THREATSUnited States
US sanctions Tren de Aragua-linked network
The United States sanctioned 10 people and entities tied to a financial network linked to Tren de Aragua, accused of ATM hacks.
Oct 5, 2026 · 2 min
Threats — News
Up-to-date cyber intelligence coverage. Filter by category or browse the full archive.
THREATSUnited States
Illinois hospital claimed by Wallstreet ransomware
Wallstreet claimed an attack on Gibson Area Hospital in Illinois. FalconFeeds said 600 GB may have been exfiltrated.
Oct 4, 2026 · 3 min
THREATSMexico
Mexico accounted for 52 ransomware cases in Latin America
SCILabs logged 290 ransomware attacks in Latin America in H1 2026. Mexico accounted for 17.93%, with finance in focus.
Oct 4, 2026 · 3 min
THREATSUnited States
FBI, CISA warn on U.S. water attacks
FBI, CISA and EPA flagged attacks on U.S. critical infrastructure, including water systems and tankers, plus exposed utility credentials.
Oct 3, 2026 · 3 min
THREATSBrazil
Brazil tightens cyber focus on transport
Transport, energy and essential services in Brazil are showing up in cyber exercises amid outage risks and new regulatory demands.
Oct 3, 2026 · 2 min
THREATSColombia
Air-e flags attacks on technicians and illegal grids
Air-e reported attacks on technicians and illegal power grid manipulation in Atlántico, while a separate Ecopetrol leak claim remained unverified.
Oct 3, 2026 · 2 min
THREATS
Mexico and Colombia warn of digital fraud
Buró de Crédito, CONDUSEF and Banco de Bogotá flagged identity theft, SMS, WhatsApp and vishing as top threats.
Oct 3, 2026 · 3 min
THREATSPeru
Peru Named in FamousSparrow Campaign
ESET linked FamousSparrow to a campaign using the new SparroWocky backdoor. CYFIRMA said Peru is among the targets.
Oct 3, 2026 · 2 min
THREATSUnited States
Stevens Point, Columbus face ransomware fallout
Stevens Point says it stopped a ransomware attempt before data was stolen. Columbus is still in court over a 2024 data breach.
Oct 2, 2026 · 2 min
THREATSArgentina
Garza municipal commission hit by cyberattack
Garza’s municipal commission is under investigation after a cyberattack and a $15 million banking scheme. Authorities dispute whether the transfer went
Oct 2, 2026 · 2 min
THREATSMexico
Mexico: SAFEPAY Added Auromex
SAFEPAY added Mexican manufacturer Auromex to its leak site. Security Arsenal also documented the group’s TTPs, and a note cited SCILabs.
Oct 2, 2026 · 2 min
THREATSBrazil
Brazil appears in daily ransomware log
Ransom-DB logged Brazil among several ransomware targets, while a SAFEPAY report cited a case in Mexico.
Oct 2, 2026 · 2 min
THREATSUnited States
Modoc Medical Center reports file theft
The Alturas, California hospital said an unauthorized actor accessed its systems and downloaded files. The number of affected people was not disclosed.
Sep 30, 2026 · 1 min
THREATS
Argentina’s Education Ministry named in n0n ransomware
A weekly ransomware roundup listed Argentina’s Education Ministry among victims, while Brazil references tied to n0n remain unconfirmed.
Sep 30, 2026 · 4 min
THREATSUnited States
CISA, FBI issue ICS integrator guidance
The guide urges tighter remote access controls, stronger contracts, and manual operations for critical infrastructure using third-party ICS integrators.
Sep 29, 2026 · 3 min
THREATSChile
BancoEstado Sees $20M+ Fraud Losses in Chile
BancoEstado projects more than $20 million in card fraud losses in 2026, with five-year losses nearing $400 million in Chile.
Sep 29, 2026 · 2 min
THREATS
Argentina court orders bank to repay fraud loss
A La Plata court ordered a bank to return 11.2 million pesos after six unauthorized transfers in a digital fraud case.
Sep 29, 2026 · 3 min
THREATSUnited States
Emperador posts OnTrac, Electrolux victims
Emperador added OnTrac and Electrolux to its leak site, claiming $1 million and up to 75.1 MB of exfiltrated data.
Sep 28, 2026 · 2 min
THREATS
Peru's Agrofruto SAC listed by Arcus Media
Arcus Media named Peru's Agrofruto SAC as a ransomware victim, with a data leak deadline set for Sept. 30, 2026.
Sep 28, 2026 · 2 min
THREATSMexico
Mexico probes sale of 12.9 million records
Mexico is investigating Telegram posts offering 12.9 million personal records tied to call centers, and in some cases bank data.
Sep 27, 2026 · 2 min
THREATSArgentina
ARS Renacer and Hospifar listed by ransomware
DragonForce and Titan listed ARS Renacer and Grupo Hospifar on leak sites. Available reports cite sensitive data in the insurer case.
Sep 26, 2026 · 2 min
THREATSMexico
Mexico Ranked Second in LATAM Ransomware
Mexico logged about 52 ransomware attacks in the first half of 2026, ranking second in Latin America, according to SCILabs.
Sep 26, 2026 · 4 min
THREATSArgentina
Argentina's Cyber.ar 26 flags critical infrastructure risks
Cyber.ar 26 closed in Argentina with warnings on critical infrastructure, 44 exposed systems and GNSS jamming and spoofing risks.
Sep 25, 2026 · 2 min
THREATSBrazil
Brazil steps up probes into digital bank fraud
São Paulo Civil Police indicted 268 suspects in 2026 as Brazil’s Justice Ministry and Federal Police launched new fraud operations.
Sep 25, 2026 · 2 min
THREATSBolivia
Bolivia warns of QR code scams
Bolivia’s FELCC warned of QR-code scams in which criminals impersonate people to extort victims.
Sep 25, 2026 · 1 min
THREATSParaguay
Paraguay warns of banking fraud scams
The BCP and Paraguay’s environment ministry warned about fake links, data requests and officials impersonation used in fraud.
Sep 25, 2026 · 2 min
THREATS
LATAM Leads Card Fraud, Stripe Says
Stripe said LATAM’s 2025 card fraud rate was 65% higher than North America’s, with Peru, Colombia, Chile, Argentina and Mexico under pressure.
Sep 25, 2026 · 3 min
THREATSBrazil
Brazil's Receita Federal cited by Emperador
Emperador claimed Brazil’s Receita Federal as a victim and said it had 6.3 GB of data. There is no official confirmation of a breach.
Sep 24, 2026 · 2 min
THREATSUnited States
U.S. hospitals report data incidents
Grafton City Hospital notified 1,215 people after a phishing-linked breach. Cedar County Memorial is still investigating a possible data exposure.
Sep 22, 2026 · 3 min
THREATSMexico
INCAN restores radiotherapy after cyberattack
INCAN said radiotherapy has been back to normal since Sept. 11 after a cybersecurity incident affected the unit.
Sep 22, 2026 · 2 min
THREATSBrazil
Hospital Santa Marta extortion conviction upheld
Federal District judges upheld the conviction of two hackers who accessed Santa Marta Hospital data and demanded 43 bitcoins.
Sep 22, 2026 · 3 min
THREATSUnited States
Qilin posts victims in Mexico, Chile
ZeroHour added new Qilin victims in Mexico, Chile, Argentina and Trinidad and Tobago. Panzer also listed Brazil’s K3G Solutions.
Sep 22, 2026 · 2 min
THREATSBrazil
Brazil: Panzer and Play list new victims
Panzer claimed K3G Solutions and Play claimed Metallco. Unit 42 also reported a phishing campaign against Brazil's financial sector.
Sep 22, 2026 · 2 min
THREATSBrazil
Brazil tightens Pix rules over deepfake fraud
Deepfake fraud in Brazil rose 830% and now accounts for 1 in 15 detected cases in 2026. The central bank updated Pix rules.
Sep 21, 2026 · 3 min
THREATS
Colombian Banks Targeted by Digital Fraud Panel
Lumu found a panel impersonating 15 Colombian banks, while KREMLIN malware is also hitting browsers in Brazil.
Sep 21, 2026 · 3 min
THREATSBrazil
Brazil accounts for 53% of cyberattacks in Latin America
JC2Sec and Bitsight say Brazil accounts for 53% of cyberattacks in Latin America, with pressure on government
Sep 21, 2026 · 2 min
THREATSColombia
Colombia logs 1.3 million cyber detections
Trellix counted 1.3 million detections in six months in Colombia, with banking, government and health accounting for most activity.
Sep 21, 2026 · 3 min
THREATSMexico
Mexico investigates Aeroméxico data leak
Mexico’s anti-corruption office is investigating a possible leak of more than 15 million Aeroméxico records, while the airline reviews it.
Sep 21, 2026 · 2 min
THREATSUnited States
Ransomware Targets VMware vCenter in Latin America
CISA said ransomware is exploiting a critical VMware vCenter flaw, while reports point to victims and active campaigns in Latin America.
Sep 20, 2026 · 2 min
THREATSBrazil
Panzer lists K3G Solutions Brazil
Panzer claimed K3G Solutions Brazil in Manaus and tied it to a possible 300 GB exfiltration, according to ransomware records.
Sep 20, 2026 · 2 min
THREATSChile
Forus Listed as LockBit5 Victim in Chile
LockBit and public trackers listed Forus, the Santiago-based Chilean retailer, on its leak site.
Sep 20, 2026 · 2 min
THREATSChile
Vigatec appears in Qilin reports for September
Qilin allegedly listed Vigatec on its leak site on Sept. 17, 2026. There is no official confirmation or technical detail yet.
Sep 20, 2026 · 2 min
THREATSMexico
Mexico: Proofpoint Detects Mass Email Campaigns
Proofpoint saw large-scale email campaigns targeting Mexico in July and August 2026.
Sep 19, 2026 · 2 min
THREATS
FamousSparrow targets Latin American governments
ESET linked FamousSparrow to SparroWocky campaigns against public agencies in Argentina, Ecuador, Guatemala and other countries.
Sep 19, 2026 · 4 min
THREATSUnited States
Sutton and Fort Smith Hit by Ransomware
Sutton and Fort Smith reported ransomware incidents tied to Global and Interlock. Both cities said the attacks were contained.
Sep 18, 2026 · 2 min
THREATSBrazil
Brazil’s Logar hit by VEXY ransomware
Security Arsenal confirmed Logar Network Solutions in Brazil as a new VEXY victim. Breach House and Ransomware.live tied it to MSP services.
Sep 18, 2026 · 2 min
THREATSParaguay
Paraguay Health Ministry faces alleged data leak
VECERT flagged a possible 10.5 GB exfiltration tied to Paraguay’s Health Ministry. The case remains unconfirmed.
Sep 18, 2026 · 2 min
THREATSPeru
Peru's MEF reports X account breach
Peru's Ministry of Economy and Finance said its X account was breached and security protocols were activated to regain access.
Sep 17, 2026 · 2 min
THREATS
Colombia: banking and government lead detections
Trellix says banking and finance drove 55.8% of detections in Colombia. PSE and government also appeared among the targets.
Sep 17, 2026 · 3 min
THREATSMexico
SafePay Adds laconcepcion.com.mx in Mexico
SafePay has added laconcepcion.com.mx to its victim list. Threat intelligence sources place it in Mexico and link it to a possible health provider.
Sep 17, 2026 · 2 min