Loading story…
The US Department of Defense left confidential stream keys for its social media accounts publicly accessible on the DVIDS website for years, exposing them to potential hijacking. Attackers could have used these keys to take over official Pentagon livestreams on platforms like Facebook, X, and YouTube. The vulnerability, present since at least 2018, was only closed this week after media reports brought it to light.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Unauthorized users exploited a vulnerability in the Defense Manpower Data Center's file-sharing system, accessing unencrypted personnel files from about October 2025 until the flaw was detected on July 16, 2026. The breach may affect roughly 4 million current and former Department of Defense personnel. Exposed information reportedly includes names, dates of birth, contact and demographic data, unencrypted Social Security numbers, and in some cases military occupational specialty or equivalent role codes. DMDC remediated the vulnerability and restored the affected system, detecting and containing the intrusion in July before notifying individuals on September 18. It offered 12 months of IDX credit-monitoring and identity-restoration services; no malicious use had been reported at publication. The incident has not been attributed, and the exploited vulnerability has not been disclosed, but the combination of identity data and military-role information creates substantial identity-fraud and counterintelligence risk, potentially enabling adversaries to identify and target service members, veterans, and their families.
Oct 2, 2026
US Secretary of Defense Pete Hegseth violated Pentagon operational security protocols by sharing sensitive details about planned airstrikes on Houthi rebels in Yemen through a Signal chat group that included unauthorized participants, such as a journalist. The Pentagon Office of Inspector General (OIG) determined that the information, which included mission timelines and specifics about aircraft and munitions, was derived from a communication marked as `SECRET//NOFORN` and should have been handled at the secret level. Despite Hegseth's claim of declassifying the material, the OIG found that using a non-secure, consumer messaging app for such communications broke Department of Defense rules and posed a risk to US military operations. The Inspector General's report, released to Congress and the public, recommended that US Central Command review and improve its classification procedures and provide additional training to senior officials on the proper use of electronic messaging systems. The incident, dubbed "Signalgate," highlighted broader issues within the Department of Defense regarding the use of non-DOD-controlled messaging platforms for sensitive communications and underscored the need for stricter adherence to secure communication protocols among top officials.
Jun 29, 2026
A publicly accessible directory tied to U.S. government contractor **CMI Management Inc.** exposed more than **70,000 files** linked to U.S. military installations and personnel. Reports say the contractor, which provides facility management services to the **U.S. Army**, left records openly available for months through an open directory listing, allowing access to sensitive material including personnel records, contractor documents, maintenance forms, emails, schematics, and photographs taken inside military bases. The leak created risks including **phishing, impersonation, and intelligence gathering** against military facilities and staff. Researcher **Arkadeep Roy** reportedly alerted **CISA** in 2024 after the exposure was identified following a tip to Cybernews, but the files remained accessible as recently as March 2026, underscoring how long-lived misconfigurations at defense contractors can leave operationally sensitive government data exposed.
Jun 29, 2026