60
45
30
30
Latin America governments are prime targets for ransomware due to lack of resources, analysis argues
60
42
57
30
60
57
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America
Rapid7 announced a strategic distribution partnership with Licencias OnLine to expand its security solutions across Latin America.
Rapid7 announced a strategic distribution partnership with Licencias OnLine to accelerate cybersecurity maturity across Latin America. The partnership targets challenges from cloud and AI adoption in the region, including expanding attack surfaces and blind spots such as Shadow IT and Shadow AI. Cássio De Alcântara, Director of LATAM Sales at Rapid7, framed the deal as a way to help security leaders understand risk across distributed environments without adding operational complexity. No financial terms or specific product bundles were disclosed.
15
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
Unit 42 documents two AI-assisted intrusion campaigns against Latin American government, utility, and financial organizations using LLM-orchestrated tooling.
Palo Alto Networks Unit 42 tracks two ongoing intrusion clusters, CL-CRI-1131 (Mexican transportation, federal ministries, municipal water utilities) and CL-CRI-1163 (Brazilian financial sector), both using living-off-the-land techniques, SOCKS5 relays, and custom RATs. The attackers appear to orchestrate operations via commercial LLMs like Claude and GPT-4.1, evidenced by iterative batch scripts and AI-generated tunneling tool naming. The Mexican campaign (also reported as Operation Escaneo by CloudSEK) exfiltrated sensitive data via dynamic-DNS infrastructure with rotated multi-SAN TLS certificates between February and June 2026. This signals broader adoption of AI-enhanced operations by diverse threat groups in the region.
72
42
42
45
55
60
57
42
30
30
30
60
42
60
42
45
42
30
30
30
30
42
30
30
30
55
30
42
60