Report a CVE or Cyber Incident
DSADASD
|
|
|
|
|
Vallanx Cyber Threat Monitor
Your central hub for security-relevant information
In the Cyber Threat Monitor you will find continuously updated, daily information on threat actors, vulnerabilities & exploits, and recent incidents. In addition, the Cyber Threat Monitor provides a current risk assessment by country for a total of 12 sectors. The risk ratings are composed of factors from current cyber security & threat intelligence.
The Cyber Threat Monitor is available in the dashboard and on the website in the desktop version.
Current cyber risk level per country for
Real-time analysis for week 38/2026
The Cyber Threat Indicator reflects the weekly updated risk value for each country, broken down by sector.
The risk models are continuously calculated based on current cyber threat indicators.
For more information on the individual categories on the left, simply click on the category name.
Common Vulnerabilities & Exploits
1357 new vulnerabilities in the last 24 hours
| Date | CVE ID | Severity | Info | Report |
| Sep 16, 2026 | MAL-2026-16198 |
Malicious code in kartykp-token-pkg (npm)
|
||
| Sep 16, 2026 | MAL-2026-16197 |
Malicious code in kartykp-prod-oidc-test-pkg (npm)
|
||
| Sep 16, 2026 | MAL-2026-16204 |
Malicious code in @prime0/alanced-match (npm)
|
||
| Sep 16, 2026 | MAL-2026-16209 |
Malicious code in strapi-plugin-ccsuc-meeb (npm)
|
||
| Sep 16, 2026 | MAL-2026-16211 |
Malicious code in swnwall (npm)
|
||
| Sep 16, 2026 | MAL-2026-16207 |
Malicious code in chai-as-agile (npm)
|
||
| Sep 16, 2026 | MAL-2026-16206 |
Malicious code in @prime0/pcomatch (npm)
|
||
| Sep 16, 2026 | MAL-2026-16210 |
Malicious code in strapi-plugin-pencc-meeb (npm)
|
||
| Sep 16, 2026 | MAL-2026-16205 |
Malicious code in @prime0/inimatch (npm)
|
||
| Sep 16, 2026 | MAL-2026-16213 |
Malicious code in discord-players (npm)
|
||
| Sep 16, 2026 | MAL-2026-16215 |
Malicious code in engin1 (npm)
|
||
| Sep 16, 2026 | MAL-2026-16214 |
Malicious code in discord-resolvers (npm)
|
||
| Sep 16, 2026 | MAL-2026-16208 |
Malicious code in otel-span-adapter (npm)
|
||
| Sep 16, 2026 | MAL-2026-16216 |
Malicious code in tetomood (npm)
|
||
| Sep 16, 2026 | MAL-2026-16217 |
Malicious code in tetotest (npm)
|
||
| Sep 16, 2026 | MAL-2026-16220 |
Malicious code in jexkcode (npm)
|
||
| Sep 16, 2026 | MAL-2026-16219 |
Malicious code in licloud (PyPI)
|
||
| Sep 16, 2026 | MAL-2026-16212 |
Malicious code in cli-anything-ai-market (PyPI)
|
||
| Sep 16, 2026 | CVE-2026-92298 |
 |
EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign ...
|
|
| Sep 16, 2026 | CVE-2026-92299 |
 |
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMedia()...
|
Current cyber attacks in the last 14 days
88 documented cases in the past two weeks
| Date | Affected services | Details | Report |
| Nov 18, 2026 | Paylogix (US) | Employee benefits platform Paylogix says hackers stole financial and health information. | |
| Sep 16, 2026 | Not specified | PhantomRaven infostealer | |
| Sep 16, 2026 | Rechtsanwaltskammer München (DE) | Website of the RAK Munich compromised. | |
| Sep 15, 2026 | Not specified | KATARU IoT malware | |
| Sep 15, 2026 | Ayuntamiento de Collado Villalba (ES) | A cyberattack brings down IT services at the Collado Villalba Town Hall and leaves thousands of residents without service | |
| Sep 14, 2026 | Norwegian Parliament (NO) | Pro-Russian Group Called Server Killers Conducted DDoS Attack on Website of Norways Parliament on 14 September 2026 | |
| Sep 11, 2026 | Not specified | Espionage Groups Deploy BlueMoon Exploit Chain | |
| Sep 11, 2026 | DR.WU Skincare Co., Ltd. (TW) | Securities Options | |
| Sep 11, 2026 | Not specified | SloppyRAT malware | |
| Sep 11, 2026 | Machelen (BE) | Cyberattack targets services of the municipality of Machelen: “Apparently no personal data stolen” | VRT NEWS News | |
| Sep 11, 2026 | Duopharma Biotech Bhd (DPHARMA) (MY) | United Pharmaceuticals hit by a cyberattack; personal information may have been leaked | |
| Sep 11, 2026 | Kreishandwerkerschaft Borken (DE) | District craft association attacked by hackers | |
| Sep 10, 2026 | Not specified | Mantax Otax Android Malware | |
| Sep 10, 2026 | Not specified | GoldFactory threat group abuses Android Work Profiles with Vwork clone tool | |
| Sep 10, 2026 | Not specified | CL-CRI-1171 cybercrime operation | |
| Sep 10, 2026 | Not specified | Telegram-beaconing VBS downloader deploys ScreenConnect RMM | |
| Sep 10, 2026 | Mississippi Institutions of Higher Learning (IHL) (US) | Mississippi public university system reports financial aid disruption | |
| Sep 10, 2026 | Maison du souvenir de Maillé (FR) | “Twenty years of work wiped out”: a cyberattack targets the Maison du souvenir de Maillé, a witness to the 1944 massacre | |
| Sep 9, 2026 | Not specified | MacSync Stealer deployment via ClickFix campaigns | |
| Sep 9, 2026 | Le Tampon (FR) | www.linfo.re |
Current ransomware attacks
82 registered incidents in the last 48 hours
| Date | Affected org. | Details | Report |
| Sep 15, 2026 | Hashimoto Jimuki (JP) | Hashimoto Jimuki became a victim of a ransomware attack by Vexy Ransomware on the Sep 15, 2026. | |
| Sep 15, 2026 | marlinhvac.com (US) | marlinhvac.com became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | neumerkel-gmbh.de (DE) | neumerkel-gmbh.de became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | triniticaring.org (US) | triniticaring.org became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | laconcepcion.com.mx (MX) | laconcepcion.com.mx became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | meterex.com (DE) | meterex.com became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | stoecklin-kuechen.ch (CH) | stoecklin-kuechen.ch became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | ryomo.co.jp (JP) | ryomo.co.jp became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | ara-lyss.ch (CH) | ara-lyss.ch became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | gob.pe (PE) | gob.pe became a victim of a ransomware attack by Safepay on the Sep 15, 2026. | |
| Sep 15, 2026 | Springfield Public Schools (US) | Springfield Public Schools became a victim of a ransomware attack by Interlock on the Sep 15, 2026. | |
| Sep 15, 2026 | Wiggins Childs Pantazis Fisher Goldfarb LLC (US) | Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC became a victim of a ransomware attack by Insomnia on the Sep 15, 2026. | |
| Sep 15, 2026 | City of Fort Smith Arkansas (US) | City of Fort Smith Arkansas became a victim of a ransomware attack by Interlock on the Sep 15, 2026. | |
| Sep 15, 2026 | Taurus Ibérica (ES) | Taurus Ibérica became a victim of a ransomware attack by Qilin on the Sep 15, 2026. | |
| Sep 15, 2026 | Pilot Precision | Pilot Precision became a victim of a ransomware attack by Akira on the Sep 15, 2026. | |
| Sep 15, 2026 | Lazyboyz | Lazyboyz became a victim of a ransomware attack by Akira on the Sep 15, 2026. | |
| Sep 15, 2026 | Montana Civil Contractors (US) | Montana Civil Contractors became a victim of a ransomware attack by Qilin on the Sep 15, 2026. | |
| Sep 15, 2026 | Southern California Telephone Company (US) | Southern California Telephone Company became a victim of a ransomware attack by Akira on the Sep 15, 2026. | |
| Sep 15, 2026 | Resolve Law Group (US) | Resolve Law Group became a victim of a ransomware attack by Qilin on the Sep 15, 2026. | |
| Sep 15, 2026 | ADM (US) | ADM became a victim of a ransomware attack by Qilin on the Sep 15, 2026. |
Information about Threat Actors, APT & Cyber Crime Groups
Current Database: 1.501 Groups at Sep 16, 2026
|
|
Where does the data come from?
Vallanx operates an AI-powered reporting & detection system for capturing cyber security incidents. Additional information on cyber attacks comes from a wide variety of sources. These include analyses from our own security and monitoring systems, which we operate for companies and organizations around the world. Furthermore, information from news portals, press agencies, publications from government agencies and authorities, etc. is incorporated. In addition, closed and OSINT sources are used for evaluation and verification, as well as direct reports from companies.
Sources of Cyber Threat Monitoring
|
Which use case do you want to implement? Talk to us. We are happy to answer your initial questions about Cyber Security & Compliance for your company! |
Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters.
|
|||||||||||
|
|
|||||||||||
|
All rights reserved. © Vallanx, 2026
Terms of Use
Privacy Policy
Security Policy
|
Euro Stack: Data Warehouse & Processing in EU
 Audit in CH 
|
||||||||||
Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters.
|
|||||||||||
|
|
|||||||||||
|
All rights reserved. © Vallanx, 2026
Terms of Use
Privacy Policy
Security Policy
|
|||||||||||
|
Euro Stack: Data Warehouse & Processing in EU
Audit in CH
|
|||||||||||
|
Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters. |
|||||||
|
|
|||||||
|
All rights reserved. © Vallanx, 2026
Terms of Use
Privacy Policy
Security Policy
|
|||||||
|
Euro Stack: Data Warehouse & Processing in EU
Audit in CH
|
|||||||