RECAP
March 2026
0incidents investigated
26entered active exploitation · 2 used by ransomware
20ransomware victims · 20 in Brazil
9active groups
6,276new vulnerabilities · 644 critical
What we investigated
Each case with its confidence seal and verdict — not rumors.
No records this month.
What actually came under attack
Vulnerabilities added to CISA's KEV catalog during the month: confirmed active exploitation.
CVE-2025-26399 ⚠
SolarWinds Web Help Desk
CRITICAL · 9.8 · EPSS 91%
CVE-2026-20131 ⚠Cisco Secure Firewall Management Center (FMC)
CRITICAL · 10.0 · EPSS 44%
CVE-2017-7921Hikvision Multiple Products
CRITICAL · 9.8 · EPSS 100%
CVE-2025-32432Craft CMS Craft CMS
CRITICAL · 10.0 · EPSS 100%
CVE-2021-22054Omnissa Workspace One UEM
HIGH · 7.5 · EPSS 100%
CVE-2025-68613n8n n8n
CRITICAL · 10.0 · EPSS 99%
CVE-2026-33017Langflow Langflow
CRITICAL · 9.3 · EPSS 96%
CVE-2025-54068Laravel Livewire
CRITICAL · 9.2 · EPSS 96%
CVE-2026-3055Citrix NetScaler
CRITICAL · 9.3 · EPSS 91%
CVE-2026-1603Ivanti Endpoint Manager (EPM)
HIGH · 8.6 · EPSS 88%
CVE-2021-22681Rockwell Multiple Products
CRITICAL · 9.8 · EPSS 64%
CVE-2025-47813Wing FTP Server Wing FTP Server
MEDIUM · 4.3 · EPSS 63%
CVE-2026-33634Aquasecurity Trivy
CRITICAL · 9.4 · EPSS 60%
CVE-2026-20963Microsoft SharePoint
CRITICAL · 9.8 · EPSS 29%
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS)
HIGH · 7.2 · EPSS 20%
CVE-2026-22719Broadcom VMware Aria Operations
HIGH · 8.1 · EPSS 18%
CVE-2021-30952Apple Multiple Products
HIGH · 8.8 · EPSS 7%
CVE-2023-43000Apple Multiple Products
HIGH · 8.8 · EPSS 4%
CVE-2026-3910Google Chromium V8
HIGH · 8.8 · EPSS 3%
CVE-2026-3909Google Skia
HIGH · 8.8 · EPSS 2%
CVE-2025-53521F5 BIG-IP
CRITICAL · 9.3 · EPSS 2%
CVE-2023-41974Apple iOS and iPadOS
HIGH · 7.8 · EPSS 2%
CVE-2025-31277Apple Multiple Products
HIGH · 8.8 · EPSS 2%
CVE-2026-21385Qualcomm Multiple Chipsets
HIGH · 7.8 · EPSS 1%
CVE-2025-43520Apple Multiple Products
MEDIUM · 5.5 · EPSS 0%
CVE-2025-43510Apple Multiple Products
HIGH · 7.8 · EPSS 0%
Who attacked most
Victims in Brazil
Organizations listed on extortion sites. Appearing there is the criminal's CLAIM, not a confirmation.
knewin.com
ALP-001 · Technology · 30 Mar 2026
VX Case
nova · Retail & E-Commerce · 29 Mar 2026
5deagosto.com.br
lockbit5 · Retail & E-Commerce · 28 Mar 2026
Americo Advogados
thegentlemen · Professional Services · 26 Mar 2026
Marborges Agroindustria
exitium · Agriculture and Food Production · 23 Mar 2026
Delta Ducon Engenharia
thegentlemen · Manufacturing · 23 Mar 2026
saude.mt.gov.br
lockbit5 · Government & Defense · 19 Mar 2026
fiepe.org.br
lockbit5 · Education · 17 Mar 2026
senai.br
lockbit5 · Education · 17 Mar 2026
sesi.org.br
lockbit5 · Education · 17 Mar 2026
hospitalvetdiadema24h.com.br
killsec · Healthcare · 17 Mar 2026
fiepe.org.br
lockbit5 · Education · 14 Mar 2026
Arimex Importadora
qilin · Retail & E-Commerce · 11 Mar 2026
JBS Brazil - We have 3TB of your data - Pics added
coinbasecartel · Agriculture and Food Production · 11 Mar 2026
limpebras.com.br
lockbit5 · Manufacturing · 09 Mar 2026
audiconcontadores.com.br
lockbit5 · Business Services · 09 Mar 2026
sesi.org.br
lockbit5 · Education · 09 Mar 2026
senai.br
lockbit5 · Education · 09 Mar 2026
JBS Brazil - We have 3TB of your data
coinbasecartel · Agriculture and Food Production · 05 Mar 2026
fgv.br
dragonforce · Education · 02 Mar 2026