🇱🇧Lebanon
Unknown•Ranked #80 of 199•score 8662% vs global avg·Top 40%
Ransomware
17
Top: funksec
Defacements
0
No defacements
Critical incidents
3
High-severity ransomware
Severity breakdown
- Crit318%
- High00%
- Med1482%
- Low00%
Ransomware activity over time
1 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-19868
SonicWall: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
Added 2026-11-06
- CVE-2024-27834
Apple: Apple Multiple Products Improper Authentication Vulnerability
Added 2026-11-04
- CVE-2026-119977
WordPress: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Added 2026-11-03
- CVE-2026-118527
Ivanti: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Added 2026-10-30
- CVE-2026-111357
Ivanti: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Added 2026-10-30
Recent ransomware incidents in Lebanon
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-10-23 | mlh.com.lb | Professional Services | lockbit5 | CRITICAL |
| 2026-06-03 | SETS Solutions | Business Services | dragonforce | MEDIUM |
| 2026-04-01 | SAYEGH | Education | payload | MEDIUM |
| 2026-03-06 | Malia Group | Manufacturing | thegentlemen | MEDIUM |
| 2025-12-06 | solidere | Construction | devman | MEDIUM |
| 2025-08-20 | awmedicalvillage.org | Healthcare | global | MEDIUM |
| 2025-04-03 | kfar hatta medical center - Lebanon | Healthcare | babuk2 | MEDIUM |
| 2025-02-01 | myisp.live | Telecommunication | funksec | MEDIUM |
| 2024-12-30 | moph.gov.lb | Healthcare | funksec | MEDIUM |
| 2024-09-23 | cmclb.com | Business Services | ElDorado | MEDIUM |
Top targeted sectors
- Business Services4
- Education3
- Healthcare3
- Energy2
- Professional Services1
Threat actors active here
- funksec2
- helldown2
- stormous2
- lockbit32
- lockbit51