Biometricupdate Record DDoS Attacks Target Brazil's Gov.br Platform
Article Content
- •Serpro faced unprecedented DDoS attacks over six months, affecting its Gov.br platform.
- •User reports indicated authentication issues, despite Serpro claiming no service disruptions.
- •Brazil is a major target for DDoS attacks, with over 550,000 recorded in early 2025.
Brazil's government technology provider Serpro reported record DDoS attacks over six months, with no confirmed service disruptions. The attacks were described as unprecedented by Serpro's director during an AI Week event on November 4, 2026. Despite claims of resilience, user reports indicated authentication issues during the same timeframe, particularly affecting digital certificate access. Serpro has not released technical details about the attacks or linked them to the reported issues. Gov.br, which supports 179.5 million accounts and over 5,000 services, remains operational according to Serpro. The attacks are part of a broader trend, with Brazil being a major target for DDoS activity, recording over 550,000 attacks in the first half of 2025. As of November 8, no Federal Police investigation has been announced, and the attackers' identity remains unknown.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (9)
Following this threat?
Track Serpro in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What services are affected by the DDoS attacks?
Have any disruptions been confirmed?
What is the current status of the attacks?
Continue Reading
Critical RCE and LPE Vulnerabilities in Quest Foglight for Databases On November 3, 2026, the Zero Day Initiative disclosed multiple critical vulnerabilities in Quest Foglight for Databases, including six remote code execution (RCE) flaws and two local privilege escalation (LPE) vulnerabilities. The most severe RCE vulnerabilities, CVE-2026-92189 and CVE-2026-92190, allow…