threat landscape beyond traditional cyber vectors.

6.5/10·Dark Reading

Primary Source ↗Details →

CyberCrisis🇺🇸United States53d ago

Security researchers have identified PCPJack, a credential theft framework that targets exposed cloud infrastructure and removes competing malware. The toolset harvests credentials from cloud services, containerized environments, developer platforms, productivity tools, and financial services before exfiltrating the data through attacker-controlled systems.

6.2/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇷🇺Russia 🇮🇳India 🇨🇳China57d ago

The Chinese cybercrime group Silver Fox, known by multiple aliases including Monarch and Void Arachne, has been linked to a new malware campaign targeting organizations across Russia and India. The attackers deployed a previously unknown malware called ABCDoor through phishing emails spoofing correspondence from India's Income Tax Department in December 2025, with similar attacks reported to have continued afterward.

6.2/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇦🇺Australia 🇲🇱Mali46d ago

Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTIG) has continued to track an expansive extortion campaign by UNC6671, a threat actor operating under the "BlackFile" brand, that targets organizations via sophisticated voice phishing (vishing) and single sign-on (SSO) compromise. By leveraging adversary-in-the-middle (AiTM) techniques to bypass traditional perimeter defenses and multi-factor authentication (MFA), UNC6671 gains deep access to cloud environments. The group primarily targets Microsoft 365 and Okta infrastructure, leveraging Python and PowerShell scripts to programmatically exfiltrate sensitive corporate data for subsequent extortion attempts.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇩🇪Germany 🇫🇷France 🇮🇹Italy76d ago

Written by: Jamie Collier, Robin Grunewald Germany has reclaimed its position as a primary focus for cyber extortion in Europe. While data leak site (DLS) posts rose almost 50% globally in 2025, Google Threat Intelligence (GTI) data shows that the surge is hitting German infrastructure harder and faster than its regional neighbors, marking a significant return to the high-pressure levels previously observed in the country during 2022 and 2023. Cyber Criminals Pivoting Back to Germany Germany moved to the forefront of European data leak targets in 2025.

6.1/10·Mandiant Threat Intelligence

Primary Source ↗Details →

CyberCrisis🇲🇱Mali151d ago

Introduction Mandiant is tracking a significant expansion and escalation in the operations of threat clusters associated with ShinyHunters-branded extortion. As detailed in our companion report, 'Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft' , these campaigns leverage evolved voice phishing (vishing) and victim-branded credential harvesting to successfully compromise single sign-on (SSO) credentials and enroll unauthorized devices into victim multi-factor authentication (MFA) solutions. This activity is not the result of a security vulnerability in vendors' products or infrastructure.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇷🇺Russia25d ago

Amnezia VPN, one of the largest VPN services, has been largely non-functional for several days following a sustained DDoS attack on its infrastructure. Users are unable to switch between servers, affecting both free and premium accounts. The developers attribute the attack to Roskomnadzor, Russia's federal communications agency responsible for internet blocking and content control.

5.5/10·Meduza (Russian)

Primary Source ↗Details →

CyberCrisis🇪🇺EU 🇭🇺Hungary52d ago

The European Union is pushing member states to exclude Chinese telecommunications companies Huawei and ZTE from critical networks, citing mounting security risks. The policy shift could significantly impact countries like Hungary, which have substantial Chinese telecom infrastructure investments.

5.5/10·Daily News Hungary

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali54d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability in Ivanti Endpoint Manager Mobile to its catalog of known exploited vulnerabilities, citing active exploitation in the wild. The flaw allows improper input validation and poses significant risk to federal networks and critical infrastructure; federal agencies are required to remediate by specified deadlines.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali55d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a Palo Alto Networks PAN-OS vulnerability (CVE-2026-0300) to its Known Exploited Vulnerabilities Catalog, indicating the flaw is being actively exploited by malicious actors. Federal agencies must remediate the vulnerability under Binding Operational Directive 22-01, and CISA urges all organizations to prioritize patching as part of their vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States56d ago

Software companies are racing to deploy large language models and self-hosted AI infrastructure to capitalize on market pressure and competitive advantage, but security practices are being deprioritized in favor of speed. Industry analysts warn this trend threatens the security gains made over recent decades and could leave businesses and their customers exposed to novel attack vectors.

5.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States58d ago

The U.S. Cybersecurity and Infrastructure Security Agency added CVE-2026-31431, a local privilege escalation flaw impacting various Linux distributions, to its catalog of known exploited vulnerabilities after detecting active exploitation in the wild. The vulnerability carries a CVSS score of 7.8.

5.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States67d ago

Security researchers warn that proliferating shadow IT infrastructure, forgotten SaaS integrations, and now uncontrolled AI agents are creating widespread cybersecurity blind spots. Attackers do not require advanced AI capabilities to exploit these gaps, making the threat particularly acute for enterprises struggling to maintain visibility and control over their technology ecosystems.

5.5/10·Dark Reading

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali71d ago

The Cybersecurity and Infrastructure Security Agency (CISA) has added eight newly discovered vulnerabilities showing evidence of active exploitation to its Known Exploited Vulnerabilities Catalog. The vulnerabilities span multiple critical systems including PaperCut NG/MF, JetBrains TeamCity, Kentico Xperience, Quest KACE, Zimbra Collaboration Suite, and Cisco Catalyst SD-WAN Manager, affecting authentication, path traversal, and information disclosure. Federal agencies are required to remediate these vulnerabilities by specified deadlines under Binding Operational Directive 22-01, and CISA urges all organizations to prioritize patching as part of their vulnerability management strategy.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali75d ago

The Cybersecurity and Infrastructure Security Agency (CISA) has added Apache ActiveMQ's CVE-2026-34197 improper input validation vulnerability to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation in the wild. Federal agencies are required to remediate the flaw under Binding Operational Directive 22-01, and CISA is urging all organizations to prioritize patching as part of vulnerability management practices.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali77d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) added two Microsoft vulnerabilities to its catalog of known exploited vulnerabilities based on evidence of active attacks. A remote code execution flaw in Microsoft Office (CVE-2009-0238) and an improper input validation vulnerability in SharePoint Server (CVE-2026-32201) are now listed as actively exploited by threat actors. Federal civilian agencies must remediate these by mandatory deadlines; CISA is urging all organizations to prioritize patching as part of routine vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali85d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Fortinet FortiClient EMS vulnerability to its Known Exploited Vulnerabilities catalog after detecting active exploitation by malicious actors. Federal civilian agencies are required to patch the flaw under Binding Operational Directive 22-01, and CISA is urging all organizations to prioritize remediation of the vulnerability as part of their vulnerability management practices.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali90d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Google Dawn use-after-free vulnerability (CVE-2026-5281) to its Known Exploited Vulnerabilities Catalog after detecting active exploitation in the wild. Federal civilian agencies are required under Binding Operational Directive 22-01 to remediate the flaw on a set timeline, and CISA is urging all organizations to prioritize patching as part of routine vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →