RETROSPECTIVA
março de 2026
0incidentes apurados
26entraram em exploração ativa · 2 usadas por ransomware
20vítimas de ransomware · 20 no Brasil
9grupos ativos
6.276novas vulnerabilidades · 644 críticas
O que apuramos
Cada caso com seu selo de confiança e veredito — não boatos.
Sem registros neste mês.
O que passou a ser atacado de verdade
Vulnerabilidades adicionadas ao catálogo KEV da CISA no mês: exploração ativa confirmada.
CVE-2025-26399 ⚠
SolarWinds Web Help Desk
CRITICAL · 9.8 · EPSS 91%
CVE-2026-20131 ⚠Cisco Secure Firewall Management Center (FMC)
CRITICAL · 10.0 · EPSS 44%
CVE-2017-7921Hikvision Multiple Products
CRITICAL · 9.8 · EPSS 100%
CVE-2025-32432Craft CMS Craft CMS
CRITICAL · 10.0 · EPSS 100%
CVE-2021-22054Omnissa Workspace One UEM
HIGH · 7.5 · EPSS 100%
CVE-2025-68613n8n n8n
CRITICAL · 10.0 · EPSS 99%
CVE-2026-33017Langflow Langflow
CRITICAL · 9.3 · EPSS 96%
CVE-2025-54068Laravel Livewire
CRITICAL · 9.2 · EPSS 96%
CVE-2026-3055Citrix NetScaler
CRITICAL · 9.3 · EPSS 91%
CVE-2026-1603Ivanti Endpoint Manager (EPM)
HIGH · 8.6 · EPSS 88%
CVE-2021-22681Rockwell Multiple Products
CRITICAL · 9.8 · EPSS 64%
CVE-2025-47813Wing FTP Server Wing FTP Server
MEDIUM · 4.3 · EPSS 63%
CVE-2026-33634Aquasecurity Trivy
CRITICAL · 9.4 · EPSS 60%
CVE-2026-20963Microsoft SharePoint
CRITICAL · 9.8 · EPSS 29%
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS)
HIGH · 7.2 · EPSS 20%
CVE-2026-22719Broadcom VMware Aria Operations
HIGH · 8.1 · EPSS 18%
CVE-2021-30952Apple Multiple Products
HIGH · 8.8 · EPSS 7%
CVE-2023-43000Apple Multiple Products
HIGH · 8.8 · EPSS 4%
CVE-2026-3910Google Chromium V8
HIGH · 8.8 · EPSS 3%
CVE-2026-3909Google Skia
HIGH · 8.8 · EPSS 2%
CVE-2025-53521F5 BIG-IP
CRITICAL · 9.3 · EPSS 2%
CVE-2023-41974Apple iOS and iPadOS
HIGH · 7.8 · EPSS 2%
CVE-2025-31277Apple Multiple Products
HIGH · 8.8 · EPSS 2%
CVE-2026-21385Qualcomm Multiple Chipsets
HIGH · 7.8 · EPSS 1%
CVE-2025-43520Apple Multiple Products
MEDIUM · 5.5 · EPSS 0%
CVE-2025-43510Apple Multiple Products
HIGH · 7.8 · EPSS 0%
Quem mais atacou
Vítimas no Brasil
Organizações listadas em sites de extorsão. Aparecer ali é ALEGAÇÃO do criminoso, não confirmação.
knewin.com
ALP-001 · Technology · 30 mar 2026
VX Case
nova · Retail & E-Commerce · 29 mar 2026
5deagosto.com.br
lockbit5 · Retail & E-Commerce · 28 mar 2026
Americo Advogados
thegentlemen · Professional Services · 26 mar 2026
Marborges Agroindustria
exitium · Agriculture and Food Production · 23 mar 2026
Delta Ducon Engenharia
thegentlemen · Manufacturing · 23 mar 2026
saude.mt.gov.br
lockbit5 · Government & Defense · 19 mar 2026
fiepe.org.br
lockbit5 · Education · 17 mar 2026
senai.br
lockbit5 · Education · 17 mar 2026
sesi.org.br
lockbit5 · Education · 17 mar 2026
hospitalvetdiadema24h.com.br
killsec · Healthcare · 17 mar 2026
fiepe.org.br
lockbit5 · Education · 14 mar 2026
Arimex Importadora
qilin · Retail & E-Commerce · 11 mar 2026
JBS Brazil - We have 3TB of your data - Pics added
coinbasecartel · Agriculture and Food Production · 11 mar 2026
limpebras.com.br
lockbit5 · Manufacturing · 09 mar 2026
audiconcontadores.com.br
lockbit5 · Business Services · 09 mar 2026
sesi.org.br
lockbit5 · Education · 09 mar 2026
senai.br
lockbit5 · Education · 09 mar 2026
JBS Brazil - We have 3TB of your data
coinbasecartel · Agriculture and Food Production · 05 mar 2026
fgv.br
dragonforce · Education · 02 mar 2026