A homemade explosive detonated outside the Philippine Department of Justice just after midnight on Monday, July 27, with officials investigating whether the blast and the discovery of a second suspected bomb near the Senate later that morning were part of a coordinated threat. The early morning explosion resulted in no injuries, but its timing—mere hours before President Ferdinand Marcos was scheduled to deliver his annual State of the Nation address—immediately raised concerns about a potential security breach during a politically sensitive period in Manila.

National police chief Jose Melencio Nartatez Jr indicated that investigators suspected a connection between the two incidents, acknowledging that despite having security protocols in place for bomb threats and actual detonations, something had slipped through their defences. The candid admission underscored the operational challenges facing law enforcement in Manila, where major public events typically involve extensive precautionary measures. Nartatez did not speculate on potential motives or responsible parties, instead emphasizing that the investigation remained ongoing and that authorities were treating both incidents with equal seriousness.

Details about the force of the initial blast remained murky in the hours following the explosion. Manila police spokesman Philipp Ines told international media outlets that investigators could not yet characterise the device's destructive potential, citing the need for thorough forensic examination before drawing conclusions. Photographs circulated by Philippine news outlets showed a cracked vehicle windshield and scattered debris at the justice ministry entrance, suggesting the explosive was relatively modest in scale, though eyewitness accounts of the blast's actual force were limited given the late hour.

The second suspected device was discovered around 8:30 am on a street adjacent to the Senate building by a tow truck driver, who immediately alerted security personnel stationed there. The swift identification and reporting of the device likely prevented any escalation or additional incidents as the capital prepared for the presidential address. Trained explosive ordnance disposal technicians subsequently recovered materials from the scene, including a blasting cap, a clock mechanism, and a glass jar containing a brown powder substance—all items consistent with improvised explosive devices and now awaiting laboratory analysis to determine composition and intended function.

Regional police spokeswoman Hazel Asilo declined to estimate what damage or casualties the second device might have caused had it detonated, effectively signalling that authorities were not yet confident in their assessment of either explosive's technical specifications. This reticence also reflected standard operational security procedures, where disclosing detailed information about bomb construction could potentially assist future threat actors. The absence of definitive statements about explosive yield, however, left Filipinos and international observers with an incomplete picture of how serious the security breach had been.

The timing of both incidents proved particularly significant given the volatile political climate in the Philippines at the moment. Vice President Sara Duterte was currently enduring an impeachment trial, a proceeding that has generated considerable political heat and deepened divisions within the administration and opposition ranks. Duterte's travails occupied significant media attention and parliamentary energy, creating an environment of heightened political contestation that could potentially motivate various actors to attempt dramatic gestures timed to significant national events.

Beyond the vice president's legal troubles, the Philippine political establishment was also grappling with fallout from a major corruption scandal centred on bogus flood control projects. Such scandals typically trigger public anger, congressional investigations, and recriminations between political factions, all of which can create unstable conditions where extremist or dissident groups might perceive opportunities to exploit public discontent. The accumulation of these political pressures meant that Marcos's State of the Nation address carried added weight as both a statement of presidential authority and a potential flashpoint for protest or violence.

The bomb discoveries also highlighted enduring vulnerabilities in Manila's security infrastructure, despite the Philippine National Police's assurances of preparedness. The justice ministry's location in the capital's heart, combined with the Senate's prominent position in the legislative district, meant that successful attacks at either location would carry enormous symbolic and practical consequences. That a device managed to detonate at the justice ministry without advance detection, and that a second device was found later at the Senate, suggested gaps in perimeter security, intelligence gathering, or both.

For Malaysian observers and regional security analysts, the Manila incidents served as a reminder of persistent terrorism and bomb-making threats across Southeast Asia. The Philippines has long struggled with insurgent and extremist groups operating in Mindanao and other regions, and while many such organisations have been degraded or pushed into fragmented cells, the technical knowledge and motivation for conducting bombings against government targets remain present. The use of relatively unsophisticated homemade devices mirrors attack patterns seen in other regional theatres, including Malaysia itself, where security forces have periodically detected bomb-making operations linked to various militant factions.

The incidents also raised questions about intelligence coordination between Philippine law enforcement agencies and whether the security establishment possessed advance warning of potential threats. The fact that both devices were discovered on the same day, one actually detonating while the other was intercepted, suggested either that the threat actors had acted on short notice or that detection mechanisms were insufficient to provide meaningful early warning. Marcos's address proceeded as scheduled, indicating that authorities had determined the situation sufficiently contained to proceed with the public event, though enhanced security measures undoubtedly remained in place throughout the parliamentary building and surrounding areas.