Report a CVE or Cyber Incident
DSADASD
|
|
|
|
|
Vallanx Cyber Threat Monitor
Your central hub for security-relevant information
In the Cyber Threat Monitor you will find continuously updated, daily information on threat actors, vulnerabilities & exploits, and recent incidents. In addition, the Cyber Threat Monitor provides a current risk assessment by country for a total of 12 sectors. The risk ratings are composed of factors from current cyber security & threat intelligence.
The Cyber Threat Monitor is available in the dashboard and on the website in the desktop version.
Current cyber risk level per country for
Real-time analysis for week 33/2026
The Cyber Threat Indicator reflects the weekly updated risk value for each country, broken down by sector.
The risk models are continuously calculated based on current cyber threat indicators.
For more information on the individual categories on the left, simply click on the category name.
Common Vulnerabilities & Exploits
186 new vulnerabilities in the last 24 hours
| Date | CVE ID | Severity | Info | Report |
| Aug 14, 2026 | CVE-2026-16739 |
 |
The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.2 does not verify that a payment-confirmation request origi...
|
|
| Aug 14, 2026 | CVE-2026-15205 |
 |
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using...
|
|
| Aug 14, 2026 | CVE-2026-14290 |
|
The Embed Google Photos album WordPress plugin through 2.2.1 does not escape a shortcode attribute value before outputting it...
|
|
| Aug 14, 2026 | CVE-2026-12949 |
 |
The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity...
|
|
| Aug 14, 2026 | CVE-2026-12743 |
|
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL...
|
|
| Aug 14, 2026 | CVE-2026-19792 |
|
A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/m...
|
|
| Aug 14, 2026 | CVE-2026-19791 |
|
A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /g...
|
|
| Aug 14, 2026 | CVE-2025-10308 |
|
The Astro Booking Engine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin...
|
|
| Aug 14, 2026 | CVE-2026-19790 |
|
A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /gof...
|
|
| Aug 14, 2026 | CVE-2026-19789 |
|
A vulnerability was determined in Tenda AC1206 15.03.06.23_multi_TD01. This vulnerability affects the function set_wl_guest_i...
|
|
| Aug 14, 2026 | CVE-2026-19788 |
|
A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01. This affects the function set_device_name of the file /gofo...
|
|
| Aug 14, 2026 | CVE-2026-19787 |
|
A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file...
|
|
| Aug 14, 2026 | CVE-2026-19786 |
|
A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Mo...
|
|
| Aug 14, 2026 | CVE-2026-19785 |
|
A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the fil...
|
|
| Aug 14, 2026 | CVE-2026-19784 |
|
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Ref...
|
|
| Aug 14, 2026 | CVE-2026-18109 |
|
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions ...
|
|
| Aug 14, 2026 | CVE-2026-19771 |
|
A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bi...
|
|
| Aug 14, 2026 | CVE-2026-19770 |
|
A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport...
|
|
| Aug 14, 2026 | CVE-2026-19767 |
|
A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of ...
|
|
| Aug 14, 2026 | CVE-2026-19765 |
|
A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerabi...
|
Current cyber attacks in the last 14 days
102 documented cases in the past two weeks
| Date | Affected services | Details | Report |
| Aug 14, 2026 | Not specified | PATCHCORD Malware Cluster Targets Telecom and Critical Infrastructure | |
| Aug 14, 2026 | Not specified | GhostDesk via Fake Softwares | |
| Aug 14, 2026 | Not specified | WindRelay and SpyNote Drive NFC Fraud | |
| Aug 14, 2026 | Beacon (UK) | A compromised AWS key exposes data from organizations. | |
| Aug 14, 2026 | Shell (UK) | The CL0P group steals 89 GB of data through a software vulnerability. | |
| Aug 14, 2026 | Not specified | Project CAV3RN abuses trusted Google infrastructure for resilient espionage | |
| Aug 13, 2026 | Not specified | Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side | |
| Aug 13, 2026 | Not specified | Sandworm-Linked Group Uses Fake Job Interviews to Deploy Trojanized WireGuard Client | |
| Aug 13, 2026 | Trezor (WW) | Supply-chain attack on logistics partner exposes data of 14,000 customers. | |
| Aug 12, 2026 | Not specified | Aeternum Botnet | |
| Aug 12, 2026 | Not specified | Gunra Ransomware expands its operations | |
| Aug 12, 2026 | Not specified | A new variant of the Kimwolf botnet identified in the wild | |
| Aug 12, 2026 | Not specified | Chaos Malware Variant Targeting Linux Cloud Infrastructure | |
| Aug 12, 2026 | Berri AI (WW) | Terabytes of access data compromised through a supply-chain attack on LightLLM. | |
| Aug 12, 2026 | Threema (CH) | Messaging service repeatedly brought down again and again by DDoS attacks. | |
| Aug 11, 2026 | Not specified | DeadLock Ransomware Combines Resource-Aware Encryption with Resilient Extortion Protocols | |
| Aug 11, 2026 | Ágape Consultoria (BR) | The City Hall and Chamber of Vila Pavão are affected by a hacker attack that took down portals in Espírito Santo. | |
| Aug 11, 2026 | CH BIOTECH R&D CO., LTD. (TW) | Todays Information | |
| Aug 11, 2026 | Bloctel (FR) | Cybercriminals Stole 3 Million Phone Numbers From French Government Anti-Telemarketing List Bloctel On 11 August 2026 | |
| Aug 11, 2026 | Darlington County (US) | Darlington County, South Carolina, takes systems offline after cybersecurity incident |
Current ransomware attacks
54 registered incidents in the last 48 hours
| Date | Affected org. | Details | Report |
| Aug 14, 2026 | granjarinya.com (ES) | granjarinya.com became a victim of a ransomware attack by Safepay on the Aug 14, 2026. | |
| Aug 14, 2026 | Columbia University Information (Dental) (US) | Columbia University Information (Dental) became a victim of a ransomware attack by Global Secret Group on the Aug 14, 2026. | |
| Aug 14, 2026 | Connections (BE) | Connections became a victim of a ransomware attack by Qilin on the Aug 14, 2026. | |
| Aug 14, 2026 | Connell Enterprises LLC (US) | Connell Enterprises LLC became a victim of a ransomware attack by Interlock on the Aug 14, 2026. | |
| Aug 14, 2026 | Turner and Townsend (GB) | Turner and Townsend became a victim of a ransomware attack by Coinbasecartel on the Aug 14, 2026. | |
| Aug 14, 2026 | Serruya private equity (US) | Serruya private equity became a victim of a ransomware attack by Coinbasecartel on the Aug 14, 2026. | |
| Aug 14, 2026 | Sweet Water Holdings (US) | Sweet Water Holdings became a victim of a ransomware attack by Coinbasecartel on the Aug 14, 2026. | |
| Aug 14, 2026 | Keystops (US) | Keystops became a victim of a ransomware attack by Akira on the Aug 14, 2026. | |
| Aug 14, 2026 | Cozad Asset Management (US) | Cozad Asset Management became a victim of a ransomware attack by Akira on the Aug 14, 2026. | |
| Aug 14, 2026 | Aletex Group (ES) | Aletex Group became a victim of a ransomware attack by Qilin on the Aug 14, 2026. | |
| Aug 14, 2026 | Pierce Township (US) | Pierce Township became a victim of a ransomware attack by Rhysida on the Aug 14, 2026. | |
| Aug 14, 2026 | Radiant (SG) | Radiant became a victim of a ransomware attack by Qilin on the Aug 14, 2026. | |
| Aug 14, 2026 | ZEBRA.COM (US) | ZEBRA.COM became a victim of a ransomware attack by Clop on the Aug 14, 2026. | |
| Aug 14, 2026 | Lercher Werkzeugbau (AT) | Lercher Werkzeugbau became a victim of a ransomware attack by Qilin on the Aug 14, 2026. | |
| Aug 14, 2026 | 3f (DK) | 3f became a victim of a ransomware attack by Qilin on the Aug 14, 2026. | |
| Aug 14, 2026 | PenLink (US) | PenLink became a victim of a ransomware attack by Qilin on the Aug 14, 2026. | |
| Aug 14, 2026 | Urban Worldwide (NL) | Urban Worldwide became a victim of a ransomware attack by Qilin on the Aug 14, 2026. | |
| Aug 14, 2026 | tecnoabi.com (BR) | tecnoabi.com became a victim of a ransomware attack by M3rx on the Aug 14, 2026. | |
| Aug 14, 2026 | Cook Medical LLC (US) | Cook Medical LLC became a victim of a ransomware attack by Shinyhunters on the Aug 14, 2026. | |
| Aug 14, 2026 | Gravity Coffee (US) | Gravity Coffee became a victim of a ransomware attack by Thegentlemen on the Aug 14, 2026. |
Information about Threat Actors, APT & Cyber Crime Groups
Current Database: 1.497 Groups at Aug 15, 2026
|
|
Where does the data come from?
Vallanx operates an AI-powered reporting & detection system for capturing cyber security incidents. Additional information on cyber attacks comes from a wide variety of sources. These include analyses from our own security and monitoring systems, which we operate for companies and organizations around the world. Furthermore, information from news portals, press agencies, publications from government agencies and authorities, etc. is incorporated. In addition, closed and OSINT sources are used for evaluation and verification, as well as direct reports from companies.
Sources of Cyber Threat Monitoring
|
Which use case do you want to implement? Talk to us. We are happy to answer your initial questions about Cyber Security & Compliance for your company! |
Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters.
|
|||||||||||
|
|
|||||||||||
|
All rights reserved. © Vallanx, 2026
Terms of Use
Privacy Policy
|
Euro Stack: Data Warehouse & Processing in EU
 Audit in CH 
|
||||||||||
Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters.
|
|||||||||||
|
|
|||||||||||
|
All rights reserved. © Vallanx, 2026
Terms of Use
Privacy Policy
|
|||||||||||
|
Euro Stack: Data Warehouse & Processing in EU
Audit in CH
|
|||||||||||
|
Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters. |
|||||||
|
|
|||||||
|
All rights reserved. © Vallanx, 2026
Terms of Use
Privacy Policy
|
|||||||
|
Euro Stack: Data Warehouse & Processing in EU
Audit in CH
|
|||||||