🇬🇪Georgia
Unknown•Ranked #101 of 199•score 3828% vs global avg·Top 51%
Ransomware
8
Top: clop
Defacements
0
No defacements
Critical incidents
1
High-severity ransomware
Severity breakdown
- Crit113%
- High225%
- Med563%
- Low00%
Ransomware activity over time
3 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-19868
SonicWall: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
Added 2026-11-06
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
Recent ransomware incidents in Georgia
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-09-23 | KVHELI-WORDPRESS.COM | Technology | clop | CRITICAL |
| 2026-09-12 | www.tiflispalace.ge | Hospitality | krybit | MEDIUM |
| 2026-09-07 | Superstore | Retail & E-Commerce | thegentlemen | MEDIUM |
| 2026-06-30 | Medlink Georgia | Healthcare | cmdorganization | MEDIUM |
| 2026-03-01 | IOTA HOTEL TBILISI | Hospitality and Tourism | nightspire | MEDIUM |
| 2026-01-31 | Hawk Law Group | Business Services | incransom | MEDIUM |
| 2025-08-26 | Aldagi | Financial Services | medusa | HIGH |
| 2024-05-02 | Imedi L | Healthcare | akira | HIGH |
Top targeted sectors
- Healthcare2
- Technology1
- Hospitality1
- Retail & E-Commerce1
- Hospitality and Tourism1
Threat actors active here
- clop1
- krybit1
- thegentlemen1
- cmdorganization1
- nightspire1

