Cyber Dash

Dashboard Executivo

Postura de ameaças relevante para empresas brasileiras, a partir de fontes públicas.

Resumo semanal · gerado por IA a partir dos indicadores abaixo

Analisando os indicadores da semana…

Texto gerado por IA apenas com os números exibidos; confira as fontes citadas antes de decidir.

CVEs críticas · 7d
35
CVSS 3.x crítico
Fonte:NIST NVD· coletado 15/10/2026, 22:23
Novas no KEV · 30d
36
1.746 no catálogo · 0 ligadas a ransomware
Fonte:CISA KEV· coletado 15/10/2026, 22:23
Ransomware BR · 30d
42
vítimas brasileiras publicadas
Fonte:ransomware.live· coletado 15/10/2026, 22:23
Ransomware global · 30d
1.024
vítimas em todos os países
Fonte:ransomware.live· coletado 15/10/2026, 22:23
INFOCON
GREEN
nível de ameaça na internet
Fonte:SANS ISC· coletado 15/10/2026, 22:23

Índice de Ameaça Ambiental

Metodologia aberta — não mede a sua empresa, mede o ambiente

63/100
Elevado
  • CVEs críticas publicadas (7 dias) (30%)+10.5
  • Novas no CISA KEV (30 dias) (25%)+22.5
  • Vítimas de ransomware no Brasil (30 dias) (30%)+30
  • INFOCON SANS ISC (15%)+0
Como é calculado →

Ações prioritárias

Vulnerabilidades exploradas ativamente (KEV, 30d) ordenadas pela probabilidade de exploração (EPSS)

  1. 1
    CVE-2015-3306ProFTPD · ProFTPD

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    EPSS 99.5% · incluída 08/10/2026 · prazo CISA 11/10/2026 · NIST CSF: Proteger (PR.PS)

  2. 2
    CVE-2015-5477ISC · BIND

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    EPSS 99.4% · incluída 08/10/2026 · prazo CISA 11/10/2026 · NIST CSF: Proteger (PR.PS)

  3. 3
    CVE-2016-3081Apache · Struts

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    EPSS 96.1% · incluída 08/10/2026 · prazo CISA 11/10/2026 · NIST CSF: Proteger (PR.PS)

  4. 4
    CVE-2026-71362Adobe · Commerce and Magento

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    EPSS 87.5% · incluída 24/09/2026 · prazo CISA 27/09/2026 · NIST CSF: Proteger (PR.PS)

  5. 5
    CVE-2026-93616Check Point · Multiple Products

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    EPSS 75.9% · incluída 22/09/2026 · prazo CISA 25/09/2026 · NIST CSF: Proteger (PR.PS)

  6. 6
    CVE-2026-85102Check Point · Multiple Products

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    EPSS 50.4% · incluída 22/09/2026 · prazo CISA 25/09/2026 · NIST CSF: Proteger (PR.PS)

Fonte:CISA KEV· coletado 15/10/2026, 22:23

Vítimas de ransomware no Brasil

Publicações por dia em sites de vazamento · 30 dias

Fonte:ransomware.live· coletado 15/10/2026, 22:23

CVEs críticas publicadas

Por dia · 7 dias

  • 9.8 CVE-2026-111329 JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets.
  • 9.8 CVE-2026-111322 Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.
  • 9 CVE-2026-111283 BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.
  • 9.8 CVE-2026-111281 Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen authserverip and authcode, making the jooandiag daemon execute their commands through /bin/sh, giving full device control.
  • 10 CVE-2026-110957 A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTE_ADDR leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms: "We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked."
Fonte:NIST NVD· coletado 15/10/2026, 22:23

Análise por setor

Veja vítimas de ransomware, grupos atuantes, tecnologias expostas e regulações do seu setor.

Abrir setores