What is the official website of Ministry of Defense ?

The official website of Ministry of Defense is http://www.defesa.gov.br.

What is Ministry of Defense's cybersecurity risk score?

Ministry of Defense has an AI-generated cybersecurity risk score of 822 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Ministry of Defense experienced?

According to Rankiteo, Ministry of Defense currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ministry of Defense been affected by any supply chain cyber incidents ?

According to Rankiteo, Ministry of Defense has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Ministry of Defense have SOC 2 Type 1 certification ?

According to Rankiteo, Ministry of Defense is not certified under SOC 2 Type 1.

Does Ministry of Defense have SOC 2 Type 2 certification ?

According to Rankiteo, Ministry of Defense does not hold a SOC 2 Type 2 certification.

Does Ministry of Defense comply with GDPR ?

According to Rankiteo, Ministry of Defense is not listed as GDPR compliant.

Does Ministry of Defense have PCI DSS certification ?

According to Rankiteo, Ministry of Defense does not currently maintain PCI DSS compliance.

Does Ministry of Defense comply with HIPAA ?

According to Rankiteo, Ministry of Defense is not compliant with HIPAA regulations.

Does Ministry of Defense have ISO 27001 certification ?

According to Rankiteo,Ministry of Defense is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ministry of Defense operate in ?

Ministry of Defense operates primarily in the Aviation and Aerospace Component Manufacturing industry.

How many employees does Ministry of Defense have ?

Ministry of Defense employs approximately 528 people worldwide.

Does Ministry of Defense own any subsidiaries ?

Ministry of Defense presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ministry of Defense have ?

Ministry of Defense's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Ministry of Defense ?

Ministry of Defense is classified under the NAICS code 3364, which corresponds to Aerospace Product and Parts Manufacturing.

Does Ministry of Defense have a Crunchbase profile ?

No, Ministry of Defense does not have a profile on Crunchbase.

Does Ministry of Defense have a LinkedIn profile ?

Yes, Ministry of Defense maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ministry-of-defense.

How many cybersecurity incidents has Ministry of Defense experienced ?

As of July 14, 2026, Rankiteo reports that Ministry of Defense has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Ministry of Defense have ?

Ministry of Defense has an estimated 2,826 peer or competitor companies worldwide.

What types of cybersecurity incidents has Ministry of Defense faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

822

/1000

Good

847

/1000

Good

Ministry of Defense Vendor Cyber Rating & Cyber Score

defesa.gov.br

Add Your Compliance Badge

´The Brazilian Ministry of Defense - Ministério da Defesa do Brasil O Ministério da Defesa (MD) é o órgão do Governo Federal incumbido de exercer a direção superior das Forças Armadas, constituídas pela Marinha, pelo Exército e pela Aeronáutica. Uma de suas principais tarefas é o estabelecimento de políticas ligadas à Defesa e à Segurança do País, caso da Política de Defesa Nacional (PDN), atualizada em julho de 2005. Criado em 10 de junho de 1999, pela lei complementar n° 97,2 o Ministério da Defesa é o principal articulador de ações que envolvam mais de uma Força Singular.

MD A.I CyberSecurity Scoring

Scoring History

Ministry of Defense CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Ministry of Defense

Cyber Attack

100

6/2026

MIN1782138537

Loading…

A.I.

MD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for MD

Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

Ministry of Defense has 45.36% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Ministry of Defense has 4.76% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types MD vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

Ministry of Defense reported 1 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - MD (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ministry of Defense Subsidiaries

Parent Company

MD

Aviation and Aerospace Component Manufacturing

Website: http://www.defesa.gov.br

Company Size: 11-50 employees

No subsidiary data available for this company.

Loading…

Ministry of Defense Similar Companies

B/E Aerospace

beaerospace.com

B/E Aerospace is now part of Rockwell Collins. With the acquisition of B/E Aerospace in April 2017, Rockwell Collins is now a world leader in designing, developing and manufacturing cabin interior products and services that deliver innovation, reliability and efficiency. Our broad range of offerings include aircraft cabin seating, lighting and engineering solutions, oxygen systems, food and beverage preparation and storage equipment, galley systems, water and waste systems, and advanced lavatory systems. We also collaborate closely with our customers to provide customized cabin interior reconfiguration, program management and certification services.

Bombardier

bombardier.com

Bombardier is a global leader in aviation, focused on designing, manufacturing, and servicing the world's most exceptional business jets. Bombardier’s Challenger and Global aircraft families are renowned for their cutting-edge innovation, cabin design, performance, and reliability. Bombardier has a worldwide fleet of approximately 5,000 aircraft in service with a wide variety of multinational corporations, charter and fractional ownership providers, governments, and private individuals. Bombardier aircraft are also trusted around the world in government and military special-mission roles leveraging Bombardier Defense’s proven expertise.   Headquartered in Greater Montréal, Québec, Bombardier operates aerostructure, assembly and completion facilities in Canada, the United States and Mexico. The company’s robust customer support network services the Learjet, Challenger and Global families of aircraft, and includes facilities in strategic locations in the United States and Canada, as well as in the United Kingdom, Germany, France, Switzerland, Italy, Austria, the UAE, Singapore, China and Australia.   For corporate news and information, including Bombardier’s Environmental, Social and Governance report, as well as the company’s plans to cover all its flight operations with Sustainable Aviation Fuel (SAF) utilizing the Book and Claim system visit bombardier.com. Learn more about Bombardier’s industry-leading products and customer service network at businessaircraft.bombardier.com. Follow us on Twitter @Bombardier.   

Textron

cb textron.com

Textron Inc. is a multi-industry company that leverages its global network of aircraft, defense, industrial and finance businesses to provide customers with innovative solutions and services. Textron is known around the world for its powerful brands such as Bell, Cessna, Beechcraft, Pipistrel, Jacobsen, Kautex, Lycoming, E-Z-GO, and Textron Systems. For more information, visit: www.textron.com.

SpaceX

spacex.com

SpaceX designs, manufactures and launches the world’s most advanced rockets and spacecraft. The company was founded in 2002 by Elon Musk to revolutionize space transportation, with the ultimate goal of making life multiplanetary. SpaceX has gained worldwide attention for a series of historic milestones. It is the only private company ever to return a spacecraft from low-Earth orbit, which it first accomplished in December 2010. The company made history again in May 2012 when its Dragon spacecraft attached to the International Space Station, exchanged cargo payloads, and returned safely to Earth — a technically challenging feat previously accomplished only by governments. Since then Dragon has delivered cargo to and from the space station multiple times, providing regular cargo resupply missions for NASA. For more information, visit www.spacex.com.

NASA - National Aeronautics and Space Administration

nasa.gov

For more than 60 years, NASA has been breaking barriers to achieve the seemingly impossible—from walking on the Moon to pushing the boundaries of human spaceflight farther than ever before. We work in space and around the world in laboratories and wind tunnels, on airfields and in control rooms to explore some of life’s fundamental mysteries: What’s out there in space? How do we get there? And what can we learn that will make life better here on Earth? We are passionate professionals united by a common purpose: to pioneer the future in space exploration, scientific discovery and aeronautics research. Today, we continue NASA’s legacy of excellence and innovation through an unprecedented array of missions. We are developing the most advanced rockets and spacecraft ever designed, studying the Earth for answers to critical challenges facing our planet, improving the air transportation experience, and so much more. Join us as we reach for new heights and reveal the unknown for the benefit of humanity.

Pratt & Whitney

rtx.com

Pratt & Whitney, an RTX business, is a global leader in propulsion systems, powering the most advanced aircraft in the world, and we are shaping the future of aviation. Our engines help connect people, grow economies and defend freedom. Our customers depend on us to get where they’re going and back again.

Embraer

cb embraer.com

A global aerospace company headquartered in Brazil, Embraer has businesses in Commercial and Executive Aviation, Defense & Security, and Agricultural Aviation. The company designs, develops, manufactures and markets aircraft and systems, providing Services and Support to customer after-sales. Since it was founded in 1969, Embraer has delivered more than 8,000 aircraft. On average, about every 10 seconds an aircraft manufactured by Embraer takes off somewhere in the world, transporting over 145 million passengers a year.

Federal Aviation Administration

faa.gov

The FAA is on the leading edge of a new frontier in commercial space transportation, building the next generation (NextGen) of satellite-based navigation systems, and fostering the safe integration of unmanned aerial systems into our airspace. We can only dream of what the next 50 years of American ingenuity will look like, but FAA employees will be working to ensure that the United States continues to lead the world in aerospace safety, innovation and advancements that continue to push the limits of science and technology. The FAA is an operating administration within the Department of Transportation (DOT) and a proud partner in the DOT mission to serve the United States by ensuring a fast, safe, efficient, accessible and convenient transportation system that meets our vital national interests and enhances the quality of life of the American people, today and into the future. Specifically, the FAA mission is to provide the safest, most efficient aerospace system in the world.

CAE

cae.com

At CAE, we exist to make the world safer. We deliver cutting-edge training, simulation, and critical operations solutions to prepare aviation professionals and defence forces for the moments that matter. Every day, we empower pilots, cabin crew, maintenance technicians, airlines, business aviation operators, and defence and security personnel to perform at their best and when the stakes are the highest. Around the globe, we’re everywhere customers need us to be with approximately 13,000 employees at around 240 sites and training locations in over 40 countries. For nearly 80 years, CAE has been at the forefront of innovation, consistently seeking to set the standard by delivering excellence in high-fidelity flight simulators and training solutions, while embedding sustainability at the heart of everything we do. By harnessing technology and enhancing human performance, we strive to be the trusted partner in advancing safety and mission readiness - today and tomorrow.

Loading…

NEWS

Ministry of Defense CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 09, 2025 08:16 AM

Azerbaijan and Georgia strengthen cybersecurity cooperation

The meeting, attended by Lieutenant Colonel Elshan Hasanov, chief of the Cybersecurity Service at the Azerbaijani Ministry of Defense,...

Read Article

October 08, 2025 02:30 PM

Azerbaijani and Georgian military experts explore strengthening cybersecurity cooperation

As part of the bilateral military cooperation plan for 2025 between the Ministries of Defense of Azerbaijan and Georgia,...

Read Article

October 08, 2025 01:40 PM

Azerbaijani, Georgian military experts discuss cybersecurity cooperation

BAKU, Azerbaijan, October 8. Pursuant to the bilateral military cooperation plan for 2025 between the Ministries of Defense of Azerbaijan...

Read Article

October 08, 2025 12:41 PM

Working meeting of Azerbaijani and Georgian military experts in field of cybersecurity held-UPDATED

According to the bilateral military cooperation plan for 2025 between the Ministries of Defense of Azerbaijan and Georgia, a working meeting...

Read Article

October 08, 2025 12:13 PM

Kahua Expands UK Presence and Achieves Ministry of Defence Cybersecurity Accreditation

CNW/ -- Kahua, a leading provider of asset centric programme management information systems (PMIS) with a common data environment (CDE),...

Read Article

September 19, 2025 07:00 AM

Cybersecurity moves to Defense, the Armed Forces will be able to conduct digital operations.

Cybersecurity moves to Defense, the Armed Forces will be able to conduct digital operations. Read all the latest news on Agenzia Nova.

Read Article

August 21, 2025 07:00 AM

Kuwait: Cybersecurity priorities, officials in charge, eyed companies for cooperation

The Kuwaiti Ministry of Defense (MoD) has outlined a comprehensive roadmap as part of its 2025-2030 strategic vision.

Read Article

July 22, 2025 07:00 AM

Indonesia Eyes Cybersecurity Cooperation with Singapore's Military

The Indonesian Defense Ministry is interested in exchanging knowledge with Singapore regarding the development of cybersecurity.

Read Article

July 16, 2025 07:00 AM

Cybersecurity | Japan Ministry of Defense

In the culmination of a program that has been conducted four times since 2022, a comprehensive exercise was held during the activity, to further...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…