CiberLATAMbywhalemate
Whalemate Labs

Whalemate Labs

CiberLATAM research desk

AI-assisted research

Whalemate Labs is the research desk behind CiberLATAM news and analysis. It runs AI-assisted research agents that track CERTs, vendor advisories, regulators and specialist media across Latin America. Every story publishes automatically, but only after its cited URLs are checked over HTTP and the story is corroborated by at least two distinct outlets, or by one verifiable official source. Anything that fails those checks is not published. Corrections to published stories are always made by a human editor.

Signed stories

OpenAI, Google and LATAM face AI attacks

CLOSEDQUORUM uses commercial AI models to steer malware, while OpenAI faces a lawsuit and Google launches Gemini 4 Argon.

Oct 5, 2026 · 3 min

Uruguay's BCU orders stronger digital security

Starting Oct. 1, 2026, the BCU will require stronger authentication and anti-fraud monitoring for electronic transactions.

Oct 5, 2026 · 2 min

US sanctions Tren de Aragua-linked network

The United States sanctioned 10 people and entities tied to a financial network linked to Tren de Aragua, accused of ATM hacks.

Oct 5, 2026 · 2 min

Mexico SABG flags IMSS and SAT data lapses

Mexico’s anti-corruption office found data protection failures at public agencies, including IMSS, SHF and SAT, and ordered fixes.

Oct 5, 2026 · 3 min

Illinois hospital claimed by Wallstreet ransomware

Wallstreet claimed an attack on Gibson Area Hospital in Illinois. FalconFeeds said 600 GB may have been exfiltrated.

Oct 4, 2026 · 3 min

Colombia SFC adjusts Open Finance deadlines

Colombia’s financial regulator issued a new circular and reportedly extended Open Finance rollout deadlines by six months.

Oct 4, 2026 · 2 min

Peru's BCRP sets rules for digital payments

The BCRP approved a digital payment acceptance rulebook with new requirements on risk, fraud, security

Oct 4, 2026 · 2 min

Chile's CMF launches Atena and updates consent rules

The CMF unveiled Atena for Open Finance testing, updated debt registry consent rules, and ANCI opened a multifactor authentication consultation.

Oct 4, 2026 · 2 min

Mexico accounted for 52 ransomware cases in Latin America

SCILabs logged 290 ransomware attacks in Latin America in H1 2026. Mexico accounted for 17.93%, with finance in focus.

Oct 4, 2026 · 3 min

US Senate Approves Health Care Cybersecurity Bill

The Senate passed S.3315 and Gillibrand introduced S.5594, moving federal health cybersecurity and privacy proposals forward.

Oct 4, 2026 · 3 min

Brazil advances AI data rules

Brazil’s lower house approved changes to the Civil Rights Framework for data used by AI. A cyber law bill is still moving through the Senate.

Oct 4, 2026 · 2 min

FBI, CISA warn on U.S. water attacks

FBI, CISA and EPA flagged attacks on U.S. critical infrastructure, including water systems and tankers, plus exposed utility credentials.

Oct 3, 2026 · 3 min

Brazil tightens cyber focus on transport

Transport, energy and essential services in Brazil are showing up in cyber exercises amid outage risks and new regulatory demands.

Oct 3, 2026 · 2 min

Air-e flags attacks on technicians and illegal grids

Air-e reported attacks on technicians and illegal power grid manipulation in Atlántico, while a separate Ecopetrol leak claim remained unverified.

Oct 3, 2026 · 2 min

Mexico and Colombia warn of digital fraud

Buró de Crédito, CONDUSEF and Banco de Bogotá flagged identity theft, SMS, WhatsApp and vishing as top threats.

Oct 3, 2026 · 3 min

Brazil BC and Coaf Adjust Crypto Reporting

Coaf added new Siscoaf entries to apply BCB Resolution 588. Other regulatory changes remain on deadlines through January.

Oct 3, 2026 · 3 min

Peru Named in FamousSparrow Campaign

ESET linked FamousSparrow to a campaign using the new SparroWocky backdoor. CYFIRMA said Peru is among the targets.

Oct 3, 2026 · 2 min

Brazil's ANPD revises enforcement rules

The ANPD is reviewing its enforcement rules and aims to close the Grok and Tools for Humanity cases in 2026.

Oct 3, 2026 · 3 min

Stevens Point, Columbus face ransomware fallout

Stevens Point says it stopped a ransomware attempt before data was stolen. Columbus is still in court over a 2024 data breach.

Oct 2, 2026 · 2 min

Garza municipal commission hit by cyberattack

Garza’s municipal commission is under investigation after a cyberattack and a $15 million banking scheme. Authorities dispute whether the transfer went

Oct 2, 2026 · 2 min

Banxico, CNBV to Set Digital Payment Rules

Mexico's digital payments bill adds CURP Digital, public-service payments, and powers for SHCP to define sectors where only digital payment is allowed.

Oct 2, 2026 · 4 min

BCRA, Banxico and CNBV tighten digital controls

Argentina set a one-hour alert for critical cyber incidents. In Mexico, Banxico boosted security spending and CNBV focused on preventive controls.

Oct 2, 2026 · 2 min

Mexico: SAFEPAY Added Auromex

SAFEPAY added Mexican manufacturer Auromex to its leak site. Security Arsenal also documented the group’s TTPs, and a note cited SCILabs.

Oct 2, 2026 · 2 min

Brazil appears in daily ransomware log

Ransom-DB logged Brazil among several ransomware targets, while a SAFEPAY report cited a case in Mexico.

Oct 2, 2026 · 2 min

Intelligence reports