REGULATIONParaguay
BCP: Seven banks face 11 sanctions
The BCP sanctions registry lists 11 concluded administrative cases against seven banks in Paraguay, tied to regulatory breaches, not cybersecurity.
Oct 9, 2026 · 2 min
News
Up-to-date cyber intelligence coverage. Filter by category or browse the full archive.
ANALYSISBrazil
OpenAI Detects Russian Campaigns in Latin America
OpenAI suspended accounts tied to a Russian influence campaign that used AI to target audiences in Latin America, especially Argentina.
Oct 9, 2026 · 3 min
ANALYSISArgentina
OpenAI detected Russian operations in Argentina
OpenAI suspended Russia-linked accounts used for AI influence campaigns in Latin America, with Argentina in focus.
Oct 9, 2026 · 3 min
ANALYSIS
OpenAI flags Russian ops in Latin America
OpenAI suspended accounts used in covert influence campaigns in Argentina, Bolivia, Peru and Ecuador, with AI-assisted ransomware reported in Mexico.
Oct 9, 2026 · 3 min
CLOUD SECURITY
Atlassian patches CVE-2026-21589 in Data Center
Atlassian urged immediate patching for CVE-2026-21589, a critical flaw affecting multiple Data Center products.
Oct 9, 2026 · 3 min
REGULATIONBrazil
ANPD and Portugal Agree on Compliance Guides
ANPD signed an MoU with Portugal to develop joint guides and tools. The current inspection rule stays in force until a new resolution.
Oct 9, 2026 · 2 min
REGULATIONUnited States
OCC fines American Express Bank $350 million
The OCC fined American Express National Bank $350 million for BSA and AML failures after delays in reporting suspicious activity.
Oct 9, 2026 · 2 min
REGULATIONPeru
Peru's BCRP and SBS tighten payment rules
Peru's BCRP and SBS set new rules for digital payments and open finance, with security, consent and transition deadlines.
Oct 9, 2026 · 2 min
VULNERABILITIES
Citrix NetScaler adds two exploited zero-days
CVE-2026-88771 and CVE-2026-88772 were used to plant web shells in NetScaler. CISA also added CVE-2026-88779 to KEV.
Oct 8, 2026 · 3 min
THREATSBrazil
Brazil Police Probe Ransomware Group
Federal Police launched Operation Insidioso after a July attack with sensitive data theft and possible intrusion and extortion charges.
Oct 8, 2026 · 2 min
THREATSColombia
Nueva EPS denies unauthorized access
Nueva EPS says its checks found no unauthorized access as it continues investigating claims of a data leak.
Oct 8, 2026 · 3 min
REGULATIONPeru
Peru Delegates Cybercrime Powers for 90 Days
Peru’s lower house approved 90-day executive powers to legislate on cybercrime, with limits on due process and personal data.
Oct 8, 2026 · 3 min
REGULATIONChile
Guatemala, Costa Rica advance data laws
Guatemala issued a favorable opinion on Initiative 6347, while Costa Rica seeks fines for storing personal data without encryption.
Oct 8, 2026 · 2 min
THREATS
Venezuela Faces Blackouts
Reuters reported a power deficit above 1,500 MW in Venezuela, while protests spread across five states and a fake Corpoelec notice circulated.
Oct 7, 2026 · 2 min
THREATSChile
Chile warns of phishing targeting banks
Chile’s PDI and prosecutors warned of phishing using cloned bank and retail sites to steal credentials and verification codes.
Oct 7, 2026 · 2 min
THREATSUnited States
Vicksburg shuts down systems after ransomware attack
Vicksburg, Mississippi, temporarily shut down municipal systems after a ransomware attack. Emergency services stayed online.
Oct 6, 2026 · 2 min
REGULATIONPeru
Peru's SBS opens public consultation on open finance
The SBS opened the draft open finance rule for public review. The proposal sets data, consent and participation rules.
Oct 6, 2026 · 2 min
VULNERABILITIES
CVE-2026-96940 hits on-prem Exchange Server
Microsoft fixed an authorization flaw in on-prem Exchange Server that could let users read other mailboxes in the same organization.
Oct 6, 2026 · 2 min
THREATSMexico
ASEA reports hack of official Instagram
ASEA said its @agencia_asea Instagram account was compromised and asked the public to ignore posts while it works to regain access.
Oct 6, 2026 · 2 min
ANALYSIS
OpenAI, Google and LATAM face AI attacks
CLOSEDQUORUM uses commercial AI models to steer malware, while OpenAI faces a lawsuit and Google launches Gemini 4 Argon.
Oct 5, 2026 · 3 min
REGULATIONUruguay
Uruguay's BCU orders stronger digital security
Starting Oct. 1, 2026, the BCU will require stronger authentication and anti-fraud monitoring for electronic transactions.
Oct 5, 2026 · 2 min
THREATSUnited States
US sanctions Tren de Aragua-linked network
The United States sanctioned 10 people and entities tied to a financial network linked to Tren de Aragua, accused of ATM hacks.
Oct 5, 2026 · 2 min
REGULATIONMexico
Mexico SABG flags IMSS and SAT data lapses
Mexico’s anti-corruption office found data protection failures at public agencies, including IMSS, SHF and SAT, and ordered fixes.
Oct 5, 2026 · 3 min
THREATSUnited States
Illinois hospital claimed by Wallstreet ransomware
Wallstreet claimed an attack on Gibson Area Hospital in Illinois. FalconFeeds said 600 GB may have been exfiltrated.
Oct 4, 2026 · 3 min
REGULATIONColombia
Colombia SFC adjusts Open Finance deadlines
Colombia’s financial regulator issued a new circular and reportedly extended Open Finance rollout deadlines by six months.
Oct 4, 2026 · 2 min
REGULATIONPeru
Peru's BCRP sets rules for digital payments
The BCRP approved a digital payment acceptance rulebook with new requirements on risk, fraud, security
Oct 4, 2026 · 2 min
REGULATIONChile
Chile's CMF launches Atena and updates consent rules
The CMF unveiled Atena for Open Finance testing, updated debt registry consent rules, and ANCI opened a multifactor authentication consultation.
Oct 4, 2026 · 2 min
THREATSMexico
Mexico accounted for 52 ransomware attacks
SCILabs recorded 290 ransomware attacks in Latin America in the first half of 2026. Mexico accounted for 17.93%, with finance in focus.
Oct 4, 2026 · 4 min
REGULATIONUnited States
U.S. Senate Approves Health Cybersecurity Bill
S.3315 cleared the Senate unanimously and heads to the House. The bill adds rural hospital grants and security upgrades.
Oct 4, 2026 · 4 min
REGULATIONBrazil
Brazil advances AI data rules
Brazil’s lower house approved changes to the Civil Rights Framework for data used by AI. A cyber law bill is still moving through the Senate.
Oct 4, 2026 · 2 min
THREATSUnited States
FBI, CISA warn on U.S. water attacks
FBI, CISA and EPA flagged attacks on U.S. critical infrastructure, including water systems and tankers, plus exposed utility credentials.
Oct 3, 2026 · 3 min
THREATSBrazil
Brazil expands cyber drill across transport
Guardião Cibernético 8.0 expanded to 300 organizations, 14 countries and drills on energy, transport, health and nuclear sectors.
Oct 3, 2026 · 4 min
THREATSColombia
Air-e flags attacks on technicians and illegal grids
Air-e reported attacks on technicians and illegal power grid manipulation in Atlántico, while a separate Ecopetrol leak claim remained unverified.
Oct 3, 2026 · 2 min
THREATS
Mexico and Colombia warn of digital fraud
Buró de Crédito, CONDUSEF and Banco de Bogotá flagged identity theft, SMS, WhatsApp and vishing as top threats.
Oct 3, 2026 · 4 min
REGULATIONBrazil
Brazil BC and Coaf Adjust Crypto Reporting
Coaf added new Siscoaf entries to apply BCB Resolution 588. Other regulatory changes remain on deadlines through January.
Oct 3, 2026 · 3 min
THREATSPeru
Peru Named in FamousSparrow Campaign
ESET linked FamousSparrow to a campaign using the new SparroWocky backdoor. CYFIRMA said Peru is among the targets.
Oct 3, 2026 · 2 min
REGULATIONBrazil
Brazil's ANPD expands inspections
ANPD opened a complaints channel on the Marco Civil decrees and launched a public consultation to review its regulatory process.
Oct 3, 2026 · 4 min
THREATSUnited States
Stevens Point, Columbus face ransomware fallout
Stevens Point says it stopped a ransomware attempt before data was stolen. Columbus is still in court over a 2024 data breach.
Oct 2, 2026 · 2 min
THREATSArgentina
Garza municipal commission hit by cyberattack
Garza’s municipal commission is under investigation after a cyberattack and a $15 million banking scheme. Authorities dispute whether the transfer went
Oct 2, 2026 · 2 min
REGULATIONMexico
Banxico, CNBV to Set Digital Payment Rules
Mexico's digital payments bill adds CURP Digital, public-service payments, and powers for SHCP to define sectors where only digital payment is allowed.
Oct 2, 2026 · 4 min
REGULATION
BCRA, Banxico and CNBV tighten digital controls
Argentina set a one-hour alert for critical cyber incidents. In Mexico, Banxico boosted security spending and CNBV focused on preventive controls.
Oct 2, 2026 · 2 min
THREATSMexico
Mexico: SAFEPAY Added Auromex
SAFEPAY added Mexican manufacturer Auromex to its leak site. Security Arsenal also documented the group’s TTPs, and a note cited SCILabs.
Oct 2, 2026 · 2 min
THREATSBrazil
Brazil appears in daily ransomware log
Ransom-DB logged Brazil among several ransomware targets, while a SAFEPAY report cited a case in Mexico.
Oct 2, 2026 · 2 min
REGULATIONUnited States
Gillibrand reintroduces U.S. data privacy bill
Sen. Kirsten Gillibrand reintroduced the Data Protection Act to create a federal privacy agency and regulate data
Oct 2, 2026 · 2 min
REGULATIONArgentina
Argentina bills would replace data law
Argentina’s lower house received two bills to replace its data protection law and one to create an AI regime for the public sector.
Oct 2, 2026 · 2 min
REGULATION
Honduras to Take Cybersecurity Law to Congress
Honduras plans to send a cybersecurity law and a bill tied to a cyber defense center to Congress before the end of 2026.
Oct 2, 2026 · 2 min
ANALYSIS
Mexico and Honduras report fraud with AI
Reports in Mexico and Honduras show fraud, ransomware and AI deepfakes, alongside new uses of AI for monitoring
Oct 1, 2026 · 3 min
CLOUD SECURITYPeru
Supabase and Cloudflare exposed data due to errors
UpGuard found 16,326 Supabase databases with readable tables exposed online. Cloudflare also fixed a cross-tenant Containers flaw.
Oct 1, 2026 · 2 min
CLOUD SECURITYUnited States
Cloudflare fixed Containers isolation flaw
Cloudflare fixed a Containers isolation flaw that could expose residual data between customers. UpGuard also found thousands of exposed Supabase databases.
Oct 1, 2026 · 3 min
REGULATIONBrazil
Brazil's ANPD Publishes CD 28/2026 on Oversight
ANPD published CD 28/2026 while an unconfirmed report says TikTok was fined for alleged failures involving minors.
Oct 1, 2026 · 2 min