RETROSPECTIVA
abril de 2026
1incidentes apurados · 1 no Brasil
31entraram em exploração ativa · 9 usadas por ransomware
17vítimas de ransomware · 17 no Brasil
9grupos ativos
5.838novas vulnerabilidades · 573 críticas
O que apuramos
Cada caso com seu selo de confiança e veredito — não boatos.
O que passou a ser atacado de verdade
Vulnerabilidades adicionadas ao catálogo KEV da CISA no mês: exploração ativa confirmada.
CVE-2024-27199 ⚠
JetBrains TeamCity
HIGH · 7.3 · EPSS 100%
CVE-2026-41940 ⚠WebPros cPanel & WHM and WP2 (WordPress Squared)
CRITICAL · 9.3 · EPSS 99%
CVE-2024-1708 ⚠ConnectWise ScreenConnect
HIGH · 8.4 · EPSS 95%
CVE-2023-27351 ⚠PaperCut NG/MF
HIGH · 8.2 · EPSS 78%
CVE-2024-57726 ⚠SimpleHelp SimpleHelp
CRITICAL · 9.9 · EPSS 67%
CVE-2023-21529 ⚠Microsoft Exchange Server
HIGH · 8.8 · EPSS 62%
CVE-2024-57728 ⚠SimpleHelp SimpleHelp
HIGH · 7.2 · EPSS 7%
CVE-2026-33825 ⚠Microsoft Defender
HIGH · 7.8 · EPSS 7%
CVE-2025-60710 ⚠Microsoft Windows
HIGH · 7.8 · EPSS 5%
CVE-2026-39987Marimo Marimo
CRITICAL · 9.3 · EPSS 99%
CVE-2026-34197Apache ActiveMQ
HIGH · 8.8 · EPSS 98%
CVE-2026-21643Fortinet FortiClient EMS
CRITICAL · 9.1 · EPSS 94%
CVE-2024-7399Samsung MagicINFO 9 Server
HIGH · 8.8 · EPSS 92%
CVE-2026-35616Fortinet FortiClient EMS
CRITICAL · 9.1 · EPSS 91%
CVE-2025-29635D-Link DIR-823X
HIGH · 7.2 · EPSS 88%
CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM)
CRITICAL · 9.8 · EPSS 86%
CVE-2026-32202Microsoft Windows
MEDIUM · 4.3 · EPSS 64%
CVE-2020-9715Adobe Acrobat
HIGH · 7.8 · EPSS 49%
CVE-2009-0238Microsoft Office
HIGH · 8.8 · EPSS 43%
CVE-2026-32201Microsoft SharePoint Server
MEDIUM · 6.5 · EPSS 43%
CVE-2026-20133Cisco Catalyst SD-WAN Manager
MEDIUM · 6.5 · EPSS 31%
CVE-2026-20122Cisco Catalyst SD-WAN Manger
MEDIUM · 5.4 · EPSS 25%
CVE-2012-1854Microsoft Visual Basic for Applications (VBA)
HIGH · 7.8 · EPSS 21%
CVE-2023-36424Microsoft Windows
HIGH · 7.8 · EPSS 12%
CVE-2026-34621Adobe Acrobat and Reader
HIGH · 8.6 · EPSS 7%
CVE-2026-20128Cisco Catalyst SD-WAN Manager
HIGH · 7.5 · EPSS 7%
CVE-2026-3502TrueConf Client
HIGH · 7.8 · EPSS 6%
CVE-2026-5281Google Dawn
HIGH · 8.8 · EPSS 5%
CVE-2025-2749Kentico Kentico Xperience
HIGH · 7.2 · EPSS 4%
CVE-2025-32975Quest KACE Systems Management Appliance (SMA)
CRITICAL · 10.0 · EPSS 2%
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS)
MEDIUM · 6.1 · EPSS 2%
Quem mais atacou
Vítimas no Brasil
Organizações listadas em sites de extorsão. Aparecer ali é ALEGAÇÃO do criminoso, não confirmação.
sweetome.com
lockbit5 · Retail & E-Commerce · 30 abr 2026
lbreng.com.br
lockbit5 · Professional Services · 30 abr 2026
sella.eng.br
apt73 · Technology · 27 abr 2026
siapenet.gov.br
apt73 · Government & Defense · 27 abr 2026
Colegio Notre Dame Campinas
thegentlemen · Education · 27 abr 2026
Sea Telecom Br
coinbasecartel · Technology · 23 abr 2026
Laboratório Santa Luzia
thegentlemen · Healthcare · 19 abr 2026
Grupo EBD
blackwater · Professional Services · 17 abr 2026
erstransportes.com.br
lockbit5 · Transportation/Logistics · 17 abr 2026
Greenpharma
thegentlemen · Healthcare · 15 abr 2026
secran.com.br
krybit · Professional Services · 14 abr 2026
novafp.com
dragonforce · Professional Services · 14 abr 2026
erstransportes.com.br
lockbit5 · Transportation · 14 abr 2026
DIME Distribuidora
worldleaks · Transportation · 10 abr 2026
Ipiranga Contábil
gunra · Professional Services · 08 abr 2026
Correios
coinbasecartel · Transportation · 08 abr 2026
JBS Brazil - Sample uploaded
coinbasecartel · Agriculture and Food Production · 08 abr 2026