LIVE · cybersecurity feed
Live wire
nation-state

Hacker hijacks Brazil’s national alert system, sending “misanthropy” to millions of phones

Emergency alert systems work because people believe them. Every time one of these systems issues a false alert - whether through negligence or a deliberate attack - trust erodes. Read more in my article on the Hot for Security blog.

zeroday.news · 39d ago

Millions of mobile phone users in Brazil received fake emergency alerts on the night of June 19-20, 2026, after an intruder gained access to the nation's Civil Defence alert system. The unauthorized messages, which bypassed silent mode and displayed prominently on device screens, contained the word "misantropi4" in place of critical information.

The incident began around 11:40 pm on June 19 in Paraná state, with a total of ten fake alerts being disseminated over the following couple of hours. Nine of these were sent via the Cell Broadcast system, a technology designed to push alerts to a wide area, and one was sent via traditional SMS. The alerts were categorized as "Extreme Alert," the highest severity level, typically reserved for imminent natural disasters.

States including São Paulo, Rio de Janeiro, and the Federal District were among those affected. Civil defence agencies in each affected state quickly issued statements confirming that they had not issued any such alerts and that no actual emergency conditions warranted them.

Brazil's National Civil Defence confirmed that the alert platform was taken offline at 1:30 am on June 20 following the security breach. Officials stated that while there was no evidence of "structural damage" to the system's infrastructure, they could not determine the exact number of devices that received the false notifications.

According to Wolnei Wolff, National Secretary of Protection and Civil Defence, the attackers managed to re-enter the system even after an initial attempt to block their access. No suspects have been identified in connection with the incident.

Brazil's Cell Broadcast system was implemented in recent years and was expanded nationwide in October 2025. The messages sent by the intruder translated to "misanthropy," meaning hatred or aversion to humanity.

Fortunately, the fake alerts did not include dangerous instructions, such as calls to evacuate or links to malicious websites. However, the incident has raised concerns about the erosion of public trust in emergency alert systems. The effectiveness of such systems relies on public belief in their authenticity, and repeated false alarms, whether accidental or malicious, can lead individuals to disregard genuine warnings.

nation-state
ShareXLinkedInWhatsAppFacebook

More News

view all →
malware

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group also known as APT29 and Cozy Bear. Since early May 2026, Storm-2945 has been manipulating DNS […]

vulnerability

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG

vulnerabilitycritical

Rails patches critical Active Storage flaw with RCE potential

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]

CVE-2026-48449critical

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enterprise marketing automation platform. The flaw is caused by incorrect authorization and could allow attackers to execute […]

security

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments appeared first on SecurityWeek.

vulnerabilitycritical

Ruby on Rails Patches Critical Vulnerability

The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek.