Back to the main page. Open the full Risk Dashboard. Browse incidents by country or exploited vulnerabilities by vendor.
Three quick checks for your own situation. Everything runs in your browser: what you type is not sent anywhere.
How to use: start typing your country and pick it from the list, or tap a quick pick, then press Show. You get official pages where you can report a scam or cybercrime there, the cyber and crypto incidents reported, the campaigns, malware and official warnings known for it, ransomware leak-site claims, and the global threats that reach everyone.
Quick picks:
How to use: tap the app you use. You see tips to protect your account, a link to report a scam on that app, and the scams and attacks currently known against it, newest first, each with its date, how it works, one thing to do and a link to the source. Optionally narrow the list by type of scam.
Narrow by type of scam (optional):
How to use: type the products you run, separated by commas (for example Fortinet, Exchange, Ivanti), then press Check. You see the flaws in those products that attackers are already exploiting, how severe each one is, whether ransomware gangs use it, and a link to the vendor's fix. You also get any match on this site's patch list and the incidents and campaigns here that mention them. Use vendor or product names, not version numbers.
Try an example:
These tools show what public sources reported, not everything that is happening. Campaign and scam entries were collected on November 5, 2026 and each links to its source; the incident list is the one used by the Risk Dashboard. Vulnerability data comes from the CISA Known Exploited Vulnerabilities catalog, version 2026.11.04, released 2026-11-04. The catalog lists only vulnerabilities already known to be exploited, so no match does not mean a product is safe. Countries with no entry have no curated campaign yet; their incidents and the global threats still show.