Security Briefing 10 min de leitura 19 de março de 2026

Kit de exploit iOS DarkSword mira iPhones, Zero-Day Cisco FMC sob ataque ransomware, Vazamento Aura expõe 900K, Escalação root no Ubuntu

Um kit de exploit iOS patrocinado por estados encadeia seis vulnerabilidades para controle total do dispositivo. A gangue de ransomware Interlock explora um zero-day crítico no Cisco Secure Firewall Management Center desde janeiro. Aura confirma 900.000 registros comprometidos. Uma vulnerabilidade de escalação de privilégios no Ubuntu permite acesso root via timing do systemd. Mais: sequestro ConnectWise ScreenConnect, 9 falhas críticas em IP KVM, XBOW levanta $120M para segurança ofensiva autônoma.

1. DarkSword — iOS Exploit Kit

⚠️ CRITICAL

Kit de exploit DarkSword patrocinado por estados explora seis vulnerabilidades iOS para comprometimento total do iPhone.

Um kit de exploit iOS patrocinado por estados encadeia seis vulnerabilidades para controle total do dispositivo.

A gangue de ransomware Interlock explora um zero-day crítico no Cisco Secure Firewall Management Center desde janeiro.

2. Cisco FMC Zero-Day — Interlock Ransomware

⚠️ CRITICAL

Interlock ransomware exploits Cisco Secure FMC zero-day since January 2026.

Interlock ransomware — Cisco Secure Firewall Management Center (FMC) RCE zero-day. CVSS: Critical. Active since January 2026.

3. Aura — 900,000 Records Breached

🔶 HIGH

Aura identity protection: 900,000 marketing contact records (names + emails) exposed.

4. Ubuntu CVE-2026-3888 — Root Escalation

🔶 HIGH — CVSS 7.8

Ubuntu Desktop 24.04+ — snap-confine + systemd-tmpfiles timing exploit → root access.

5. ConnectWise ScreenConnect — Session Hijacking

ConnectWise ScreenConnect cryptographic signature verification vulnerability enables unauthorized access and privilege escalation.

6. IP KVM — 9 Critical Vulnerabilities

GL-iNet, Angeet/Yeeso, Sipeed, JetKVM — unauthenticated root access via missing firmware validation, broken access controls, exposed debug interfaces.

7. Industry Roundup

XBOW: $120M raised at $1B+ valuation — autonomous offensive security
Open Source Security: $12.5M from Anthropic, AWS, Google, Microsoft, OpenAI → Linux Foundation
Zimbra XSS: CISA KEV — actively exploited, patch required
Marquis: 672K records stolen, 74 US banks disrupted
CISO AI Visibility: 67% lack visibility into AI usage (Pentera report)

Is Your Organization Exposed?

Run a free KENSAI security scan to identify vulnerabilities before attackers find them.

Start Free Security Scan →

KENSAI Security Research Team · 19 de março de 2026