RECAP

January 2026

All months

0incidents investigated

17entered active exploitation · 2 used by ransomware

20ransomware victims · 20 in Brazil

9active groups

4,335new vulnerabilities · 428 critical

What we investigated

Each case with its confidence seal and verdict — not rumors.

No records this month.

What actually came under attack

Vulnerabilities added to CISA's KEV catalog during the month: confirmed active exploitation.

CVE-2026-23760 ⚠

SmarterTools SmarterMail

CRITICAL · 9.3 · EPSS 96%

CVE-2025-52691 ⚠

SmarterTools SmarterMail

CRITICAL · 10.0 · EPSS 86%

CVE-2026-24061

GNU InetUtils

CRITICAL · 9.8 · EPSS 99%

CVE-2026-1281

Ivanti Endpoint Manager Mobile (EPMM)

CRITICAL · 9.8 · EPSS 99%

CVE-2025-37164

Hewlett Packard Enterprise (HPE) OneView

CRITICAL · 10.0 · EPSS 90%

CVE-2026-24858

Fortinet Multiple Products

CRITICAL · 9.4 · EPSS 87%

CVE-2025-8110

Gogs Gogs

HIGH · 8.7 · EPSS 85%

CVE-2025-34026

Versa Concerto

CRITICAL · 9.2 · EPSS 82%

CVE-2025-31125

Vite Vitejs

MEDIUM · 5.3 · EPSS 75%

CVE-2026-21509

Microsoft Office

HIGH · 7.8 · EPSS 71%

CVE-2009-0556

Microsoft Office

HIGH · 8.8 · EPSS 67%

CVE-2025-68645

Synacor Zimbra Collaboration Suite (ZCS)

HIGH · 8.8 · EPSS 49%

CVE-2024-37079

Broadcom VMware vCenter Server

CRITICAL · 9.8 · EPSS 22%

CVE-2018-14634

Linux Kernel

HIGH · 7.8 · EPSS 15%

CVE-2026-20805

Microsoft Windows

MEDIUM · 5.5 · EPSS 7%

CVE-2025-54313

Prettier eslint-config-prettier

HIGH · 7.5 · EPSS 5%

CVE-2026-20045

Cisco Unified Communications Manager

HIGH · 8.2 · EPSS 5%

Who attacked most

lockbit59 (9 BR)

incransom3 (3 BR)

devman2 (2 BR)

thegentlemen1 (1 BR)

sinobi1 (1 BR)

coinbasecartel1 (1 BR)

insomnia1 (1 BR)

nightspire1 (1 BR)

Victims in Brazil

Organizations listed on extortion sites. Appearing there is the criminal's CLAIM, not a confirmation.

CigamSoftware

coinbasecartel · Technology · 31 Jan 2026

guarnera.com.br

lockbit5 · Professional Services · 31 Jan 2026

DIEHL & CELLA ADVOGADOS ASSOCIADOS

incransom · Professional Services · 30 Jan 2026

fastindustria.com.br

lockbit5 · Manufacturing · 30 Jan 2026

gruposelpe.com.br

lockbit5 · Professional Services · 30 Jan 2026

kenta.com.br

lockbit5 · Technology · 30 Jan 2026

PK PINHÃO & KOIFFMAN ATTORNEYS AT LAW

incransom · Professional Services · 30 Jan 2026

OAB

incransom · Professional Services · 23 Jan 2026

Chiarottino

insomnia · Professional Services · 23 Jan 2026

grupoferrosider.com.br

lockbit5 · Manufacturing · 23 Jan 2026

audiconcontadores.com.br

lockbit5 · Professional Services · 22 Jan 2026

aditusbr.com

lockbit5 · Business Services · 21 Jan 2026

S.Y.L Pastilhas e Sapatas de Freios

nightspire · Manufacturing · 21 Jan 2026

Unimed Anápolis

thegentlemen · Healthcare · 20 Jan 2026

Tvgoiania

devman · Retail & E-Commerce · 20 Jan 2026

Galutti Automotive Industria Metalurgica Ltda

sinobi · Manufacturing · 18 Jan 2026

limpebras.com.br

lockbit5 · Manufacturing · 11 Jan 2026

consigaz.com.br

devman · Energy & Utilities · 11 Jan 2026

Federal University of Sergipe

vect · Education · 05 Jan 2026

aditusbr.com

lockbit5 · Professional Services · 02 Jan 2026