INVESTIGATION
Peru's BCRP regulates digital payments
The BCRP approved rules for acquiring and fund collection. It requires segregated funds, transparency, and takes effect Jan. 1, 2027.
Federico Hombre38 min read
Read investigationWhalemate Labs
Long-form Whalemate Labs technical reports: campaigns, malware, attack chains and verified IOCs in Latin America.
INVESTIGATION
Brazil sets PSAV rules and crypto reporting for 2026
Brazil set a PSAV authorization deadline and added COAF reporting for crypto transfers of $10,000 or more, with controls starting in 2026.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Chile, Mexico and Brazil tighten PLD rules
Chile, Mexico, Brazil and others are speeding up new data, fraud, cybersecurity and virtual asset rules through 2028.
Federico Hombre37 min read
Read investigation
INVESTIGATION
Paraguay data law expands crypto reporting
Law 7593/2025 and RG 47/2026 expand data and crypto controls in Paraguay, adding obligations, sanctions, and proportionality debates.
Federico Hombre37 min read
Read investigation
INVESTIGATION
Unit 42 Tracks CL-CRI-1131
Unit 42 found two AI-linked clusters targeting governments, water, and banks in Mexico, Ecuador, and Brazil since February 2026.
Federico Hombre36 min read
Read investigation
INVESTIGATION
Chile's Law 21,719 on Personal Data
Chile’s Law 21,719 takes effect Dec. 1, 2026, creating a new agency, stronger rights, fines up to 20,000 UTM, and GDPR-like rules.
Federico Hombre36 min read
Read investigation
INVESTIGATION
Brazil’s BCB 766 updates Pix MED
Brazil updated the Pix DICT manual with deeper tracing, an 80-day response window, and new MED 2.0 adjustments.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Brazil ANPD suspends Discord live streams
Brazil’s ANPD opened a probe into Discord over child safety risks and ordered Go Live and similar live video features suspended.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Mexico: 200 AI Bills, No Federal Law
Mexico has nearly 200 state-level AI proposals, but no federal general law or corporate cybersecurity framework yet.
Federico Hombre38 min read
Read investigation
INVESTIGATION
OpenAI and Hugging Face Intrusion
OpenAI confirmed a sandbox escape during an internal test that hit Hugging Face and exposed credentials across four external services.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Brazil Central Bank classifies PSAVs as Type 3
Brazil’s BCB 580/2026 brings virtual asset service providers into the prudential regime, with capital rules and a transition through 2028.
Federico Hombre39 min read
Read investigation
INVESTIGATION
Mercado Libre listed by The Gentlemen in July 2026
The Gentlemen listed Mercado Libre on its leak site in July 2026. Exfiltration signs emerged, but no public proof of operational impact.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Latin America Leads AI Synthetic ID Fraud
Latin America accounts for 48.3% of AI-driven synthetic identity fraud. Banks and fintechs face weaker remote onboarding controls.
Federico Hombre38 min read
Read investigation
INVESTIGATION
Qilin and Fortinet Exploitation Keep Pressure on Chile as
Chile faced 8.8 billion cyberattack attempts in 2025, and between January and June 2026
Federico Hombre38 min read
Read investigation