Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

Proudly using no third-party tracking

Illustrative, not investment advice. OpenWatch aggregates public signals for research and information only — it is not personalized financial, legal, or tax advice, and nothing here is a recommendation to buy or sell any security.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·eed287a

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🔌Taiwan Semiconductor Risk 🏦EM CB Pivot

468 signals for Cyber · United States

Page 15 of 19

CyberUpdate🇺🇸United States18d ago

More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. [...]

3.5/10·Bleeping Computer

Primary Source ↗Details →

CyberUpdate🇺🇸United States19d ago

A PowerShell script included in patch files appears to be triggering false positives by multiple security engines. The post Siemens Says Desigo CC Files Flagged as Malware by Security Engines appeared first on SecurityWeek .

3.5/10·SecurityWeek

Primary Source ↗Details →

CyberUpdate🇰🇷South Korea 🇺🇸United States19d ago

South Korea imposed on Thursday a record US$409 million fine on e-commerce giant Coupang over a leak that exposed the data of more than 30 million customers, provoking ire from US lawmakers. The move caps a months-long probe into the country’s largest online retail platform, which is incorporated in the United States. Allegations of a massive data leak first surfaced in November, becoming an unexpected source of friction between Seoul and Washington.

3.5/10·South China Morning Post·Seoul, Seoul

Primary Source ↗Details →

CyberUpdate🇺🇸United States20d ago

On Tuesday, Microsoft patched two zero-day vulnerabilities that let attackers gain SYSTEM privileges on fully patched Windows systems, and a third one that grants access to BitLocker-protected drives. [...]

3.5/10·Bleeping Computer

Primary Source ↗Details →

CyberUpdate🇺🇸United States21d ago

Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution. Tracked as CVE-2026-44963, the vulnerability carries a CVSS score of 9.4 out of a maximum of 10.0. "A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user," Veeam said in a Tuesday advisory.

3.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇨🇳China 🇷🇺Russia+221d ago

University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open-weight large language model to reason its way through a network, generate tailored attack strategies for each target it encounters, and replicate itself, all without human intervention and without touching a commercial AI service. The preprint, posted to arXiv on

3.5/10·The Hacker News

Primary Source ↗Details →

CyberUpdate🇺🇸United States21d ago

New variants of the NFCShare Android malware are being distributed as fake updates for legitimate banking apps hosted on GitHub. [...]

3.5/10·Bleeping Computer

Primary Source ↗Details →

CyberUpdate🇺🇸United States22d ago

The Meta-owned communications app is filing a federal court contempt order against NSO. The post WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order appeared first on SecurityWeek .

3.5/10·SecurityWeek

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇷🇺Russia23d ago

A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with various CPU architectures. [...]

3.5/10·Bleeping Computer

Primary Source ↗Details →

CyberUpdate🇺🇸United States24d ago

OpenAI has begun rolling out a new Lockdown Mode to ChatGPT for eligible personal accounts to reduce the risk of data exfiltration arising from prompt injection attacks. The feature is primarily designed for people and organizations that handle sensitive data and require stricter protection guarantees. Lockdown Mode is available to logged-in users across Free, Go, Plus, and Pro, and

3.5/10·The Hacker News

Primary Source ↗Details →

CyberUpdate🇺🇸United States25d ago

A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD. [...]

3.5/10·Bleeping Computer

Primary Source ↗Details →

CyberCrisis🇺🇸United States25d ago

The company detected a network intrusion in March and an investigation showed that some files were stolen during the attack. The post Nightclub Giant RCI Says Data Breach Affects 40,000 Individuals appeared first on SecurityWeek .

3.5/10·SecurityWeek

Primary Source ↗Details →

CyberUpdate🇺🇸United States25d ago

Security researchers and the FBI are warning that a wave of FIFA-themed fraud is already hitting World Cup 2026 fans, days before the June 11 kickoff. Recent reports describe thousands of lookalike FIFA domains, banking malware hidden inside pirate streaming apps, and at least one operation that copies FIFA's login page well enough to take over real accounts. It is an obvious target.

3.5/10·The Hacker News

Primary Source ↗Details →

CyberUpdate🇺🇸United States26d ago

Microsoft Security released updated research on failure modes in agentic AI systems based on twelve months of red-team testing, identifying seven new attack vectors including supply chain compromise and goal hijacking, along with mitigation recommendations.

3.5/10·Microsoft Security Blog

Primary Source ↗Details →

CyberUpdate🇺🇸United States 🇨🇳China 🇷🇺Russia+226d ago

Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked as CVE-2026-20230, and proof-of-concept exploit code is already public. Cisco's PSIRT says it has not seen the flaw used in attacks yet.

3.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States26d ago

Cybersecurity researchers have shed light on a macOS malvertising campaign codenamed Operation FlutterBridge that spreads a new backdoor called FlutterShell. According to Palo Alto Networks Unit 42, the campaign is said to be the next stage of a previously reported activity cluster dubbed JSCoreRunner (aka FileRipple) in late August 2025. The cybercrime group behind the two attack chains is

3.5/10·The Hacker News

Primary Source ↗Details →

CyberUpdate🇺🇸United States26d ago

Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows Defender.

3.5/10·Dark Reading

Primary Source ↗Details →

CyberUpdate🇺🇸United States27d ago

Cybersecurity researchers have flagged a new malspam campaign that makes use of Google's DoubleClick domain as a way to evade detection and ultimately deliver a remote access trojan (RAT) named DesckVB RAT. "Before the victim ever reaches attacker-controlled infrastructure, the lure routes through DoubleClick, a legitimate Google-owned domain that many security tools are less likely to treat as

3.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States29d ago

A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a self-propagating worm. "This is effectively a Mini Shai-Hulud campaign: it uses the same core tactics of install-time execution, credential harvesting, CI/CD targeting, encrypted exfiltration, and potential

3.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States33d ago

A notorious ransomware gang claims to have stolen MyPillow's private data, but CEO Mike Lindell calls it a politically motivated "hit job." With the countdown ticking toward a massive dark web leak, who is telling the truth? Read more in my article on the Hot for Security blog.

3.5/10·Graham Cluley Security

Primary Source ↗Details →

CyberUpdate🇺🇸United States33d ago

An advanced remote access Trojan is propagating online. Notably, it's delivered via an operator licensing model and features a no-code malware-development interface.

3.5/10·Dark Reading

Primary Source ↗Details →

CyberUpdate🇺🇸United States34d ago

Security firms took down all four command-and-control (C&C) channels used by the GlassWorm malware. The post GlassWorm Botnet Disrupted appeared first on SecurityWeek .

3.5/10·SecurityWeek

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇷🇺Russia35d ago

U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]

3.5/10·Bleeping Computer

Primary Source ↗Details →

CyberUpdate🇺🇸United States35d ago

TeamPCP, the cybercrime group behind later waves of the Shai-Hulud worm, has done significant damage to the open source ecosystem. But it's not necessarily due to skill alone.

3.5/10·Dark Reading

Primary Source ↗Details →

CyberCrisis🇺🇸United States40d ago

For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that's no longer the case. Read more in my article on the Fortra blog.

3.5/10·Graham Cluley Security

Primary Source ↗Details →

12 13 14 15 16 17 18