
- Cyber Threat Intelligence, Emergency Announcement
Red Hat confirms exposition of customer data following cyberattack on GitLab instance
On October 2nd of this year, Red Hat confirmed a security breach in a GitLab Community Edition instance used by the Red Hat Consulting team.

- Cyber Threat Intelligence, Intelligence Bulletin
Coordinated Salesforce attacks affect hundreds of organizations globally
The FBI warned of attacks exploiting Salesforce to steal data and OAuth tokens from major companies.

- Cyber Threat Intelligence, Emergency Announcement
SEK Identifies WhatsApp Scam Campaign with Fake Payment Receipt
SEK has identified a new cyberattack campaign targeting Brazilian companies through WhatsApp.

- Cyber Threat Intelligence, Emergency Announcement
Critical Vulnerability in Fortra GoAnywhere MFT Exploited by Attackers
Fortra GoAnywhere MFT tool, widely used for file transfers, has been under active exploitation since September 10, 2025

- Cyber Threat Intelligence, Vulnerability Notification
Extraordinary VN – VMware Aria Operations e VMware Tools
Broadcom disclosed CVE-2025-41244 (CVSS 7.8) in VMware Aria/Tools, a zero-day exploited by Chinese actors.

- Cyber Threat Intelligence, Emergency Announcement
Cisco confirms active exploitation of three zero-days by advanced threat actors
Cisco confirmed on September 26 a sophisticated attack campaign against ASA 5500-X series devices since May 2025.

- Cyber Threat Intelligence, Emergency Announcement
Emergency Notice – Cisco fixes actively exploited zero-day and multiple vulnerabilities in IOS and IOS XE
Cisco has disclosed 14 security vulnerabilities in its IOS and IOS XE systems, including a critical zero-day that is already being actively exploited by cybercriminals.

- Cyber Threat Intelligence, Emergency Announcement
SonicWall releases urgent update against rootkit in SMA 100 devices
SonicWall released a critical firmware update (version 10.2.2.2-92sv) to eliminate the OVERSTEP rootkit that compromises end-of-life SMA 100 devices.

- Cyber Threat Intelligence, Notificação de Vulnerabilidades OT/ICS
OT-ICS Monthly NDV – September/2025
Critical OT/ICS vulnerabilities identified, impacting vendors such as ABB, Siemens, Honeywell, and Rockwell.