Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

For informational and entertainment purposes only. Not investment advice.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·b76ea51

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🚢Red Sea Escalation ⚓Shipping Lane Fragmentation

167 signals for Cyber+Economic+Health · Mali

Page 4 of 7

CyberCrisis🇨🇦Canada 🇨🇳China 🇭🇰Hong Kong+3

128d ago

Introduction This week Google and partners took action to disrupt what we believe is one of the largest residential proxy networks in the world, the IPIDEA proxy network. IPIDEA’s proxy infrastructure is a little-known component of the digital ecosystem leveraged by a wide array of bad actors. This disruption, led by Google Threat Intelligence Group (GTIG) in partnership with other teams, included three main actions: Took legal action to take down domains used to control devices and proxy traffic through them.

5.5/10·Mandiant Threat Intelligence·Hong Kong, Central and Western

Primary Source ↗Details →

EconomicCrisis🇨🇱Chile 🇲🇱Mali7d ago

Sometimes, the difference between a city that thrives and one that retreats is not in its major attractions or infrastructure, but in something more basic: the ability to walk without fear. In many Turkish cities, among markets, stations and historic neighborhoods, that sensation appears naturally. Not because risks don't exist there, but because daily life doesn't seem organized around the threat of assault or theft.

5.3/10·La Tercera (Chile — Spanish)

Primary Source ↗Details →

EconomicUpdate🇵🇰Pakistan 🇲🇱Mali10d ago

ISLAMABAD: The Federation of Pakistan Chambers of Commerce and Industry (FPCCI) has released a set of four independent ‘shadow’ policy studies proposing an alternative economic framework to accelerate growth, broaden the tax base, and reduce fiscal imbalances. The documents were prepared by the Economic Policy and Business Development Think Tank (EPBD) and released at the FPCCI office on Monday. They focused on structural reforms to lift Pakistan’s economy onto a higher, more sustainable growth path.

5.3/10·DAWN Business

Primary Source ↗Details →

EconomicUpdate🇲🇱Mali 🇵🇰Pakistan12d ago

KARACHI: The lament of rising cost of living notwithstanding, the sale of appliances like refrigerators and deep freezers has picked up in the run-up to Eidul Azha. Although peak summer is creating extra demand for cooling gadgets, dealers claim that prices remain the same as of last year. Sohail Malik, finance secretary of the Karachi Electronic Dealers Association (KEDA), told Dawn that “the sales of fridge and deep freezers have been 25-30 per cent higher during this Eid season than last year, while the number of ACs sold shows no big difference”.

5.3/10·DAWN Business

Primary Source ↗Details →

EconomicUpdate🇷🇴Romania 🇲🇱Mali 🇴🇲Oman18d ago

On May 15, 2026, S&P Global Ratings affirmed its BBB- sovereign credit ratings on Romania, as well as the negative outlook, citing expectations for quick political normalisation, full absorption of EU funds (3.5% of GDP), and the drafting of a 2027 budget plan in line with the fiscal consolidation trajectory agreed with the European Commission.  In its ad-hoc update report, S&P set quite high “baseline expectations” given the complicated political context in the country and the resistance posed by entrenched interests in mainstream ruling parties to genuine reforms. The baseline scenario came, however, with a consistent list of risks attached, including economic and political challenges that could undermine Romania's medium-term fiscal adjustment plan. In support of its high expectations, S&P specifically pointed to the broad fiscal consensus across key parties to support further sizable consolidation measures this year and next, including the approval of a credible 2027 budget.

5.3/10·Romania Insider·Mali

Primary Source ↗Details →

CyberUpdate🇲🇱Mali8d ago

CISA is prioritizing the response to multiple emerging software supply chain intrusion campaigns targeting developer ecosystems Continuous Integration/Continuous Development (CI/CD) pipelines. These recent incidents, including the GitHub compromise via a malicious Nx Console Visual Studio Code (VS Code) extension and the “Megalodon” supply chain intrusion campaign, demonstrate how cyber threat actors are abusing tools and processes that support enterprise, cloud, and DevOps environments—specifically CI/CD pipelines, code extensions and workflows.  Threat actors leveraged a prior compromise of Nx developer systems to compromise a GitHub employee’s device through a poisoned third-party VS Code extension, resulting in unauthorized access and exfiltration of internal GitHub repositories. The malicious extension version (18.95.0) was distributed through VS Code’s automatic update mechanism, meaning systems with Nx Console previously installed may have received the malicious build without developers taking any manual installation action.

5.1/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali14d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9082, a SQL injection flaw in Drupal Core, to its catalog of known exploited vulnerabilities, indicating active real-world attacks are already underway. Federal agencies are required to patch the vulnerability under Binding Operational Directive 22-01, and CISA is urging all organizations to prioritize remediation.

5.0/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali21d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft Exchange Server cross-site scripting vulnerability (CVE-2026-42897) to its Known Exploited Vulnerabilities Catalog after confirming active exploitation. Federal agencies are required to remediate the flaw under existing binding directive 22-01, and CISA urges all organizations to prioritize patching as part of standard vulnerability management.

5.0/10·CISA Current Activity·Washington, District of Columbia

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali22d ago

The US Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Catalyst SD-WAN Controller authentication bypass vulnerability (CVE-2026-20182) to its Known Exploited Vulnerabilities catalog, citing evidence of active attacks in the wild. Federal agencies must remediate the flaw under binding operational directive BOD 22-01, and CISA recommends all organizations prioritize patching to prevent exploitation of this frequently-used network infrastructure.

5.0/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali28d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a SQL injection vulnerability in BerriAI's LiteLLM software to its catalog of known exploited vulnerabilities, signaling active-use attacks in the wild. Federal civilian agencies are required to patch the flaw by a set deadline; CISA is urging all organizations to prioritize remediation as part of routine vulnerability management.

5.0/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali58d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has cataloged a newly exploited vulnerability in Ivanti's Endpoint Manager Mobile platform as a known active threat, requiring federal agencies to patch systems by a specified deadline to defend against ongoing attacks.

5.0/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali64d ago

The U.S. Cybersecurity and Infrastructure Security Agency has added a TrueConf Client vulnerability to its catalog of known exploited vulnerabilities, following evidence of active attacks in the wild. The flaw allows unauthenticated download of code without integrity verification, creating a high-risk vector for malicious actors targeting federal networks and other organizations.

5.0/10·CISA Current Activity·Mali

Primary Source ↗Details →

EconomicUpdate🇧🇷Brazil 🇲🇱Mali7d ago

# Translation The New Desenrola Brasil Program – Legal Entity, launched in May, has already accumulated over R$ 8 billion in contracts and approximately 65,000 operations completed. The information was provided this Thursday (28) by the Minister of Entrepreneurship, Microenterprises and Small Business (MEMP), Paulo Pereira. In an interview with the program Bom Dia, Ministro, produced by Brasil de Comunicação Company (EBC), he highlighted that the objective of the federal initiative is to improve the financial condition of companies, with lower interest rates than those practiced in the financial market and longer payment terms.

4.9/10·Agência Brasil

Primary Source ↗Details →

CyberCrisis🇲🇱Mali17d ago

In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helper, to run malicious code that harvests sensitive credentials and exfiltrates them to an attacker-controlled server. "Every existing tag in the repository has been moved to point to an imposter commit that does not appear in the action's normal commit history,

4.9/10·The Hacker News·Mali

Primary Source ↗Details →

CyberCrisis🇰🇵North Korea 🇲🇱Mali116d ago

Written by: Ross Inman, Adrian Hernandez Introduction North Korean threat actors continue to evolve their tradecraft to target the cryptocurrency and decentralized finance (DeFi) verticals. Mandiant recently investigated an intrusion targeting a FinTech entity within this sector, attributed to UNC1069 , a financially motivated threat actor active since at least 2018. This investigation revealed a tailored intrusion resulting in the deployment of seven unique malware families, including a new set of tooling designed to capture host and victim data: SILENCELIFT, DEEPBREATH and CHROMEPUSH.

4.9/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

EconomicUpdate🇮🇷Iran 🇮🇱Israel 🇲🇱Mali13d ago

The government reduced the price of petrol by Rs6 per litre and that of high-speed diesel (HSD) by Rs6.80 on Friday, according to a notification issued by the Petroleum Division. Following the decrease, the price of petrol stands at Rs403.78 per litre and HSD’s at Rs402.78. The Petroleum Division’s press release notifying the decrease said the new prices would be effective from May 23 (Saturday).

4.7/10·DAWN Business

Primary Source ↗Details →

EconomicUpdate🇮🇷Iran 🇮🇱Israel 🇲🇱Mali20d ago

The federal government on Friday reduced petrol and diesel prices by Rs5, according to a notification issued by the Petroleum Division. According to the notification, the revised prices will take effect from May 16. Following the decrease, the price of petrol stands at Rs409.78 per litre and that of high-speed diesel at Rs409.58.

4.7/10·DAWN Business·Mali

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali4d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-21182, an Oracle WebLogic Server vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. Federal agencies are required to remediate the vulnerability by established deadlines, and CISA recommends all organizations prioritize patching as part of routine vulnerability management.

4.5/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇲🇱Mali6d ago

Microsoft Security researchers discovered a dependency confusion campaign that deployed 33 malicious npm packages to collect reconnaissance data from developer and build environments, exploiting a well-known supply-chain vulnerability in package management systems.

4.5/10·Microsoft Security Blog

Primary Source ↗Details →

HealthCrisis🇨🇴Colombia 🇲🇱Mali 🇴🇲Oman8d ago

A six-month-old baby who was in intensive care in the department of Tolima died after allegedly being sexually abused. "She could not bear the pain and cruelty of an act that should never have occurred," declared Governor Adriana Magali Matiz this Wednesday. The official recalled that the case became known on Tuesday of this week, when the girl was admitted at 4:00 p.m.

4.5/10·El Colombiano (Medellín)

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali9d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three newly exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog: flaws in Daemon Tools Lite, TanStack, and Nx Console. Federal agencies are required to patch these vulnerabilities under Binding Operational Directive 22-01, and CISA recommends all organizations prioritize remediation as part of their vulnerability management.

4.5/10·CISA Current Activity

Primary Source ↗Details →

HealthUpdate🇺🇸United States 🇪🇸Spain 🇲🇱Mali9d ago

The theme park located in Toledo publishes this job offer one week after firing three department heads as a consequence of these events. Puy du Fou acknowledges that animals were buried within the park and fires three managers. Puy du Fou wants to hire a person who is "passionate about animal welfare" to fill the position of head of the animal team.

4.5/10·eldiario.es·Toledo, Ohio

Primary Source ↗Details →

CyberUpdate🇲🇱Mali11d ago

Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks. According to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost's Content API that could allow an unauthenticated attacker to read arbitrary data from the

4.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇲🇱Mali11d ago

A new coordinated cross-ecosystem software supply chain attack campaign has targeted npm, PyPI, and Crates.io to distribute credential-stealing malware. The campaign, codenamed TrapDoor, spans more than 34 malicious packages across over 384 versions. The earliest activity was recorded on May 22, 2026, at 8:20 p.m.

4.5/10·The Hacker News

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali16d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven known vulnerabilities to its catalog of actively exploited flaws, including old Microsoft Windows and Internet Explorer bugs alongside newer Microsoft Defender elevation-of-privilege and denial-of-service vulnerabilities. CISA is urging all organizations, particularly federal agencies, to prioritize patching these vulnerabilities as part of routine vulnerability management.

4.5/10·CISA Current Activity

Primary Source ↗Details →