Report a CVE or Cyber Incident
DSADASD
In the Cyber Threat Monitor you will find continuously updated, daily information on threat actors, vulnerabilities & exploits, and recent incidents. In addition, the Cyber Threat Monitor provides a current risk assessment by country for a total of 12 sectors. The risk ratings are composed of factors from current cyber security & threat intelligence.
The Cyber Threat Monitor is available in the dashboard and on the website in the desktop version.
Real-time analysis for week 32/2026
The Cyber Threat Indicator reflects the weekly updated risk value for each country, broken down by sector.
The risk models are continuously calculated based on current cyber threat indicators.
For more information on the individual categories on the left, simply click on the category name.
| Date | CVE ID | Severity | Info | Report |
| Aug 6, 2026 | CVE-2026-48054 |
|
OpenZeppelin Contracts Wizardis a web application to interactively build a contract out of components from OpenZeppelin Contr...
|
|
| Aug 6, 2026 | CVE-2026-47765 |
|
Frappe is a full-stack web application framework. Prior to 15.110.0 and 16.20.0, the restore and bulk_restore endpoints do no...
|
|
| Aug 6, 2026 | CVE-2026-47194 |
|
Frappe is a full-stack web application framework. Prior to 15.108.0 and 16.18.3, temporary magic login link generation can us...
|
|
| Aug 6, 2026 | CVE-2026-47185 |
|
Frappe is a full-stack web application framework. Prior to 16.18.0, the Workspace Save API accepts a controlled workspace ide...
|
|
| Aug 6, 2026 | CVE-2026-45573 |
|
Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.r...
|
|
| Aug 6, 2026 | CVE-2026-45572 |
|
Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.r...
|
|
| Aug 6, 2026 | CVE-2026-45415 |
|
Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.r...
|
|
| Aug 6, 2026 | CVE-2026-45414 |
|
Decidim is a participatory democracy framework. Prior to 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API authentic...
|
|
| Aug 6, 2026 | CVE-2026-45378 |
|
Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.r...
|
|
| Aug 6, 2026 | CVE-2026-43632 |
|
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokeniz...
|
|
| Aug 6, 2026 | CVE-2026-43631 |
|
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server ...
|
|
| Aug 6, 2026 | CVE-2026-43630 |
|
llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path t...
|
|
| Aug 6, 2026 | CVE-2026-43629 |
|
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where th...
|
|
| Aug 6, 2026 | CVE-2026-43628 |
|
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler tha...
|
|
| Aug 6, 2026 | CVE-2026-43627 |
|
llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unche...
|
|
| Aug 6, 2026 | CVE-2026-41861 |
|
Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with parti...
|
|
| Aug 6, 2026 | CVE-2026-3418 |
|
The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destinatio...
|
|
| Aug 6, 2026 | CVE-2026-3415 |
|
The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flo...
|
|
| Aug 6, 2026 | CVE-2026-1289 |
|
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious act...
|
|
| Aug 6, 2026 | CVE-2026-19177 |
|
Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had c...
|
| Date | Affected services | Details | Report |
| Aug 7, 2026 | Not specified | Vanta Stealer | |
| Aug 7, 2026 | Not specified | Greatness PhaaS Campaigns Continue | |
| Aug 7, 2026 | Not specified | Fake CAPTCHA Prompts Leverage ClickFix Tactics to Infect macOS Systems | |
| Aug 6, 2026 | Not specified | Popular NPM Packages Hijacked with New Shai-Hulud Malware | |
| Aug 6, 2026 | Frey Wille (AT) | Cyberattack on jewelry retailer Frey Wille | |
| Aug 6, 2026 | Washburn County (US) | Washburn County is experiencing a cyber attack | |
| Aug 5, 2026 | Jochu Technology Co., Ltd. (TW) | Todays Information | |
| Aug 5, 2026 | Meta (US) | Autonomous AI agent breaks out and hacks third-party systems. | |
| Aug 5, 2026 | HostDZire (IN) | Critical Service Incident – Ransomware Attack on VMware Infrastructure (Updated at 4:00 AM IST | 10:43 PM UTC) | |
| Aug 5, 2026 | Municipalité de Sithonie | Access Blocked | |
| Aug 5, 2026 | Administration cantonale des Grisons (CH) | Cyberattack on a server of the Canton of Grisons | |
| Aug 5, 2026 | Caravan.kz (KZ) | Caravan.kz was subjected to a cyberattack: the editorial office publishes an official statement | |
| Aug 5, 2026 | Zeus Wallet | Unknown Threat Actors Breached Cryptocurrency Wallet Zeus Wallet In United States On 5 August 2026 | |
| Aug 5, 2026 | Universidad Autónoma de San Luis Potosí (UASLP) (MX) | August 7, 2026 | San Luis Potosí, SLP | |
| Aug 5, 2026 | Not specified | Abuse of ScreenConnect RMM and Cloudflare Tunnels in SMOKE#SCREEN Campaign | |
| Aug 4, 2026 | The AME Group (US) | Vincennes Community School Corporation Shuts Down Servers Due to Concerns Over Technology Provider Ransomware Attack | |
| Aug 4, 2026 | Brown Health Medical Group-MA (US) | Attack exposes sensitive data. | |
| Aug 4, 2026 | North Carolina Ports (US) | Cyberattack disrupts operations at NC Ports in Wilmington, Morehead City and Charlotte | |
| Aug 4, 2026 | Not specified | What did SEP Web Extension do for you last month? August 2026 | |
| Aug 4, 2026 | Not specified | Hump Hump Locker Ransomware |
| Date | Affected org. | Details | Report |
| Aug 7, 2026 | Hitech Distribuzione Informatica S.r.l. (HTDI) (IT) | Hitech Distribuzione Informatica S.r.l. (HTDI) became a victim of a ransomware attack by Spacebears on the Aug 7, 2026. | |
| Aug 7, 2026 | Hartfiel Automation (DE) | Hartfiel Automation became a victim of a ransomware attack by Thegentlemen on the Aug 7, 2026. | |
| Aug 7, 2026 | Astro Electroplating (US) | Astro Electroplating became a victim of a ransomware attack by Qilin on the Aug 7, 2026. | |
| Aug 7, 2026 | Filtronic (GB) | Filtronic became a victim of a ransomware attack by Qilin on the Aug 7, 2026. | |
| Aug 7, 2026 | EISNER ZT GMBH (AT) | EISNER ZT GMBH became a victim of a ransomware attack by Qilin on the Aug 7, 2026. | |
| Aug 7, 2026 | John C Saunders CPA (US) | John C Saunders, CPA became a victim of a ransomware attack by Qilin on the Aug 7, 2026. | |
| Aug 7, 2026 | Nikan Awasisak Agency (CA) | Nikan Awasisak Agency became a victim of a ransomware attack by Qilin on the Aug 7, 2026. | |
| Aug 7, 2026 | Depona (SE) | Depona became a victim of a ransomware attack by Qilin on the Aug 7, 2026. | |
| Aug 7, 2026 | CONTINENTAL.AERO (US) | CONTINENTAL.AERO became a victim of a ransomware attack by Clop on the Aug 7, 2026. | |
| Aug 7, 2026 | MINDRAY.COM (CN) | MINDRAY.COM became a victim of a ransomware attack by Clop on the Aug 7, 2026. | |
| Aug 7, 2026 | ATMS (IN) | ATMS became a victim of a ransomware attack by Incransom on the Aug 7, 2026. | |
| Aug 7, 2026 | Venture Logistics | Venture Logistics became a victim of a ransomware attack by Helix on the Aug 7, 2026. | |
| Aug 7, 2026 | Uber (US) | Uber became a victim of a ransomware attack by Helix on the Aug 7, 2026. | |
| Aug 7, 2026 | Highwoods Properties (US) | Highwoods Properties became a victim of a ransomware attack by Helix on the Aug 7, 2026. | |
| Aug 7, 2026 | Morguard (US) | Morguard became a victim of a ransomware attack by Helix on the Aug 7, 2026. | |
| Aug 7, 2026 | Westland Insurance (CA) | Westland Insurance became a victim of a ransomware attack by Helix on the Aug 7, 2026. | |
| Aug 7, 2026 | reflet2000.fr (FR) | reflet2000.fr became a victim of a ransomware attack by Krybit on the Aug 7, 2026. | |
| Aug 7, 2026 | www.actini.com (FR) | www.actini.com became a victim of a ransomware attack by Krybit on the Aug 7, 2026. | |
| Aug 6, 2026 | Signature Services | Signature Services became a victim of a ransomware attack by Play on the Aug 6, 2026. | |
| Aug 6, 2026 | GCATS Investments (US) | GCATS Investments became a victim of a ransomware attack by Play on the Aug 6, 2026. |
|
|
Vallanx operates an AI-powered reporting & detection system for capturing cyber security incidents. Additional information on cyber attacks comes from a wide variety of sources. These include analyses from our own security and monitoring systems, which we operate for companies and organizations around the world. Furthermore, information from news portals, press agencies, publications from government agencies and authorities, etc. is incorporated. In addition, closed and OSINT sources are used for evaluation and verification, as well as direct reports from companies.
|
Which use case do you want to implement? Talk to us. We are happy to answer your initial questions about Cyber Security & Compliance for your company! |