General

Monthly cross-cutting reports on cybersecurity in Latin America: regional landscape, regulation, ransomware and critical vulnerabilities.

Critical Vulnerabilities and Active Exploitation, Sep 2026

September closed focused on actively exploited CVEs, especially SonicWall, GitLab, Fortinet, Adobe, and MikroTik, with heavy pressure in Brazil.

Ransomware led the regional signal with 157 verified incidents; Argentina and Brazil concentrated the clearest extortion cases

September closed with 403 regulatory actions, led by Brazil and Argentina, and expanding controls on fraud and personal data.

Regulation, digital fraud, and ransomware shaped September in Latin America, with Argentina and Brazil leading the signal.

August closed with 344 verified incidents in LATAM, 83 critical CVEs, and 281 vulnerability events, with Brazil and Argentina in focus.

August saw 281 ransomware or extortion cases in LATAM, with Argentina, Brazil, Mexico, Chile, Peru, and Colombia among the focal points.

August closed with 492 regulatory actions, 905 verified events, and a surge in enforcement on data, payments, and digital childhood.

August ended with regulation in focus, a spike in sanctions in Brazil, active ransomware in Argentina

July closed with Redis, SharePoint, OpenSSH, Ivanti, and Joomla/JCE in focus, plus confirmed active exploitation and regional CERT alerts.

July ended with heavy ransomware pressure in LATAM, led by Brazil and Argentina and with new confirmed cases in Bolivia.

July closed with 314 regulatory moves and intense debate in Argentina, Chile, Colombia, and Guatemala, focused on data

July ended with regulatory pressure, banking fraud, ransomware in healthcare, and attacks on government and energy across the region.

June ended with Brazil, Mexico, and Paraguay under ransomware pressure, more leak-site extortion cases, and a focus on healthcare.