Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

For informational and entertainment purposes only. Not investment advice.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·b83ae9a

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🚢Red Sea Escalation ⚓Shipping Lane Fragmentation

92 signals for Cyber+Disaster · Mali

Page 2 of 4

CyberCrisis🇨🇳China 🇮🇹Italy 🇲🇰North Macedonia+2

151d ago

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source Info Patch Info SmarterTools--SmarterMail Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution. 2025-12-29 10 CVE-2025-52691 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124/   MiniDVBLinux--MiniDVBLinux MiniDVBLinux 5.4 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands as root through the 'command' GET parameter. Attackers can exploit the /tpl/commands.sh endpoint by sending malicious command values to gain root-level system access.

6.1/10·US-CERT Bulletins·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali36d ago

Attackers compromised the popular Python Lightning package and published two trojanized versions capable of stealing credentials, with four cybersecurity firms confirming the supply chain intrusion affected versions 2.6.2 and 2.6.3 released on April 30, 2026.

6.0/10·The Hacker News·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali79d ago

CISA issued an alert following a March 11, 2026 cyberattack on medical technology giant Stryker Corporation that compromised its Microsoft environment, warning that threat actors are broadly targeting endpoint management systems and urging organizations to harden Microsoft Intune configurations using least-privilege, phishing-resistant MFA, and multi-admin approval policies.

6.0/10·CISA Current Activity·Mali, Michigan

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali7d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-0257, a Palo Alto Networks PAN-OS authentication bypass flaw, to its Known Exploited Vulnerabilities Catalog after confirming active exploitation in the wild. Federal agencies are required to remediate the vulnerability by a deadline set under binding directive BOD 22-01, while CISA recommends all organizations prioritize patching to protect against ongoing attacks.

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali10d ago

CISA added CVE-2026-48172, a privilege escalation flaw in the LiteSpeed cPanel plugin, to its Known Exploited Vulnerabilities catalog after detecting active exploitation. Federal agencies are required to patch the vulnerability under Binding Operational Directive 22-01; CISA recommends all organizations prioritize remediation as part of their vulnerability management.

5.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇲🇱Mali29d ago

Researchers have found that malicious code repositories can silently execute commands through AI coding assistants including Claude Code, Cursor, Gemini CLI, and GitHub Copilot CLI, with inadequate warning prompts doing little to stop the attack.

5.5/10·Dark Reading·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali29d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability in Ivanti Endpoint Manager Mobile to its catalog of known exploited vulnerabilities, citing active exploitation in the wild. The flaw allows improper input validation and poses significant risk to federal networks and critical infrastructure; federal agencies are required to remediate by specified deadlines.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali29d ago

Cybersecurity researchers at Kaspersky have identified three malicious packages hosted on the Python Package Index (PyPI) that disguise themselves as legitimate libraries while covertly delivering a previously unknown malware family called ZiChatBot to Windows and Linux systems. The packages implement their advertised features to avoid detection, but their primary purpose is to deliver malicious payloads.

5.5/10·The Hacker News·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali30d ago

Threat actors are running a malware campaign targeting macOS users by impersonating legitimate utility software and tricking them into executing malicious Terminal commands. The campaign, dubbed ClickFix, successfully evades traditional security defenses to steal credentials, cryptocurrency wallets, and other sensitive information from infected systems.

5.5/10·Microsoft Security Blog·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali30d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a Palo Alto Networks PAN-OS vulnerability (CVE-2026-0300) to its Known Exploited Vulnerabilities Catalog, indicating the flaw is being actively exploited by malicious actors. Federal agencies must remediate the vulnerability under Binding Operational Directive 22-01, and CISA urges all organizations to prioritize patching as part of their vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali31d ago

Kaspersky researchers have uncovered a supply chain attack against DAEMON Tools, in which malicious payloads were embedded in legitimate installers distributed directly from the software's official website and signed with authentic developer certificates — making the compromise difficult for most users to detect.

5.5/10·The Hacker News·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali36d ago

Security researchers at Atos Threat Research Center have identified a sophisticated malware campaign using SEO manipulation to lure enterprise IT professionals into downloading fake versions of administrative tools they use daily, putting high-privilege accounts at risk.

5.5/10·The Hacker News·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali46d ago

The Cybersecurity and Infrastructure Security Agency (CISA) has added eight newly discovered vulnerabilities showing evidence of active exploitation to its Known Exploited Vulnerabilities Catalog. The vulnerabilities span multiple critical systems including PaperCut NG/MF, JetBrains TeamCity, Kentico Xperience, Quest KACE, Zimbra Collaboration Suite, and Cisco Catalyst SD-WAN Manager, affecting authentication, path traversal, and information disclosure. Federal agencies are required to remediate these vulnerabilities by specified deadlines under Binding Operational Directive 22-01, and CISA urges all organizations to prioritize patching as part of their vulnerability management strategy.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali50d ago

The Cybersecurity and Infrastructure Security Agency (CISA) has added Apache ActiveMQ's CVE-2026-34197 improper input validation vulnerability to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation in the wild. Federal agencies are required to remediate the flaw under Binding Operational Directive 22-01, and CISA is urging all organizations to prioritize patching as part of vulnerability management practices.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali52d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) added two Microsoft vulnerabilities to its catalog of known exploited vulnerabilities based on evidence of active attacks. A remote code execution flaw in Microsoft Office (CVE-2009-0238) and an improper input validation vulnerability in SharePoint Server (CVE-2026-32201) are now listed as actively exploited by threat actors. Federal civilian agencies must remediate these by mandatory deadlines; CISA is urging all organizations to prioritize patching as part of routine vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali53d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven newly exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog, including flaws in Microsoft Windows, Exchange Server, and Adobe Acrobat. Federal agencies are required to patch these vulnerabilities under Binding Operational Directive 22-01, though CISA is urging all organizations to prioritize remediation given active exploitation in the wild.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali60d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Fortinet FortiClient EMS vulnerability to its Known Exploited Vulnerabilities catalog after detecting active exploitation by malicious actors. Federal civilian agencies are required to patch the flaw under Binding Operational Directive 22-01, and CISA is urging all organizations to prioritize remediation of the vulnerability as part of their vulnerability management practices.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali65d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Google Dawn use-after-free vulnerability (CVE-2026-5281) to its Known Exploited Vulnerabilities Catalog after detecting active exploitation in the wild. Federal civilian agencies are required under Binding Operational Directive 22-01 to remediate the flaw on a set timeline, and CISA is urging all organizations to prioritize patching as part of routine vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali67d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Citrix NetScaler vulnerability (CVE-2026-3055) to its catalog of known exploited vulnerabilities, citing evidence of active attacks. Federal agencies are required to patch the flaw under binding federal directive, and CISA is urging all organizations to prioritize remediation to reduce exposure to cyberattacks.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali71d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-33634, an embedded malicious code vulnerability in Aqua Security's Trivy tool, to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Federal agencies are required to remediate the vulnerability under Binding Operational Directive 22-01, though CISA urges all organizations to prioritize patching given the tool's widespread use in software supply chains.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali72d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Langflow code injection vulnerability (CVE-2026-33017) to its Known Exploited Vulnerabilities catalog after confirming active exploitation by malicious actors. Federal agencies are required to remediate the flaw by CISA's deadline, while CISA urges all organizations to prioritize patching to defend against ongoing attacks.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali77d ago

The US Cybersecurity and Infrastructure Security Agency has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, including multiple flaws in Apple products and critical code injection vulnerabilities in Craft CMS and Laravel Livewire. Federal agencies are required to patch these by specified deadlines, and CISA is urging all organizations to prioritize remediation as part of vulnerability management practice.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali78d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical deserialization vulnerability in Cisco Secure Firewall Management Center and Security Cloud Control to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. Federal agencies are required to remediate the flaw by a mandated deadline under Binding Operational Directive 22-01, and CISA is urging all organizations to prioritize patching to prevent cyberattacks.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali79d ago

The U.S. Cybersecurity and Infrastructure Security Agency has flagged a critical Microsoft SharePoint vulnerability (CVE-2026-20963) as actively exploited in the wild, adding it to its official catalog of known vulnerabilities that require urgent patching by federal agencies. The deserialization flaw is a common attack vector used by malicious actors and poses substantial risk to federal networks and broader organizational infrastructure.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali79d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has listed CVE-2025-66376, a cross-site scripting vulnerability in Zimbra Collaboration Suite, as actively exploited in the wild. Federal agencies must remediate the flaw by a legally mandated deadline, and CISA is urging all organizations to prioritize patching as part of vulnerability management.

5.5/10·CISA Current Activity·Mali

Primary Source ↗Details →