Brazil's National Emergency Alert System Breached
NEOSEC enrichment — no mirror of the original source
Over the weekend, Brazil took the country's Public Alert Dissemination Interface (IDAP) system offline after a breach of the country's national emergency alert system allowed it to be used to send false emergency messages to mobile phones i
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
Linked advisories
- CVE-2026-42530bitnami nginx-gateway: Use-After-Free
- CVE-2026-47729Debian squid: security update
- CVE-2026-42530NGINX und NGINX Plus: Mehrere Schwachstellen
- CVE-2026-42530bitnami nginx-gateway: Use-After-Free
- CVE-2026-47729Squid: Mehrere Schwachstellen
- CVE-2026-42530NGINX Open-Source ngx_http_v3_module vulnerability
- CVE-2026-42530NGINX Open-Source ngx_http_v3_module vulnerability
Affected vendors and products
More on Emergency
Other advisories
- MediumCVE-2026-76475Cisco Produkte (Emergency Responder, Prime Collaboration, Unified Communications Manager und Unity Connection): Mehrere Schwachstellen
- Not ratedosv:CVE-2026-104875Ente: Accepted emergency contact can bypass the recovery notice period
- CriticalCVE-2026-68132super: fix emergency thaw deadlock on frozen block devices
- Not ratedosv:CVE-2026-68150fs/super: fix emergency thaw double-unlock of s_umount
- Not ratedosv:CVE-2026-68132super: fix emergency thaw deadlock on frozen block devices
- MediumCVE-2024-35648Andy Moyle Emergency Password Reset: Cross-Site-Request-Forgery (CSRF)
- MediumCVE-2024-35648Cross-Site-Request-Forgery (CSRF)-Schwachstelle in Andy Moyle Emergency Password Reset ermöglicht Cross-Site-Request-Forgery.
- MediumCVE-2026-9732Das Plugin EmergencyWP – Dead Man's Switch & Legacy Deliverance für WordPress ist in allen Versionen bis einschließlich 1.
Other news entries
- Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesNewsThe Hacker News
- Microsoft releases emergency .NET security fixes for Google Brotli bugNewsThe Register — Security
- Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patchesNewsBleepingComputer
- Microsoft releases emergency .NET patches for critical Brotli flawNewsBleepingComputer
- There's a third PHP2Shell bug, but it won't get an emergency fixNewsThe Register — Security
- PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell PatchesNewsThe Hacker News
- Cisco Produkte (Emergency Responder, Prime Collaboration, Unified Communications Manager und Unity Connection): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Two critical PHP flaws put the web on alert as emergency patches arriveNewsCSO Online
ID