RETROSPECTIVA

marzo de 2026

0incidentes investigados
26entraron en explotación activa · 2 usadas por ransomware
20víctimas de ransomware · 20 en Brasil
9grupos activos
6276nuevas vulnerabilidades · 644 críticas

Lo que investigamos

Cada caso con su sello de confianza y veredicto — no rumores.

Sin registros en este mes.

Lo que pasó a ser atacado de verdad

Vulnerabilidades añadidas al catálogo KEV de CISA en el mes: explotación activa confirmada.

CVE-2025-26399 ⚠
SolarWinds Web Help Desk
CRITICAL · 9.8 · EPSS 91%
CVE-2026-20131 ⚠
Cisco Secure Firewall Management Center (FMC)
CRITICAL · 10.0 · EPSS 44%
CVE-2017-7921
Hikvision Multiple Products
CRITICAL · 9.8 · EPSS 100%
CVE-2025-32432
Craft CMS Craft CMS
CRITICAL · 10.0 · EPSS 100%
CVE-2021-22054
Omnissa Workspace One UEM
HIGH · 7.5 · EPSS 100%
CVE-2025-68613
n8n n8n
CRITICAL · 10.0 · EPSS 99%
CVE-2026-33017
Langflow Langflow
CRITICAL · 9.3 · EPSS 96%
CVE-2025-54068
Laravel Livewire
CRITICAL · 9.2 · EPSS 96%
CVE-2026-3055
Citrix NetScaler
CRITICAL · 9.3 · EPSS 91%
CVE-2026-1603
Ivanti Endpoint Manager (EPM)
HIGH · 8.6 · EPSS 88%
CVE-2021-22681
Rockwell Multiple Products
CRITICAL · 9.8 · EPSS 64%
CVE-2025-47813
Wing FTP Server Wing FTP Server
MEDIUM · 4.3 · EPSS 63%
CVE-2026-33634
Aquasecurity Trivy
CRITICAL · 9.4 · EPSS 60%
CVE-2026-20963
Microsoft SharePoint
CRITICAL · 9.8 · EPSS 29%
CVE-2025-66376
Synacor Zimbra Collaboration Suite (ZCS)
HIGH · 7.2 · EPSS 20%
CVE-2026-22719
Broadcom VMware Aria Operations
HIGH · 8.1 · EPSS 18%
CVE-2021-30952
Apple Multiple Products
HIGH · 8.8 · EPSS 7%
CVE-2023-43000
Apple Multiple Products
HIGH · 8.8 · EPSS 4%
CVE-2026-3910
Google Chromium V8
HIGH · 8.8 · EPSS 3%
CVE-2026-3909
Google Skia
HIGH · 8.8 · EPSS 2%
CVE-2025-53521
F5 BIG-IP
CRITICAL · 9.3 · EPSS 2%
CVE-2023-41974
Apple iOS and iPadOS
HIGH · 7.8 · EPSS 2%
CVE-2025-31277
Apple Multiple Products
HIGH · 8.8 · EPSS 2%
CVE-2026-21385
Qualcomm Multiple Chipsets
HIGH · 7.8 · EPSS 1%
CVE-2025-43520
Apple Multiple Products
MEDIUM · 5.5 · EPSS 0%
CVE-2025-43510
Apple Multiple Products
HIGH · 7.8 · EPSS 0%

Quién más atacó

lockbit510 (10 BR)
thegentlemen2 (2 BR)
dragonforce1 (1 BR)
ALP-0011 (1 BR)
nova1 (1 BR)
qilin1 (1 BR)
killsec1 (1 BR)

Víctimas en Brasil

Organizaciones listadas en sitios de extorsión. Aparecer ahí es una ALEGACIÓN del criminal, no una confirmación.

knewin.com
ALP-001 · Technology · 30 mar 2026
VX Case
nova · Retail & E-Commerce · 29 mar 2026
5deagosto.com.br
lockbit5 · Retail & E-Commerce · 28 mar 2026
Americo Advogados
thegentlemen · Professional Services · 26 mar 2026
Marborges Agroindustria
exitium · Agriculture and Food Production · 23 mar 2026
Delta Ducon Engenharia
thegentlemen · Manufacturing · 23 mar 2026
saude.mt.gov.br
lockbit5 · Government & Defense · 19 mar 2026
fiepe.org.br
lockbit5 · Education · 17 mar 2026
senai.br
lockbit5 · Education · 17 mar 2026
sesi.org.br
lockbit5 · Education · 17 mar 2026
hospitalvetdiadema24h.com.br
killsec · Healthcare · 17 mar 2026
fiepe.org.br
lockbit5 · Education · 14 mar 2026
Arimex Importadora
qilin · Retail & E-Commerce · 11 mar 2026
JBS Brazil - We have 3TB of your data - Pics added
coinbasecartel · Agriculture and Food Production · 11 mar 2026
limpebras.com.br
lockbit5 · Manufacturing · 09 mar 2026
audiconcontadores.com.br
lockbit5 · Business Services · 09 mar 2026
sesi.org.br
lockbit5 · Education · 09 mar 2026
senai.br
lockbit5 · Education · 09 mar 2026
JBS Brazil - We have 3TB of your data
coinbasecartel · Agriculture and Food Production · 05 mar 2026
fgv.br
dragonforce · Education · 02 mar 2026
Compartir