RECAP

November 2025

All months
0incidents investigated
11entered active exploitation
15ransomware victims · 15 in Brazil
11active groups
3,036new vulnerabilities · 257 critical

What we investigated

Each case with its confidence seal and verdict — not rumors.

No records this month.

What actually came under attack

Vulnerabilities added to CISA's KEV catalog during the month: confirmed active exploitation.

CVE-2025-48703
CWP Control Web Panel
CRITICAL · 9.0 · EPSS 100%
CVE-2025-12480
Gladinet Triofox
CRITICAL · 9.1 · EPSS 96%
CVE-2025-9242
WatchGuard Firebox
CRITICAL · 9.3 · EPSS 92%
CVE-2025-11371
Gladinet CentreStack and Triofox
HIGH · 7.5 · EPSS 92%
CVE-2025-64446
Fortinet FortiWeb
CRITICAL · 9.4 · EPSS 91%
CVE-2025-61757
Oracle Fusion Middleware
CRITICAL · 9.8 · EPSS 89%
CVE-2025-58034
Fortinet FortiWeb
MEDIUM · 6.7 · EPSS 55%
CVE-2021-26829
OpenPLC ScadaBR
MEDIUM · 5.4 · EPSS 48%
CVE-2025-21042
Samsung Mobile Devices
HIGH · 8.8 · EPSS 36%
CVE-2025-13223
Google Chromium V8
HIGH · 8.8 · EPSS 5%
CVE-2025-62215
Microsoft Windows
HIGH · 7.0 · EPSS 4%

Who attacked most

medusa2 (2 BR)
everest2 (2 BR)
ransomhouse2 (2 BR)
direwolf2 (2 BR)
coinbasecartel1 (1 BR)
beast1 (1 BR)
lockbit51 (1 BR)
qilin1 (1 BR)

Victims in Brazil

Organizations listed on extortion sites. Appearing there is the criminal's CLAIM, not a confirmation.

Diaz Gill Medicina Laboratorial S.A.
ransomhouse · Healthcare · 26 Nov 2025
Animart Pet Stores
qilin · Retail & E-Commerce · 25 Nov 2025
WR Comercial
medusa · Professional Services · 24 Nov 2025
Universidade Municipal de São Caetano
medusa · Education · 24 Nov 2025
C&M Software
dragonforce · Technology · 22 Nov 2025
Clemar Assessoria e Logística em Comércio Internacional
direwolf · Transportation · 21 Nov 2025
Transpedrosa
direwolf · Transportation · 21 Nov 2025
CIGAM Software Corporativo Ltda
coinbasecartel · Technology · 20 Nov 2025
Petrobras / SAExploration
everest · Energy & Utilities · 17 Nov 2025
Petrobras Campos Basin 3D & 4D Seismic Survey Data
everest · Energy & Utilities · 17 Nov 2025
Saude Fortaleza
nova · Healthcare · 15 Nov 2025
Assolim
ransomhouse · Agriculture and Food Production · 13 Nov 2025
drogales.com.br
lockbit5 · Retail & E-Commerce · 09 Nov 2025
speedmais
nightspire · Agriculture and Food Production · 06 Nov 2025
Noroaco
beast · Manufacturing · 06 Nov 2025
Share