BRIEFGov / MilitaryhighP75
Exilio404: .gov.br vulnerabilities again
.gov.br (Brazil)
Detected14 July 2026 · 19:39 UTC
Reposts collapsed2
Post discusses vulnerabilities in Brazilian .gov.br domains, potentially affecting government infrastructure.
CategoryGov / Military
Severityhigh
Priority score75
Detected14 July 2026 · 19:39 UTC
Gov / Military● 66
Base de datos del Ministerio de Defensa de Israel a la ventaA dataset attributed to the Israeli Ministry of Defense is being offered on the forum, which if genuine would expose sensitive defense personnel or systems data. Offers like this fuel state-level targeting and credential abuse. Defenders should monitor for credential reuse and linked access sales.Gov / Military● 70
Filtración de código fuente de un programa del Gobierno del PSOE (psoe.es)Over 2 GB of source code from a Spanish government program tied to the PSOE party (psoe.es) has been posted on a dark web forum. Code exposure can reveal internal logic, hardcoded credentials and API endpoints, enabling follow-on intrusion. Spanish public-sector defenders should verify the exposure and rotate any secrets present in the code.
Gov / Military● 90
Base de datos sde.gob.ar con 800.000 registros publicadaA second thread by 'Returnero' advertises roughly 800,000 records from the Argentine government domain sde.gob.ar. The volume and government nature of the data raise the risk of mass identity misuse, credential abuse and social engineering against public entities. This should be treated as a fresh, high-impact leak requiring urgent analysis.
Gov / Military● 92
Filtración de base de datos del dominio gubernamental sde.gob.arThe actor 'Returnero' published a database from the Argentine government domain sde.gob.ar on a criminal forum just minutes ago. Exposure of a .gob.ar entity can enable targeted phishing, impersonation and further intrusion against state systems. Given its government origin, it warrants immediate verification and notification to Argentine authorities.Gov / Military● 71
Credenciales de acceso a la Armada de Malasia a la ventaA seller is offering 277 access credentials tied to Royal Malaysian Navy accounts, posted within the last day. Compromise of military identity/account credentials enables phishing, lateral movement and access to defense systems. Even outside LATAM, a named navy credential dump is high-value and time-sensitive for defenders watching state targets.Gov / Military● 50
Filtración de documentos técnicos internos del gobierno ruso (2026)A DarkForums actor is leaking documents described as Russian government internal engineering and technical material dated 2026. While outside the AR-LATAM scope, it signals ongoing theft of state technical documentation and could be relevant for geopolitical CTI. Analysts should monitor for related infrastructure or reused tradecraft reaching regional targets.