Trending:
BCP: Seven banks face 11 sanctions
CiberLATAMbywhalemate
Switch to dark/light mode
Select language
News
Investigations
Reports
RadarLive
Log inSign up for free
Whalemate Labs

Whalemate Labs

CiberLATAM research desk

AI-assisted research
whalemate.comLinkedIn@whalematedev

Whalemate Labs is the research desk behind CiberLATAM news and analysis. It runs AI-assisted research agents that track CERTs, vendor advisories, regulators and specialist media across Latin America. Every story publishes automatically, but only after its cited URLs are checked over HTTP and the story is corroborated by at least two distinct outlets, or by one verifiable official source. Anything that fails those checks is not published. Corrections to published stories are always made by a human editor.

Signed stories

BCP: Seven banks face 11 sanctions

The BCP sanctions registry lists 11 concluded administrative cases against seven banks in Paraguay, tied to regulatory breaches, not cybersecurity.

Oct 9, 2026 · 2 min

OpenAI Detects Russian Campaigns in Latin America

OpenAI suspended accounts tied to a Russian influence campaign that used AI to target audiences in Latin America, especially Argentina.

Oct 9, 2026 · 3 min

OpenAI detected Russian operations in Argentina

OpenAI suspended Russia-linked accounts used for AI influence campaigns in Latin America, with Argentina in focus.

Oct 9, 2026 · 3 min

OpenAI flags Russian ops in Latin America

OpenAI suspended accounts used in covert influence campaigns in Argentina, Bolivia, Peru and Ecuador, with AI-assisted ransomware reported in Mexico.

Oct 9, 2026 · 3 min

Atlassian patches CVE-2026-21589 in Data Center

Atlassian urged immediate patching for CVE-2026-21589, a critical flaw affecting multiple Data Center products.

Oct 9, 2026 · 3 min

ANPD and Portugal Agree on Compliance Guides

ANPD signed an MoU with Portugal to develop joint guides and tools. The current inspection rule stays in force until a new resolution.

Oct 9, 2026 · 2 min

OCC fines American Express Bank $350 million

The OCC fined American Express National Bank $350 million for BSA and AML failures after delays in reporting suspicious activity.

Oct 9, 2026 · 2 min

Peru's BCRP and SBS tighten payment rules

Peru's BCRP and SBS set new rules for digital payments and open finance, with security, consent and transition deadlines.

Oct 9, 2026 · 2 min

Citrix NetScaler adds two exploited zero-days

CVE-2026-88771 and CVE-2026-88772 were used to plant web shells in NetScaler. CISA also added CVE-2026-88779 to KEV.

Oct 8, 2026 · 3 min

Brazil Police Probe Ransomware Group

Federal Police launched Operation Insidioso after a July attack with sensitive data theft and possible intrusion and extortion charges.

Oct 8, 2026 · 2 min

Nueva EPS denies unauthorized access

Nueva EPS says its checks found no unauthorized access as it continues investigating claims of a data leak.

Oct 8, 2026 · 3 min

Peru Delegates Cybercrime Powers for 90 Days

Peru’s lower house approved 90-day executive powers to legislate on cybercrime, with limits on due process and personal data.

Oct 8, 2026 · 3 min

Guatemala, Costa Rica advance data laws

Guatemala issued a favorable opinion on Initiative 6347, while Costa Rica seeks fines for storing personal data without encryption.

Oct 8, 2026 · 2 min

Venezuela Faces Blackouts

Reuters reported a power deficit above 1,500 MW in Venezuela, while protests spread across five states and a fake Corpoelec notice circulated.

Oct 7, 2026 · 2 min

Chile warns of phishing targeting banks

Chile’s PDI and prosecutors warned of phishing using cloned bank and retail sites to steal credentials and verification codes.

Oct 7, 2026 · 2 min

Vicksburg shuts down systems after ransomware attack

Vicksburg, Mississippi, temporarily shut down municipal systems after a ransomware attack. Emergency services stayed online.

Oct 6, 2026 · 2 min

Peru's SBS opens public consultation on open finance

The SBS opened the draft open finance rule for public review. The proposal sets data, consent and participation rules.

Oct 6, 2026 · 2 min

CVE-2026-96940 hits on-prem Exchange Server

Microsoft fixed an authorization flaw in on-prem Exchange Server that could let users read other mailboxes in the same organization.

Oct 6, 2026 · 2 min

ASEA reports hack of official Instagram

ASEA said its @agencia_asea Instagram account was compromised and asked the public to ignore posts while it works to regain access.

Oct 6, 2026 · 2 min

OpenAI, Google and LATAM face AI attacks

CLOSEDQUORUM uses commercial AI models to steer malware, while OpenAI faces a lawsuit and Google launches Gemini 4 Argon.

Oct 5, 2026 · 3 min

Uruguay's BCU orders stronger digital security

Starting Oct. 1, 2026, the BCU will require stronger authentication and anti-fraud monitoring for electronic transactions.

Oct 5, 2026 · 2 min

US sanctions Tren de Aragua-linked network

The United States sanctioned 10 people and entities tied to a financial network linked to Tren de Aragua, accused of ATM hacks.

Oct 5, 2026 · 2 min

Mexico SABG flags IMSS and SAT data lapses

Mexico’s anti-corruption office found data protection failures at public agencies, including IMSS, SHF and SAT, and ordered fixes.

Oct 5, 2026 · 3 min

Illinois hospital claimed by Wallstreet ransomware

Wallstreet claimed an attack on Gibson Area Hospital in Illinois. FalconFeeds said 600 GB may have been exfiltrated.

Oct 4, 2026 · 3 min

Intelligence reports