Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

For informational and entertainment purposes only. Not investment advice.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·12ef0f3

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🚢Red Sea Escalation ⚓Shipping Lane Fragmentation

550 signals for Political+Cyber · Mali

Page 14 of 22

PoliticalCrisis🇸🇴Somalia 🇲🇱Mali 🇴🇲Oman30d ago

A 27-year-old Somali woman imprisoned for participating in anti-government protests says she was stripped naked by male guards, beaten with a baton, and held for two days without food in a small cell — an account published by the Guardian that highlights the Somali government's treatment of peaceful demonstrators.

5.0/10·The Guardian World·Mogadishu, Banaadir

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali59d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has cataloged a newly exploited vulnerability in Ivanti's Endpoint Manager Mobile platform as a known active threat, requiring federal agencies to patch systems by a specified deadline to defend against ongoing attacks.

5.0/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali65d ago

The U.S. Cybersecurity and Infrastructure Security Agency has added a TrueConf Client vulnerability to its catalog of known exploited vulnerabilities, following evidence of active attacks in the wild. The flaw allows unauthenticated download of code without integrity verification, creating a high-risk vector for malicious actors targeting federal networks and other organizations.

5.0/10·CISA Current Activity·Mali

Primary Source ↗Details →

CyberUpdate🇲🇱Maliyesterday

Multiple software supply chain attacks have hit the npm ecosystem, with threat actors using both malicious and poisoned versions of over 50 legitimate packages to distribute a Rust-based information stealer and a self-spreading worm, respectively. According to JFrog, the information stealer "scrapes every secret it can find on a developer's machine, hides behind an eBPF kernel rootkit, and

4.9/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇲🇱Mali18d ago

In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helper, to run malicious code that harvests sensitive credentials and exfiltrates them to an attacker-controlled server. "Every existing tag in the repository has been moved to point to an imposter commit that does not appear in the action's normal commit history,

4.9/10·The Hacker News·Mali

Primary Source ↗Details →

PoliticalUpdate🇲🇱Mali35d ago

Public Prosecutor criticized in Bamako [7 sources]

4.9/10·GDELT Events Historical·Bamako

Primary Source ↗Details →

CyberCrisis🇰🇵North Korea 🇲🇱Mali117d ago

Written by: Ross Inman, Adrian Hernandez Introduction North Korean threat actors continue to evolve their tradecraft to target the cryptocurrency and decentralized finance (DeFi) verticals. Mandiant recently investigated an intrusion targeting a FinTech entity within this sector, attributed to UNC1069 , a financially motivated threat actor active since at least 2018. This investigation revealed a tailored intrusion resulting in the deployment of seven unique malware families, including a new set of tooling designed to capture host and victim data: SILENCELIFT, DEEPBREATH and CHROMEPUSH.

4.9/10·Mandiant Threat Intelligence·Mali

Primary Source ↗Details →

PoliticalUpdate🇷🇺Russia 🇹🇷Turkey 🇦🇿Azerbaijan+29h ago

Armenia's upcoming parliamentary elections, which could reshape the country's ties with Russia and the West, mark a "historic moment" for the country, according to Ulrich Schmid, Professor of Eastern European Studies at the University of St Gallen. Incumbent Prime Minister Nikol Pashinyan is seeking to normalise relations with Turkey and neighbouring Azerbaijan, with which Armenia has been locked in conflict for decades.

4.7/10·France 24 English·Armenia

Primary Source ↗Details →

PoliticalUpdate🇵🇰Pakistan 🇲🇱Mali18h ago

ISLAMABAD: The Islamabad High Court (IHC) has set aside the government’s decision to deny foreign postings to several selected Trade and Investment Officers, ruling that executive authorities cannot deprive individuals of accrued rights on the basis of undisclosed intelligence reports that are neither shared with the affected persons nor produced before the court. In a detailed 26-page judgement, Justice Raja Inaam Ameen Minhas declared unlawful the Ministry of Commerce’s decision to withhold the appointments of successful candidates solely on the basis of adverse assessments attributed to the Intelligence Bureau (IB). The petitioners were represented by advocates Kashif Ali Malik, Barrister M.

4.7/10·Dawn (Pakistan)

Primary Source ↗Details →

PoliticalCrisis🇸🇴Somalia 🇲🇱Maliyesterday

[Shabelle] Mogadishu -- Somali opposition politician and lawmaker Abdirahman Abdishakur Warsame on Friday sharply criticized President Hassan Sheikh Mohamud's administration, accusing it of exerting pressure on political opponents following recent clashes in the capital, Mogadishu.

4.5/10·AllAfrica·Mogadishu, Banaadir

Primary Source ↗Details →

PoliticalCrisis🇸🇴Somalia 🇲🇱Mali2d ago

People in Mogadishu say they endured a "sleepless night" after heavy gunfire rocked Somalia's capital, with smoke rising over the city and armed forces deployed on the streets, after clashes erupted between rival political factions ahead of planned protests.

4.5/10·AfricaNews·Mogadishu, Banaadir

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali5d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-21182, an Oracle WebLogic Server vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. Federal agencies are required to remediate the vulnerability by established deadlines, and CISA recommends all organizations prioritize patching as part of routine vulnerability management.

4.5/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇲🇱Mali7d ago

Microsoft Security researchers discovered a dependency confusion campaign that deployed 33 malicious npm packages to collect reconnaissance data from developer and build environments, exploiting a well-known supply-chain vulnerability in package management systems.

4.5/10·Microsoft Security Blog

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali10d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three newly exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog: flaws in Daemon Tools Lite, TanStack, and Nx Console. Federal agencies are required to patch these vulnerabilities under Binding Operational Directive 22-01, and CISA recommends all organizations prioritize remediation as part of their vulnerability management.

4.5/10·CISA Current Activity

Primary Source ↗Details →

CyberUpdate🇲🇱Mali12d ago

Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks. According to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost's Content API that could allow an unauthenticated attacker to read arbitrary data from the

4.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇲🇱Mali12d ago

A new coordinated cross-ecosystem software supply chain attack campaign has targeted npm, PyPI, and Crates.io to distribute credential-stealing malware. The campaign, codenamed TrapDoor, spans more than 34 malicious packages across over 384 versions. The earliest activity was recorded on May 22, 2026, at 8:20 p.m.

4.5/10·The Hacker News

Primary Source ↗Details →

PoliticalUpdate🇨🇴Colombia 🇲🇱Mali16d ago

Colombia's electoral authority has suspended a ban on Atlas Intel polls after the firm appealed through Semana magazine, allowing it to publish surveys ahead of the first round of presidential elections on May 24. The CNE had ordered the temporary suspension citing methodological irregularities, but a formal four-magistrate committee must now decide whether to reinstate restrictions—a process that could take months and potentially extend past both electoral rounds.

4.5/10·El Colombiano (Medellín)·Bogota, Cundinamarca

Primary Source ↗Details →

PoliticalCrisis🇪🇸Spain 🇲🇱Mali16d ago

Former Spanish President José Luis Rodríguez Zapatero faces indictment in a corruption investigation related to the government's 2020 bailout of Plus Ultra airline, with court documents citing suspicious conversations suggesting his involvement in exchange for consulting fees paid to his daughters' company. The case is part of a broader corruption scandal affecting Spain's Socialist party, including indictments of senior officials José Luis Ábalos and Santos Cerdán, creating political vulnerability for Prime Minister Pedro Sánchez.

4.5/10·eldiario.es

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇲🇱Mali17d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven known vulnerabilities to its catalog of actively exploited flaws, including old Microsoft Windows and Internet Explorer bugs alongside newer Microsoft Defender elevation-of-privilege and denial-of-service vulnerabilities. CISA is urging all organizations, particularly federal agencies, to prioritize patching these vulnerabilities as part of routine vulnerability management.

4.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇮🇷Iran 🇲🇱Mali17d ago

A malicious Android application is being deliberately distributed to Iranian journalists, human rights activists, and civil society members, representing a targeted cyber espionage campaign.

4.5/10·IranWire

Primary Source ↗Details →

PoliticalUpdate🇨🇴Colombia 🇧🇷Brazil 🇲🇱Mali18d ago

Colombia's electoral authority has suspended polling firm AtlasIntel's operations after finding six methodological violations in presidential election surveys, including one classified as 'determinant and structural.' The suspension followed complaints from a Historical Pact congressman and a technical audit that concluded AtlasIntel's study was improperly classified as an electoral poll rather than a survey under Colombian law.

4.5/10·El Colombiano (Medellín)

Primary Source ↗Details →

CyberUpdate🇲🇱Mali18d ago

Microsoft security researchers have identified Fox Tempest, a financially motivated threat actor operating a malware-signing service that other cybercriminal groups—including Vanilla Tempest and Storm—use to distribute ransomware and malicious code more effectively.

4.5/10·Microsoft Security Blog

Primary Source ↗Details →

PoliticalUpdate🇯🇵Japan 🇲🇱Mali29d ago

Japan's cabinet approved revisions to its regulations on arms exports in April, marking another step in the country's ongoing military normalization despite constitutional limits on its armed forces. The policy change relaxes previous restrictions on exporting Japanese-made weapons to other countries, a move that proponents argue should be welcomed by most Asia-Pacific nations.

4.5/10·Asia Times·Mali

Primary Source ↗Details →

CyberCrisis🇲🇱Mali32d ago

Security researchers have released a proof-of-concept exploit showing how an administrator with elevated privileges can extract passwords from a system and use them for subsequent malicious activities.

4.5/10·Dark Reading·Mali

Primary Source ↗Details →

CyberCrisis🇯🇵Japan 🇲🇱Mali33d ago

A 17-year-old was arrested in Osaka on December 4, 2025, after using malicious code to steal personal data from over 7 million users of Kaikatsu Club, Japan's largest internet cafe chain. The teenager told investigators he carried out the hack to raise money for Pokémon cards.

4.5/10·The Hacker News·Osaka, Osaka

Primary Source ↗Details →

11 12 13 14 15 16 17