INVESTIGATION
Chile, Mexico and Colombia tighten controls
New privacy, AML and open finance rules advance in Chile, Mexico and Colombia, with different deadlines, sanctions and technical standards.
Federico Hombre37 min read
Read investigationInvestigations
INVESTIGATION
Peru's BCRP regulates digital payments
The BCRP approved rules for acquiring and fund collection. It requires segregated funds, transparency, and takes effect Jan. 1, 2027.
Federico Hombre38 min read
Read investigation
INVESTIGATION
FamousSparrow Uses SparroWocky in Latin America
ESET links FamousSparrow to a SparroWocky campaign against Latin American governments, with eight territories and 90% of targets in the region.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Brazil sets PSAV rules and crypto reporting for 2026
Brazil set a PSAV authorization deadline and added COAF reporting for crypto transfers of $10,000 or more, with controls starting in 2026.
Federico Hombre38 min read
Read investigation
INVESTIGATION
FamousSparrow Uses SparroWocky Against Latin America
ESET links a regional spying campaign to FamousSparrow and its new SparroWocky backdoor, with Peru among the targets.
Federico Hombre42 min read
Read investigation
INVESTIGATION
Chile, Mexico and Brazil tighten PLD rules
Chile, Mexico, Brazil and others are speeding up new data, fraud, cybersecurity and virtual asset rules through 2028.
Federico Hombre37 min read
Read investigation
INVESTIGATION
Brazil malware swaps Pix QR codes in e-commerce
Kaspersky found 90 Brazilian stores infected with malware that replaces Pix QR codes and Pix Copia e Cola at checkout.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Paraguay data law expands crypto reporting
Law 7593/2025 and RG 47/2026 expand data and crypto controls in Paraguay, adding obligations, sanctions, and proportionality debates.
Federico Hombre37 min read
Read investigation
INVESTIGATION
Mexico, Brazil, Ecuador in CL-CRI-1131, 1163
Unit 42 tracked two AI-assisted intrusion clusters in Mexico, Ecuador and Brazil, using NextChat, Claude
Federico Hombre38 min read
Read investigation
INVESTIGATION
Unit 42 Tracks CL-CRI-1131
Unit 42 found two AI-linked clusters targeting governments, water, and banks in Mexico, Ecuador, and Brazil since February 2026.
Federico Hombre36 min read
Read investigation
INVESTIGATION
Brazil BCB 519, 520, 521 and 584 for PSAV
Brazil tightened PSAV rules on licensing, capital, audit and a 24-hour hold for higher-risk crypto transfers.
Federico Hombre36 min read
Read investigation
INVESTIGATION
Chile's Law 21,719 on Personal Data
Chile’s Law 21,719 takes effect Dec. 1, 2026, creating a new agency, stronger rights, fines up to 20,000 UTM, and GDPR-like rules.
Federico Hombre36 min read
Read investigation
INVESTIGATION
Brazil’s BCB 766 updates Pix MED
Brazil updated the Pix DICT manual with deeper tracing, an 80-day response window, and new MED 2.0 adjustments.
Federico Hombre38 min read
Read investigation
INVESTIGATION
The Gentlemen ransomware hits LATAM
The Gentlemen grew into a double-extortion RaaS in 2026, targeting LATAM with Fortinet, RDP, and attacks in Colombia, Peru
Federico Hombre39 min read
Read investigation
INVESTIGATION
Brazil ANPD suspends Discord live streams
Brazil’s ANPD opened a probe into Discord over child safety risks and ordered Go Live and similar live video features suspended.
Federico Hombre38 min read
Read investigation
INVESTIGATION
US Water Attacks Hit 12 States, NY Funds Defense
Water attacks in the U.S. affected at least 12 states. New York is funding 153 systems as Latin America exposes energy gaps.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Mexico: 200 AI Bills, No Federal Law
Mexico has nearly 200 state-level AI proposals, but no federal general law or corporate cybersecurity framework yet.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Brazil Open Finance and Deepfake Fraud
Evertec shows how Open Finance, Pix and facial biometrics are creating new fraud paths in Brazil, and how banks and regulators are responding.
Federico Hombre38 min read
Read investigation
INVESTIGATION
OpenAI and Hugging Face Intrusion
OpenAI confirmed a sandbox escape during an internal test that hit Hugging Face and exposed credentials across four external services.
Federico Hombre38 min read
Read investigation
INVESTIGATION
CVE-2024-24919 in Check Point Gateways
CVE-2024-24919 exposed Check Point gateways to credential theft and was used in ransomware and APT campaigns, with regional relevance for Brazil.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Brazil Central Bank classifies PSAVs as Type 3
Brazil’s BCB 580/2026 brings virtual asset service providers into the prudential regime, with capital rules and a transition through 2028.
Federico Hombre39 min read
Read investigation
INVESTIGATION
Mercado Libre listed by The Gentlemen in July 2026
The Gentlemen listed Mercado Libre on its leak site in July 2026. Exfiltration signs emerged, but no public proof of operational impact.
Federico Hombre38 min read
Read investigation
INVESTIGATION
ColCERT Warns on ORB3 CHARLIE Network
ColCERT says ORB3/CHARLIE is used for espionage against telecom and critical infrastructure in South America, with 16 nodes
Federico Hombre36 min read
Read investigation
INVESTIGATION
Latin America Leads AI Synthetic ID Fraud
Latin America accounts for 48.3% of AI-driven synthetic identity fraud. Banks and fintechs face weaker remote onboarding controls.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Qilin and Securotrop in Q2 2026
Between May and June 2026, multiple trackers and intelligence reports linked Qilin to active ransomware campaigns that escalated around a critical Check
Federico Hombre39 min read
Read investigation
INVESTIGATION
Qilin and Fortinet Exploitation Keep Pressure on Chile as
Chile faced 8.8 billion cyberattack attempts in 2025, and between January and June 2026
Federico Hombre38 min read
Read investigation