RECAP

December 2025

All months
0incidents investigated
20entered active exploitation · 2 used by ransomware
20ransomware victims · 20 in Brazil
7active groups
5,522new vulnerabilities · 425 critical

What we investigated

Each case with its confidence seal and verdict — not rumors.

No records this month.

What actually came under attack

Vulnerabilities added to CISA's KEV catalog during the month: confirmed active exploitation.

CVE-2025-55182 ⚠
Meta React Server Components
CRITICAL · 10.0 · EPSS 100%
CVE-2025-14733 ⚠
WatchGuard Firebox
CRITICAL · 9.3 · EPSS 29%
CVE-2023-52163
Digiever DS-2105 Pro
HIGH · 8.8 · EPSS 97%
CVE-2025-6218
RARLAB WinRAR
HIGH · 7.8 · EPSS 90%
CVE-2025-14847
MongoDB MongoDB and MongoDB Server
HIGH · 8.7 · EPSS 83%
CVE-2025-59718
Fortinet Multiple Products
CRITICAL · 9.1 · EPSS 68%
CVE-2025-58360
OSGeo GeoServer
HIGH · 8.2 · EPSS 61%
CVE-2022-37055
D-Link Routers
CRITICAL · 9.8 · EPSS 56%
CVE-2025-14174
Google Chromium
HIGH · 8.8 · EPSS 55%
CVE-2025-14611
Gladinet CentreStack and Triofox
HIGH · 7.1 · EPSS 53%
CVE-2021-26828
OpenPLC ScadaBR
HIGH · 8.8 · EPSS 39%
CVE-2025-20393
Cisco Multiple Products
CRITICAL · 10.0 · EPSS 32%
CVE-2018-4063
Sierra Wireless AirLink ALEOS
HIGH · 8.8 · EPSS 27%
CVE-2025-43529
Apple Multiple Products
HIGH · 8.8 · EPSS 26%
CVE-2025-66644
Array Networks ArrayOS AG
HIGH · 7.2 · EPSS 3%
CVE-2025-40602
SonicWall SMA1000 appliance
MEDIUM · 6.6 · EPSS 3%
CVE-2025-62221
Microsoft Windows
HIGH · 7.8 · EPSS 3%
CVE-2025-59374
ASUS Live Update
CRITICAL · 9.3 · EPSS 1%
CVE-2025-48633
Android Framework
MEDIUM · 5.5 · EPSS 0%
CVE-2025-48572
Android Framework
HIGH · 7.8 · EPSS 0%

Who attacked most

lockbit56 (6 BR)
thegentlemen5 (5 BR)
worldleaks3 (3 BR)
devman2 (2 BR)
nova2 (2 BR)
qilin1 (1 BR)
killsec1 (1 BR)

Victims in Brazil

Organizations listed on extortion sites. Appearing there is the criminal's CLAIM, not a confirmation.

drogales.com.br
lockbit5 · Consumer Services · 30 Dec 2025
Stewart Engenharia
thegentlemen · Manufacturing · 30 Dec 2025
cmc.com.br
lockbit5 · Education · 26 Dec 2025
technicare.com.br
lockbit5 · Technology · 24 Dec 2025
Solus Tecnologia em Sistemas LTDA
thegentlemen · Technology · 24 Dec 2025
Santa Casa de Assis
thegentlemen · Healthcare · 24 Dec 2025
Ever Green Industria e Comercio Ltda
thegentlemen · Agriculture and Food Production · 24 Dec 2025
Usina Sao Jose Do Pinheiro
thegentlemen · Agriculture and Food Production · 24 Dec 2025
Sense Eletronica
nova · Technology · 23 Dec 2025
uniplaclages.edu.br
lockbit5 · Education · 20 Dec 2025
republica federative do brasil
killsec · Government & Defense · 15 Dec 2025
uniplaclages.edu.br
lockbit5 · Education · 15 Dec 2025
CANCER
devman · Financial Services · 11 Dec 2025
C*NC*R
devman · Financial Services · 11 Dec 2025
Tupi
qilin · Agriculture and Food Production · 09 Dec 2025
Empresas Maggi
worldleaks · Agriculture and Food Production · 09 Dec 2025
Big Lar
worldleaks · Energy & Utilities · 08 Dec 2025
Granjas 4 Irmãos SA - Agropecuária, Indústria e Comércio
worldleaks · Agriculture and Food Production · 08 Dec 2025
montaury.com.br
lockbit5 · Business Services · 05 Dec 2025
Atenção Primária à Saúde Brazil
nova · Healthcare · 04 Dec 2025
Share