Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

For informational and entertainment purposes only. Not investment advice.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·56d7417

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🚢Red Sea Escalation ⚓Shipping Lane Fragmentation

550 signals for Cyber+Political · Mali

Page 8 of 22

PoliticalUpdate🇲🇱Mali40d ago

Malian rejected Mali in Kidal [4 sources]

6.4/10

·

GDELT Events Historical

Primary Source ↗Details →

PoliticalUpdate🇲🇱Mali40d ago

Africa rejected overtures in Mali [7 sources]

6.4/10·GDELT Events Historical

Primary Source ↗Details →

PoliticalUpdate🇲🇱Mali40d ago

Malian rejected overtures in Kidal [6 sources]

6.4/10·GDELT Events Historical

Primary Source ↗Details →

PoliticalUpdate🇲🇱Mali41d ago

Government rejected overtures in Bamako [10 sources]

6.4/10·GDELT Events Historical

Primary Source ↗Details →

PoliticalUpdate🇲🇱Mali41d ago

Malian rejected Mali in Kidal [4 sources]

6.4/10·GDELT Events Historical

Primary Source ↗Details →

PoliticalUpdate🇲🇱Mali47d ago

Reports of political tensions in Bamako [8 sources]

6.4/10·GDELT Events Historical

Primary Source ↗Details →

PoliticalUpdate🇲🇱Mali48d ago

Mali rejected overtures in Bamako [4 sources]

6.4/10·GDELT Events Historical

Primary Source ↗Details →

PoliticalCrisis🇲🇱Mali 🇫🇷France15h ago

A French DGSE intelligence agent registered with Malian authorities was arrested in Bamako in August 2025, accused of attempting to orchestrate a destabilization campaign against General Assimi Goïta's junta government.

6.2/10·Le Monde (English)·Bamako, Bamako Capital District

Primary Source ↗Details →

PoliticalCrisis🇲🇱Mali 🇫🇷France19h ago

Mali's court has sentenced a French intelligence agent holding diplomatic status to 20 years in prison for charges related to undermining state security, marking a sharp escalation in tensions between the junta-controlled West African nation and France, its former colonial power.

6.2/10·France 24 World·Bamako, Bamako

Primary Source ↗Details →

PoliticalCrisis🇸🇴Somalia 🇲🇱Mali20d ago

Somalia entered a period of constitutional transition on Friday as President Hassan Sheikh Mohamud's term ended without agreement on holding elections. The mandates of both chambers of parliament, which are responsible for electing the head of state, also expired, leaving no clear mechanism for selecting a successor. Opposition parties have rejected the possibility of the current president remaining in office, creating a potential governance vacuum.

6.2/10·RFI Français·Mogadishu, Banaadir

Primary Source ↗Details →

PoliticalCrisis🇸🇴Somalia 🇲🇱Mali 🇴🇲Oman28d ago

Three journalists—Mohamed Bulbul, Abdihafid Nor Barre, and Abdishakur Mohamed Mohamud—were arrested and beaten by Somalia's counter-terrorism police in Mogadishu after reporting on a woman allegedly tortured in prison. They were detained Friday evening at a restaurant, interrogated, and released early Saturday morning. All three were reporting for The Guardian.

6.2/10·The Guardian World·Mogadishu, Banaadir

Primary Source ↗Details →

PoliticalCrisis🇺🇸United States 🇮🇳India 🇧🇩Bangladesh+228d ago

The U.S. Commission on International Religious Freedom held a formal hearing in Washington where commissioners, lawmakers, and experts presented evidence of systematic religious freedom violations in India, including discriminatory anti-conversion laws in 13 states, state-facilitated attacks on minorities, alleged transnational repression targeting diaspora activists in North America, and forced deportations of Rohingya refugees. The commission again urged the State Department to designate India a 'country of particular concern,' citing what speakers described as normalized violence against religious minorities and widespread impunity for perpetrators.

6.2/10·Dawn·Washington, District of Columbia

Primary Source ↗Details →

CyberCrisis🇧🇷Brazil 🇲🇱Mali36d ago

KrebsOnSecurity reported that a Brazilian cybersecurity firm specializing in DDoS protection has been compromised and used to launch botnet-powered distributed denial-of-service attacks against rival network operators in Brazil. The company's CEO attributed the malicious activity to a security breach, claiming a competitor may have infiltrated their systems to damage their reputation.

6.2/10·Krebs on Security·Mali

Primary Source ↗Details →

PoliticalUpdate🇮🇷Iran 🇲🇱Mali 🇳🇿New Zealand2d ago

‘The Crown’s proposals are the most damaging collection of clear and considered legislative treaty breaches that I’ve seen,’ said one claimant. The Waitangi Tribunal hearing for its inquiry into the government’s proposed amendments to treaty clauses in more than 20 pieces of legislation wrapped up just before 5pm last night, after two days of claimants from around the country presenting evidence. Many argued the proposal was unnecessary, contradictory, and will greatly diminish the government’s obligations.

6.1/10·The Spinoff

Primary Source ↗Details →

PoliticalCrisis🇨🇺Cuba 🇺🇸United States 🇲🇱Mali10d ago

# Translation Activists who traveled to Cuba in late March from the US to deliver humanitarian aid are facing a federal investigation by the Trump Administration. "I am guilty. Guilty of loving the Cuban people.

6.1/10·eldiario.es·Minneapolis, Minnesota

Primary Source ↗Details →

PoliticalCrisis🇮🇳India 🇲🇱Mali10d ago

The Medical Wing of the Jammu and Kashmir Students Association (JKSA) on Tuesday strongly condemned the shocking assault, harassment, intimidation and unauthorized intrusion inside the Labour Room and other sensitive patient-care areas of Government Medical College (GMC) Rajouri. President of JKSA Medical Wing (Jammu Kashmir Medical Students Association), Dr Wasim Khan, said that the reported incident involving threats to doctors on duty, harassment of female healthcare professionals, obstruction in medical procedures and unauthorized videography inside a highly sensitive medical facility is deeply disturbing, shameful and completely unacceptable. The Association extended its unwavering solidarity to the Resident Doctors Association (RDA), junior doctors, senior residents, postgraduate medics and all healthcare workers protesting against this grave incident.

6.1/10·Greater Kashmir·Jammu, Jammu and Kashmir

Primary Source ↗Details →

CyberCrisis🇯🇵Japan 🇲🇱Mali11d ago

Written by: Takahiro Sugiyama, Peter Revelant, Mathew Potaczek Introduction In late 2025, Mandiant responded to a security incident involving a compromised web server running KnowledgeDeliver . KnowledgeDeliver is a Learning Management System (LMS) developed by Digital Knowledge commonly used in Japan. Mandiant identified a critical vulnerability that allowed unauthenticated Remote Code Execution (RCE).

6.1/10·Mandiant Threat Intelligence

Primary Source ↗Details →

CyberCrisis🇲🇱Mali18d ago

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source Info Patch Info acl--ACL Analytics ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leveraging the EXECUTE function. Attackers can use bitsadmin to download malicious PowerShell scripts and execute them with system privileges to establish reverse shells and gain complete system control. 2026-05-17 9.8 CVE-2018-25320 ExploitDB-44281 Official Product Homepage Product Reference VulnCheck Advisory: ACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution   gitbucket--GitBucket GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file upload functionality.

6.1/10·US-CERT Bulletins·Mali

Primary Source ↗Details →

CyberCrisis🇦🇺Australia 🇲🇱Mali21d ago

Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTIG) has continued to track an expansive extortion campaign by UNC6671, a threat actor operating under the "BlackFile" brand, that targets organizations via sophisticated voice phishing (vishing) and single sign-on (SSO) compromise. By leveraging adversary-in-the-middle (AiTM) techniques to bypass traditional perimeter defenses and multi-factor authentication (MFA), UNC6671 gains deep access to cloud environments. The group primarily targets Microsoft 365 and Okta infrastructure, leveraging Python and PowerShell scripts to programmatically exfiltrate sensitive corporate data for subsequent extortion attempts.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali43d ago

Written by: JP Glab, Tufail Ahmed, Josh Kelley, Muhammad Umair Introduction Google Threat Intelligence Group (GTIG) identified a multistage intrusion campaign by a newly tracked threat group, UNC6692, that leveraged persistent social engineering, a custom modular malware suite, and deft pivoting inside the victim’s environment to achieve deep network penetration. As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT helpdesk employees, convincing their victim to accept a Microsoft Teams chat invitation from an account outside their organization. The UNC6692 campaign demonstrates an interesting evolution in tactics, particularly the use of social engineering, custom malware, and a malicious browser extension, playing on the victim’s inherent trust in several different enterprise software providers.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇫🇷France 🇲🇱Mali46d ago

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source Info Patch Info Grafana--Pyroscope Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secret_key configuration value from the Pyroscope API.

6.1/10·US-CERT Bulletins·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali 🇵🇪Peru64d ago

Written by: Stuart Carrera Introduction Building on recent BRICKSTORM research from Google Threat Intelligence Group (GTIG), this post explores the evolving threats facing virtualized environments. These operations directly target the VMware vSphere ecosystem, specifically the vCenter Server Appliance (VCSA) and ESXi hypervisors. To help organizations stay ahead of these risks, we will focus on the essential hardening strategies and mitigating controls necessary to secure these critical assets.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇰🇵North Korea 🇲🇱Mali74d ago

Every year, the cyber threat landscape forces defenders to adapt to evolving adversary tactics, techniques, and procedures (TTPs). In 2025, Mandiant observed a clear divergence in adversary pacing that closely aligns with the trends we have been documenting for defenders over the past year. On one end of the spectrum, cyber criminal groups optimized for immediate impact and deliberate recovery denial.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

CyberCrisis🇸🇦Saudi Arabia 🇹🇷Turkey 🇲🇾Malaysia+379d ago

Introduction Google Threat Intelligence Group (GTIG) has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks in recovered payloads, we believe the exploit chain to be called DarkSword. Since at least November 2025, GTIG has observed multiple commercial surveillance vendors and suspected state-sponsored actors utilizing DarkSword in distinct campaigns.

6.1/10·Mandiant Threat Intelligence·Coruna

Primary Source ↗Details →

CyberCrisis🇲🇱Mali81d ago

Written by: Bavi Sadayappan, Zach Riddle, Ioana Teaca, Kimberly Goody, Genevieve Stark Introduction Since 2018, when many financially motivated threat actors began shifting their monetization strategy to post-compromise ransomware deployments, ransomware has become one of the most pervasive threats to organizations across almost every industry vertical and region. In recent years ransomware operations have evolved, creating a robust ecosystem that has lowered the barrier to entry via the commoditization and specialization of the supporting underground communities, which is exemplified by the proliferation of the ransomware-as-a-service (RaaS) business model. While ransomware remains a dominant threat due to the volume of activity and the potential for serious operational disruptions, we have observed multiple indicators that suggest the overall profitability of ransomware operations is in decline.

6.1/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

5 6 7 8 9 10 11