Mexico showroom for Chinese electric cars unavailable in the U.S
A Washington Post column describes Chinese-brand EVs on sale in Mexico that Americans cannot buy.
6
Country
Mexico
- Mentions · 7d3
- Mentions · 30d32
- All mentions53
- First seenAug 17, 2026
- Last mentioned1d ago
Timeline
53 articles · newest firstSchool and government DNS abused to promote illegal gambling
Infoblox found two operations using CNAME aliases and nameserver delegations; it does not report malware or stolen data.
58
Attackers shadow Indian government domains to promote illegal gambling sites
Infoblox says unauthorized NS delegations on maharashtra.gov.in and a separate Hidden Hawk operation abused school and government domains for SEO.
58
Criminals used Claude, Grok and Kimi against Latin American finance targets
Straiker says more than 400 organizations were targeted, not that each one was breached.
74
Hirudo Android trojan swaps real banking apps for hooked copies
ThreatFabric says replacements are ready for eight Indonesian bank apps and that August 2026 backend data held thousands of credential entries.
68
Hirudo Android RAT swaps banking apps using fake updates
ThreatFabric says lure apps drop Hirudo, which can uninstall genuine Indonesian bank apps and install modified copies that spoof integrity checks.
68
CyberCartel used Claude and Grok against 400-plus financial firms
Straiker reviewed the group’s CARLIY0S system and a snapshot of 4,493 records, without confirming every target was breached.
76
Midnight Mimosa malware ships in Android phone firmware
A platform-signed system app installs ad-fraud plugins after briefly disabling the Play Store; proxy use was not seen.
70
Midnight Mimosa hides ad-fraud malware in cheap Android firmware
Bitdefender saw thousands of infected phones in more than 150 countries over about two years.
74
MITRE ATT&CK v20 adds AI abuse, MFA bypass, and utility attacks
Enterprise gains nine entries, ICS adds two campaigns plus analytics, and Mobile restores sideloading and NGate.
61
AI Takes Control of Robotic Arm in 16 Minutes Flat
Booz Allen lab tests showed frontier AI models can seize an OT robotic arm in 16 minutes.
66
MITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft
MITRE ATT&CK v20 adds Enterprise techniques for prompt injection, AI exfiltration and result poisoning.
63
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
ThreatFabric details Hirudo, an Android banking RAT that swaps Indonesian bank apps for trojanized copies.
64
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Hirudo uninstalls real Android banking apps and installs patched copies to steal credentials and bypass security checks.
74
Hirudo Android malware replaces banking apps to evade security checks
Hirudo Android malware replaces banking apps with hooked copies that steal credentials and bypass integrity checks.
72
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Hirudo Android trojan replaces Indonesian banking apps with patched copies to steal credentials and control devices.
74
Cerebras CEO pushes back on AI doomsday warnings
Cerebras CEO Andrew Feldman says AI leaders overemphasize doom and should stress benefits while regulating risks.
34
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Preinstalled Midnight Mimosa malware on cheap Android phones enables ad fraud and residential proxies.
76
Frontier AI cleared every OT attack goal Booz Allen set in its lab
Booz Allen says frontier AI models completed every OT attack goal in its isolated factory lab, including moving a robotic arm.
71
Low-cost Android phones are arriving with malware that owners can’t uninstall
Bitdefender found preinstalled Midnight Mimosa malware on budget Android phones that owners cannot uninstall.
74
Casbaneiro Malware Hides C2 Activity Until Victims Visit Banking Websites
Casbaneiro hides its main command channel until Latin American victims open targeted banking sites.
58
Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue
Midnight Mimosa, preinstalled Android firmware malware, monetizes thousands of phones in 150 countries through ad fraud and proxies.
74
Midnight Mimosa Infects Android Phones Before Users Even Turn Them On
Midnight Mimosa ships in low-cost Android firmware, silently running ad fraud and proxy modules before first boot.
76
Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites
Casbaneiro banking trojan phishes Latin American users and starts banking C2 only after victims open targeted bank sites.
62
Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries
Bitdefender found Midnight Mimosa firmware malware preinstalled on budget Android phones in over 150 countries.
72
Low-cost Android phones ship with residential proxy malware
Midnight Mimosa malware preinstalled on cheap Android phones enables ad fraud and residential proxy abuse.
74
CIA Conspired with the Right on the Eve of Mexico's '68 Massacre
Declassified records show the CIA funded Mexican right-wing student groups before the 1968 Tlatelolco massacre.
5
La Cueva BBS in Mexico in 1993 (session replay)
A 1993 Mexico BBS session replay documents dial-up history, not a current security issue.
3
Alleged ATM malware creator appears in Nebraska court after arrest
Alleged Ploutus creator Anibal Canelon Aguirre pleaded not guilty in Nebraska federal court.
68
US sanctions Tren de Aragua gang members in ATM hacks crackdown
Treasury sanctioned eight Tren de Aragua members over ATM jackpotting that stole about $40.7 million.
74
Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in U.S. Losses
The U.S. Treasury sanctioned a Tren de Aragua network tied to $40.7 million in ATM jackpotting losses.
78
Treasury Blacklists Most-Wanted ATM Malware Developer and His Network
US Treasury sanctioned alleged Ploutus ATM-malware developer Anibal Canelon Aguirre and associates tied to Tren de Aragua.
66
US sanctions 10 over ATM malware scheme tied to Tren de Aragua
OFAC sanctioned 10 people over a Ploutus ATM-jackpotting scheme that US officials link to Tren de Aragua.
65
PaperPhone Cluster Shows How One Bot Operator Can Look Like Thousands of Mobile Users
CrowdSec says the PaperPhone scraper used 75,000 IPs in 43 countries to impersonate mobile users.
46
MexHat: A Dataset for Hate Speech Detection in Mexican Spanish Videos
MexHat is a roughly 1,000-clip Mexican Spanish video dataset for hate-speech and offensive-content detection.
16
She died at the San Diego border. A surveillance camera was in plain sight
Migrant died within view of AI-equipped border tower; investigation finds hundreds of deaths near surveillance installations.
50
UCQ Leak, Israeli GlobalProtect Access, Digital Nirvana Dump, 32baar, and Ghorer Bazar
SOCRadar flags underground posts selling an alleged Universidad Cuauhtémoc database, Israeli GlobalProtect VPN access, and Digital Nirvana data dumps.
25
From Hacks to Bioweapons, Claude Misuse Is Now Everywhere
Anthropic reports Claude was misused by Midnight Blizzard, ShinyHunters, disinformation campaigns, and bioweapon attempts; roundup also covers Xinbi takedown.
72
The US and Mexico Announce They’re Teaming Up Against Drones
US and Mexico launch Operation High Eagle (Águila Alta), jointly tracking and neutralizing cartel drones along the San Diego-Tijuana border.
5
Mexican student creates an acoustic fire extinguisher to put out fire in seconds
A 16-year-old student built 'Vortex Tech,' an acoustic extinguisher emitting 30 sound pulses per second that extinguishes small fires in five to eight seconds.
3
Related CVEs
by mentions- CVE-2023-3602588%8.8Windows SmartScreen Bypass (CVE-2023-36025) Exploited via Crafted Shortcut Files
Appears with
- Androidproduct · 16
- Googlevendor · 13
- Bitdefenderorganization · 8
- Midnight Mimosamalware · 8
- MediaTekvendor · 7
- Claudeai model · 7
- ThreatFabricorganization · 6
- Hirudomalware · 6
- Palo Alto Networksvendor · 5
- Google Playproduct · 5
- Tren de Araguathreat actor · 5
- GoldFactorythreat actor · 4
- Ploutusmalware · 4
- Group-IBvendor · 4
- Gigabudmalware · 4
- Federal Bureau of Investigationorganization · 4
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.