Real-time global intelligence

© 2026 OpenWatch. All rights reserved.

Proudly using no third-party tracking

Illustrative, not investment advice. OpenWatch aggregates public signals for research and information only — it is not personalized financial, legal, or tax advice, and nothing here is a recommendation to buy or sell any security.

Platform

Brief
Signals
Cascade
Trajectories
Prediction Markets
Track Record
Forecast Ledger
Play Crowd Prophet
Countries
Companies
Industries
Themes
Rankings
Activity
Compare

Tools

Globe
Analytics
Crises
Clusters
Supply Chain
Alliances
Screener
Watchlist
Portfolio

Developer

Status

Sources

View all sources →

1,000+ tracked sources

Signals updated every 15 minutes

Data & Map Attribution

Data providers: GDELT · ACLED · USGS · WHO · SEC EDGAR · HKEX · UK Companies House · Japan EDINET · UN OCHA · Reuters · FRED · IMF · World Bank · OpenStreetMap / Nominatim · GDACS · IODA · Mapbox · Databento.

Maps © Mapbox © OpenStreetMap contributors — map and place-name data licensed under ODbL.

Not investment advice. OpenWatch is provided for informational and entertainment purposes only. While we strive for accuracy, precision, and source attribution in all intelligence assessments, geopolitical analysis involves inherent uncertainty and our conclusions may be incomplete, delayed, or incorrect. Nothing on this platform constitutes financial, investment, legal, or professional advice of any kind. Forward-looking scenarios and probability estimates are analytical hypotheses — not independently validated forecasts. Any actions taken based on information found here are solely your responsibility. Always consult a qualified financial advisor before making investment decisions. Past signal patterns do not guarantee future outcomes.

Methodology
Privacy Policy
Terms of Use

openwatch.io

v·9905253

Search

Congressional trades, bills, prediction markets, hearings, and intelligence signals. Signal search supports: AND OR "exact phrase" -exclude

Keywords

Threat Layer

Military Cyber Economic Disaster Political Criminal Health Supply Chain

Signal Type

Any Crisis Update Resolution

Region

Country

Min. Severity

Any ≥ 3 ≥ 5 ≥ 7 ≥ 9

Date Range

Clear all filters

Sort by

Severity Newest

↓Export CSV (requires API key)

Themes:🧠AI Chip Bottleneck 🛡US Defense Surge ⚓Shipping Lane Fragmentation 🔌Taiwan Semiconductor Risk

37,274 signals for Supply Chain+Cyber

Page 4 of 1491

CyberCrisis🇸🇪Sweden 🇫🇮Finland

🇱🇹Lithuania

+2

5d ago

The Baltic Sea region is experiencing ongoing jamming and GPS spoofing attacks against satellite navigation systems, according to Swedish Transport Agency officials. The manipulated GNSS signals are spreading geographically and complicating detection efforts, raising serious concerns about maritime and aviation safety in the strategically important waterway.

6.5/10·SVT Nyheter (Sweden)·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States5d ago

Apple has sent legal warnings to roughly 40 former employees now at OpenAI and filed a lawsuit against the AI company, alleging that it stole confidential plans for unreleased Apple devices. The dispute centers on former Apple designer Chan Liu, who allegedly downloaded dozens of files containing product specifications and engineering data before switching to OpenAI's hardware division, as both companies race to develop AI-enabled personal devices.

6.5/10·The Insider Russia·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇨🇳China6d ago

China's Foreign Ministry dismissed U.S. President Donald Trump's allegations that Beijing orchestrated a major breach compromising data on roughly 220 million American voters, calling the claims unfounded.

6.5/10·Folha de S.Paulo Internacional·null, null

Primary Source ↗Details →

CyberUpdate🇲🇦Morocco 🇫🇷France 🇪🇸Spain+17d ago

A former Moroccan intelligence official has disclosed that Morocco's domestic security services used NSO Group's Pegasus spyware to target journalists, human rights defenders, and government officials in France and Spain since 2017. The revelation provides detailed evidence of widespread state-sponsored surveillance against protected categories of persons and foreign officials.

6.5/10·The Guardian·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States7d ago

Attackers compromised AsyncAPI packages on npm and leveraged trusted CI/CD workflows to distribute malware with import-time payload execution, potentially affecting numerous downstream developers relying on the library.

6.5/10·Microsoft Security Blog·null, null

Primary Source ↗Details →

Supply ChainCrisis🇵🇰Pakistan 🇨🇳China7d ago

Escalating insurgent violence in Balochistan is disrupting Pakistan's copper exports and jeopardizing billions of dollars in Chinese investments in the region.

6.5/10·Business Standard·Balochistan, Balochistan

Primary Source ↗Details →

Supply ChainCrisis🇺🇦Ukraine 🇷🇺Russia9d ago

Shipping lanes in the Sea of Azov have been closed to traffic on Tuesday, creating the most severe disruption to Black Sea grain exports since the Ukraine war began, according to Reuters sources. The blockage threatens global grain supplies and poses risks to food security worldwide.

6.5/10·The Moscow Times·Black Sea, null

Primary Source ↗Details →

CyberCrisis🇫🇷France 🇷🇺Russia9d ago

France summoned Russia's ambassador on July 13, 2026, in response to a broad cyberattack and espionage campaign attributed to Russian services, alongside a disinformation video released before France's national holiday designed to undermine diplomatic credibility.

6.5/10·RFI Français·Paris, Île-de-France

Primary Source ↗Details →

CyberUpdate🇫🇷France 🇷🇺Russia10d ago

French Foreign Minister Barrot announced a sweeping cyber campaign attributed to Russia's FSB, involving sabotage and espionage, and signaled plans to impose sanctions on nine individuals and four entities held responsible for the operation.

6.5/10·La Repubblica·null, null

Primary Source ↗Details →

CyberCrisis🇧🇷Brazil32d ago

Hackers apparently breached Brazil's Civil Defense alert system and issued a false extreme event warning, exposing vulnerabilities in the country's critical public warning infrastructure and raising concerns about future message credibility.

6.5/10·Folha de S.Paulo·null, null

Primary Source ↗Details →

CyberCrisis🇮🇷Iran33d ago

Four of Iran's major state-owned banks—Bank Melli, Bank Tejarat, Bank Saderat, and Bank Sepah—experienced widespread service disruptions on Saturday, June 13, affecting customer transactions and digital banking services nationwide.

6.5/10·IranWire·null, null

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali 🇹🇩Chad47d ago

Mandiant has documented a financially motivated extortion campaign by the threat cluster UNC3753 (also known as Luna Moth, Chatty Spider, or Silent Ransom Group) targeting dozens of U.S. legal, financial, and professional services organizations from January through May 2026. The group uses voice phishing and social engineering to trick employees into enabling remote access via screen-sharing tools and remote monitoring software, then searches for and steals highly sensitive data—including client agreements, tax documents, and personal identifiable information—within hours. After exfiltration, attackers issue aggressive three-day extortion demands threatening to notify employees, clients, and regulators and publish stolen files on the LEAKEDDATA leak site. A notable escalation involves suspected UNC3753 actors conducting in-person intrusions, posing as IT technicians to steal data directly from corporate endpoints using USB storage media.

6.5/10·Mandiant Threat Intelligence

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇮🇷Iran51d ago

Official Instagram accounts belonging to the Obama White House and the Chief Master Sergeant of the U.S. Space Force were defaced with pro-Iranian content after attackers exploited a flaw in Meta's AI support chatbot to reset passwords. Instructions for the attack were being shared on Telegram.

6.5/10·Krebs on Security

Primary Source ↗Details →

CyberCrisis🇮🇷Iran55d ago

Iran has maintained an internet blackout for 90 days, with Kentik traffic analysis revealing sustained suppression of international internet traffic. The prolonged shutdown affects the entire nation's connectivity and represents one of the longest sustained internet outages by a state actor.

6.5/10·IranWire

Primary Source ↗Details →

Supply ChainCrisis🇮🇳India 🇦🇪United Arab Emirates 🇴🇲Oman56d ago

A critical logistics route for Indian pharmaceuticals destined for African patients has been disrupted by the closure of the Strait of Hormuz, a strategic maritime chokepoint. The disruption threatens access to essential medicines across both continents and exposes fragility in global pharmaceutical supply chains.

6.5/10·Deutsche Welle (DW) English·Strait Of Hormuz

Primary Source ↗Details →

CyberCrisis🇮🇷Iran57d ago

Iran has maintained a near-total internet blackout for 88 consecutive days, despite official assurances from the government that connectivity would be restored. The prolonged shutdown has crippled commerce, isolated communities, and blocked access to independent news sources.

6.5/10·IranWire

Primary Source ↗Details →

CyberCrisis🇮🇷Iran58d ago

Iran's internet has remained largely cut off for 87 consecutive days, according to internet monitoring firm NetBlocks, with Iranian media reporting on ongoing government plans regarding the outage. The prolonged blackout is affecting communications, commerce, and access to information across the nation.

6.5/10·IranWire

Primary Source ↗Details →

CyberUpdate🇳🇱Netherlands 🇷🇺Russia58d ago

Dutch authorities arrested the co-owners of two related Internet hosting companies that provided IT infrastructure used by Russia for cyberattacks, influence operations, and disinformation campaigns targeting the European Union. The companies had taken control of technical infrastructure previously belonging to Stark Industries Solutions, an ISP already sanctioned by the EU for facilitating cyber operations by Russian intelligence agencies.

6.5/10·Krebs on Security·Netherlands

Primary Source ↗Details →

CyberCrisis🇺🇸United States61d ago

A contractor working for the U.S. Cybersecurity and Infrastructure Security Agency (CISA) intentionally published AWS GovCloud access keys and classified agency secrets to a public GitHub account, prompting Congressional lawmakers to demand answers as CISA attempts to contain the breach and revoke compromised credentials.

6.5/10·Krebs on Security·Washington, District of Columbia

Primary Source ↗Details →

CyberCrisis🇨🇳China62d ago

A Chinese cyber-espionage operation has been discovered targeting telecommunications providers worldwide using previously unknown malware for both Linux and Windows systems. Security researchers identified the malware variants as Showboat and JFMBackdoor, suggesting a sophisticated, sustained effort to establish persistent backdoor access to telecom infrastructure.

6.5/10·Bleeping Computer

Primary Source ↗Details →

CyberCrisis🇺🇸United States63d ago

Microsoft has disclosed that a privilege escalation flaw in Windows Defender (CVE-2026-41091) is being actively exploited in the wild. The vulnerability, rated 7.8 on the CVSS scale, could allow attackers to gain SYSTEM privileges through improper link resolution before file access.

6.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali63d ago

GitHub confirmed that attackers breached 3,800 of its internal repositories by exploiting a malicious version of the Nx Console VS Code extension, which was itself compromised during last week's TanStack npm supply-chain attack.

6.5/10·Bleeping Computer

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇨🇳China 🇷🇺Russia+263d ago

Popular @antv npm packages have been compromised with malware that steals CI/CD secrets from developers' systems. The 'Mini Shai-Hulud' payload executes during npm install and exfiltrates credentials for GitHub, AWS, Kubernetes, Vault, npm, and 1Password from Linux automation environments.

6.5/10·Microsoft Security Blog

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali63d ago

Microsoft disrupted a malware-signing-as-a-service (MSaaS) operation attributed to threat actor Fox Tempest that exploited Microsoft's Artifact Signing system to deliver ransomware and other malicious code, compromising thousands of machines and networks worldwide.

6.5/10·The Hacker News

Primary Source ↗Details →

CyberCrisis🇺🇸United States 🇲🇱Mali64d ago

GitHub confirmed that approximately 3,800 of its internal repositories were breached after an employee installed a malicious Visual Studio Code extension, marking a supply-chain compromise of one of the world's largest code hosting platforms.

6.5/10·Bleeping Computer·San Francisco, California

Primary Source ↗Details →