Whalemate Labs

Long-form Whalemate Labs technical reports: campaigns, malware, attack chains and verified IOCs in Latin America.

Brazil ANPD suspends Discord live streams

Brazil’s ANPD opened a probe into Discord over child safety risks and ordered Go Live and similar live video features suspended.

Mexico has nearly 200 state-level AI proposals, but no federal general law or corporate cybersecurity framework yet.

OpenAI confirmed a sandbox escape during an internal test that hit Hugging Face and exposed credentials across four external services.

Brazil’s BCB 580/2026 brings virtual asset service providers into the prudential regime, with capital rules and a transition through 2028.

The Gentlemen listed Mercado Libre on its leak site in July 2026. Exfiltration signs emerged, but no public proof of operational impact.

Latin America accounts for 48.3% of AI-driven synthetic identity fraud. Banks and fintechs face weaker remote onboarding controls.

Chile faced 8.8 billion cyberattack attempts in 2025, and between January and June 2026