Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

Proudly using no third-party tracking

Illustrative, not investment advice. OpenWatch aggregates public signals for research and information only — it is not personalized financial, legal, or tax advice, and nothing here is a recommendation to buy or sell any security.

Platform

Brief
Signals
Cascade
Trajectories
Wagers
Track Record
Countries
Companies
Industries
Themes
Rankings

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·eed287a

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest Relevance

↓Export CSV (requires API key)

Congress & Markets0 trades · 0 bills · 0 markets · 0 hearings

Found 370 results across signals (370)

No results in congress & markets for “-26.3563”

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge 🔌Taiwan Semiconductor Risk

370 signals for "-26.3563" · Cyber · Crisis

Page 1 of 15

Crisis

68d ago

A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other malware. This type of attack leverages trusted development infrastructure to distribute malicious code to multiple downstream users and organizations.

8.5/10·Dark Reading

Primary Source ↗Details →

CyberCrisis62d ago

Attackers are conducting a sustained campaign to distribute malicious VS Code extensions through Open VSX that appear legitimate but contain self-propagating malware. This represents a supply chain attack targeting the developer community and the software they produce.

7.8/10·Dark Reading

Primary Source ↗Details →

CyberCrisis69d ago

CISA has added CVE-2026-33825, a Microsoft Defender Insufficient Granularity of Access Control Vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. This vulnerability type is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. CISA urges all organizations to prioritize remediation of KEV Catalog vulnerabilities as part of their vulnerability management practices.

7.8/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis🇧🇷Brazil10d ago

A suspected cyberattack compromised Brazil's Civil Defense emergency alert system, sending false warnings with the message "misanthropy" to millions of citizens instead of legitimate disaster alerts. The breach highlights vulnerability in critical infrastructure used to warn the public of natural disasters and other emergencies.

7.5/10·Folha de S.Paulo·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali27d ago

Researchers at Microsoft Security discovered a major npm supply chain attack that compromised over 90 versions of @redhat-cloud-services packages with credential-stealing malware. The malicious code silently infiltrated CI/CD environments and developer machines, exfiltrating credentials from GitHub, cloud platforms, and local systems before self-replicating by republishing trusted packages.

7.5/10·Microsoft Security Blog

Primary Source ↗Details →

CyberCrisis🇮🇷Iran40d ago

Iran has maintained a comprehensive internet blackout for 83 days, according to independent monitoring by NetBlocks, crippling digital services, commerce, and communications across the country.

7.5/10·IranWire·Tehran, Tehran

Primary Source ↗Details →

CyberCrisis59d ago

Bluekit is a phishing kit still under development that provides automated domain registration and an AI Assistant to users. This tool reduces technical barriers for conducting phishing attacks and represents an evolution in attack automation capabilities.

7.5/10·SecurityWeek

Primary Source ↗Details →

CyberCrisis61d ago

CISA added CVE-2026-41940, a missing authentication vulnerability in WebPros cPanel & WHM and WP2 (WordPress Squared), to its Known Exploited Vulnerabilities Catalog based on active exploitation evidence. The vulnerability is classified as a critical function bypass and represents a frequent attack vector for malicious actors. CISA urges all organizations to prioritize remediation as part of their vulnerability management practices, with federal agencies required to remediate by applicable due dates under BOD 22-01.

7.5/10·CISA Current Activity

Primary Source ↗Details →

CyberCrisis63d ago

A 21-year-old suspected of conducting approximately 100 data breaches since late 2025, including a hack of the French Ministry of National Education exposing records on nearly 250,000 employees, has been arrested in western France. The arrest represents a major law enforcement success against a prolific cybercriminal.

7.5/10·Graham Cluley Security

Primary Source ↗Details →

CyberCrisis🇦🇪United Arab Emirates 🇺🇸United States42d ago

A drone strike near the Barakah Nuclear Power Plant in the United Arab Emirates has prompted an emergency UN Security Council session in New York. IAEA Director General Rafael Mariano Grossi briefed council members as regional nuclear safety concerns escalate.

7.2/10·UN News·New York, Abu Dhabi

Primary Source ↗Details →

CyberCrisis69d ago

The expansion of remote and hybrid work during the pandemic has accelerated global hiring and digital onboarding processes, increasing reliance on online identity verification and remote access systems. Microsoft Security discusses detection strategies for identifying infiltrating IT workers across cloud environments and identity systems.

7.2/10·Microsoft Security Blog

Primary Source ↗Details →

CyberCrisis🇨🇳China56d ago

A China-linked hacking group tracked as UAT-8302 has been conducting targeted intrusions against government institutions in South America and southeastern Europe, deploying custom-built malware in what researchers at Cisco Talos describe as an ongoing advanced persistent threat campaign stretching from late 2024 into 2025.

7.0/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇨🇳China 🇧🇷Brazil 🇦🇷Argentina+256d ago

Cisco Talos has identified a sophisticated Chinese state-linked hacking group, UAT-8302, that has been systematically targeting government institutions in South America since late 2024 and southeastern Europe in 2025, in what appears to be a coordinated espionage campaign spanning multiple continents.

7.0/10·Cisco Talos Intelligence

Primary Source ↗Details →

CyberCrisis🇷🇺Russia 🇺🇸United States 🇪🇺EU+325d ago

Russian military early-warning satellites have caused at least 75 GPS signal disruptions across Europe since 2019, according to a joint study by the University of Texas and Spanish firm GMV reviewed by The New York Times. The interference, lasting under ten seconds per incident, affects US, Chinese, and EU positioning systems while sparing Russian GLONASS. Researchers warn that while individual disruptions are minor, the capability to selectively jam GPS across 450 kilometers—including critical infrastructure like power grids and cellular networks—fundamentally changes vulnerability assessments for NATO and European defense systems.

6.8/10·The Insider Russia

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇮🇪Ireland 🇮🇷Iran111d ago

A hacktivist group tied to Iranian intelligence has claimed responsibility for a destructive data-wiping cyberattack on Stryker, the Michigan-based global medical technology giant. More than 5,000 employees were sent home from the company's largest hub in Ireland, while a recorded message at Stryker's U.S. headquarters warned of an ongoing building emergency.

6.8/10·Krebs on Security·Kalamazoo, Michigan

Primary Source ↗Details →

CyberCrisis🇧🇷Brazil10d ago

Hackers apparently breached Brazil's Civil Defense alert system and issued a false extreme event warning, exposing vulnerabilities in the country's critical public warning infrastructure and raising concerns about future message credibility.

6.5/10·Folha de S.Paulo·null, null

Primary Source ↗Details →

CyberCrisis🇮🇷Iran11d ago

Four of Iran's major state-owned banks—Bank Melli, Bank Tejarat, Bank Saderat, and Bank Sepah—experienced widespread service disruptions on Saturday, June 13, affecting customer transactions and digital banking services nationwide.

6.5/10·IranWire·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali 🇹🇩Chad25d ago

Mandiant has documented a financially motivated extortion campaign by the threat cluster UNC3753 (also known as Luna Moth, Chatty Spider, or Silent Ransom Group) targeting dozens of U.S. legal, financial, and professional services organizations from January through May 2026. The group uses voice phishing and social engineering to trick employees into enabling remote access via screen-sharing tools and remote monitoring software, then searches for and steals highly sensitive data—including client agreements, tax documents, and personal identifiable information—within hours. After exfiltration, attackers issue aggressive three-day extortion demands threatening to notify employees, clients, and regulators and publish stolen files on the LEAKEDDATA leak site. A notable escalation involves suspected UNC3753 actors conducting in-person intrusions, posing as IT technicians to steal data directly from corporate endpoints using USB storage media.

6.5/10·Mandiant Threat Intelligence

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇮🇷Iran29d ago

Official Instagram accounts belonging to the Obama White House and the Chief Master Sergeant of the U.S. Space Force were defaced with pro-Iranian content after attackers exploited a flaw in Meta's AI support chatbot to reset passwords. Instructions for the attack were being shared on Telegram.

6.5/10·Krebs on Security

Primary Source ↗Details →

CyberCrisis🇮🇷Iran33d ago

Iran has maintained an internet blackout for 90 days, with Kentik traffic analysis revealing sustained suppression of international internet traffic. The prolonged shutdown affects the entire nation's connectivity and represents one of the longest sustained internet outages by a state actor.

6.5/10·IranWire

Primary Source ↗Details →

CyberCrisis🇮🇷Iran35d ago

Iran has maintained a near-total internet blackout for 88 consecutive days, despite official assurances from the government that connectivity would be restored. The prolonged shutdown has crippled commerce, isolated communities, and blocked access to independent news sources.

6.5/10·IranWire

Primary Source ↗Details →

CyberCrisis🇮🇷Iran36d ago

Iran's internet has remained largely cut off for 87 consecutive days, according to internet monitoring firm NetBlocks, with Iranian media reporting on ongoing government plans regarding the outage. The prolonged blackout is affecting communications, commerce, and access to information across the nation.

6.5/10·IranWire

Primary Source ↗Details →

CyberCrisis🇺🇸United States39d ago

A contractor working for the U.S. Cybersecurity and Infrastructure Security Agency (CISA) intentionally published AWS GovCloud access keys and classified agency secrets to a public GitHub account, prompting Congressional lawmakers to demand answers as CISA attempts to contain the breach and revoke compromised credentials.

6.5/10·Krebs on Security·Washington, District of Columbia

Primary Source ↗Details →

CyberCrisis🇨🇳China40d ago

A Chinese cyber-espionage operation has been discovered targeting telecommunications providers worldwide using previously unknown malware for both Linux and Windows systems. Security researchers identified the malware variants as Showboat and JFMBackdoor, suggesting a sophisticated, sustained effort to establish persistent backdoor access to telecom infrastructure.

6.5/10·Bleeping Computer

Primary Source ↗Details →

CyberCrisis🇺🇸United States40d ago

Microsoft has disclosed that a privilege escalation flaw in Windows Defender (CVE-2026-41091) is being actively exploited in the wild. The vulnerability, rated 7.8 on the CVSS scale, could allow attackers to gain SYSTEM privileges through improper link resolution before file access.

6.5/10·The Hacker News

Primary Source ↗Details →