GERMAN PACHON

ILY ACUO

[José Siles | AI | Data @josesilesdata]

🔗 Enlace al repo: https://t.co/CUwg2dRzNz

[VECERT Analyzer @VECERTRadar]

🇲🇽 🇧🇷 🇦🇷 🇵🇪 🇨🇴 🇨🇱 🇻🇪 🇪🇨 🇵🇦 GLOBAL CYBER INTELLIGENCE REPORT: CYBER THREAT OVERVIEW IN LATIN AMERICA — EXECUTIVE SUMMARY June 2026

[MONTHLY REPORT / COMPILATION OF EXPOSURES / ACTOR MAPPING / SOURCE: LATAM CYBER ALERT LANDSCAPE / COVERAGE: JUNE 2026]

Based on the analysis of big data and consolidated threat intelligence during June 2026, this cyber intelligence report details the landscape of alerts, incidents, and threat actor activity throughout the Americas. The analyzed ecosystem reveals a sustained, high-intensity campaign targeting corporate infrastructure and government entities across sectors, with a worrying focus on the mass exfiltration of citizen data and financial profiles.

📊 CORE METRICS AND ALERTS VOLUME

🚨 Total Alerts Recorded: 286 critical incidents.

👥 Threat Actors Monitored: 133 active gangs and operators.

🏢 Corporate Targets: 194 attacks (representing 67.8% of the most affected sectors).

🏛️ Government Targets: 34 government agencies compromised (11.9%).

🎒 Education and Health: These sectors accounted for 22 (7.7%) and 15 (5.2%) alerts, respectively.

🗺️ TOP MOST AFFECTED COUNTRIES AND HIGHLIGHTED ALERTS

The volume of incidents was concentrated, approximately 60%, in two dominant national infrastructures:

🇲🇽 Mexico (125 alerts / 43.7%)
🇧🇷 Brazil (46 alerts / 16.1%)
🇦🇷 Argentina (21 alerts / 7.3%)
🇵🇪 Peru (19 alerts / 6.6%)
🇨🇴 Colombia (17 alerts / 5.9%)
🇨🇱 Chile (15 alerts / 5.2%)
🇻🇪 Venezuela (13 alerts / 4.5%)
🇪🇨 Ecuador (12 alerts / 4.2%)
🇵🇦 Panama (6 alerts / 2.1%)

many These alerts have been processed by the research laboratory because, as they are not yet confirmed, evaluations are being carried out to identify vectors, digital footprints, and other documented logistical processes.

🎯 TOP THREAT ACTORS (RANKING OF CURRENT INCIDENTS)

The attribution analysis identified a group of actors responsible for repetitive and scalable campaigns, ranked by their volume of successful executions:

Exiles (14 incidents): Aggressively focused on compromising municipalities and local government agencies.

GordonFreeman (12 incidents): Specialized in intruding on public sector finances and ministries of economy.

CHRONUSTEAM (12 incidents): The main vector of disruption against educational and social security services.

vLeakz (10 incidents): A cell dedicated to extracting voter registration data and doxing police and municipal entities.

MagoSpeak (10 incidents): Operators focused on the telecommunications sector and public universities.

🛡️ COMPROMISE TAXONOMY ANALYSIS AND RECOMMENDATIONS (SOC)

87.8% of the mapped incidents fall into the Data Leak/Database Leak category, followed by 5.2% of Initial Access and Web Shell compromises.

To mitigate this high-exposure environment, IT infrastructure teams are advised to deploy the following strategic protection guidelines:

🛑 Credential Strengthening and Hygiene: Force the expiration of logical sessions and audit the cryptographic keys of perimeter APIs.

🔑 Remote Access System Hardening: Block unnecessary remote ports and ensure that any external management console implements mandatory hardware-based Multi-Factor Authentication (MFA).

🛡️ Cloud Storage Audit: Rigorously inspect cloud storage buckets (AWS S3, Azure Blobs) and public repositories to correct misconfigurations of permissions that lead to the inadvertent exposure of source code or environment variables.

📊 CENTRALIZED MONITORING AND EVALUATION

Intelligence System: https://t.co/wk9bZJ2Nli

Monitoring Console: https://t.co/5LuqwzYuS6

#CyberSecurity #LATAM #ThreatLandscape #CyberAlert #DataLeak #DDoS #InitialAccess #ThreatActors #Exiles #ChronusTeam #June2026 #VECERT #Infosec

[AI探路者Tim @AIExplorerTim]

我最近发现了一个超酷的网站检查工具叫 Web-Check。它有很强的黑客范儿。

它让你能检查网站的几乎所有信息：IP 详情、SSL、DNS 记录、cookies、域名信息、爬虫规则、服务器位置、重定向历史、开放端口、路由追踪、DNSSEC、网站性能、关联主机名等等。

https://t.co/W9uSjIkehX

[Dark Web Intelligence @DailyDarkWeb]

🔎 Most analysts don’t need more tools. They need the right tools.

We’ve refreshed our toolkit for modern Threat Intelligence, OSINT, and Dark Web investigations by removing outdated or less relevant extensions and focusing on platforms that provide actionable intelligence.

* Infrastructure Intelligence: Shodan, Censys

* Breach Intelligence: DeHashed, Have I Been Pwned

* Threat Intelligence: MISP, IntelX

* Malware Analysis: Triage

* Reconnaissance: SpiderFoot, Recon-ng, theHarvester

* Web Investigation: URLScan, VirusTotal

* Exposure Monitoring: GitHub Dorking, FOCA, Doppelgänger

Analyst Note:
The most valuable intelligence often comes from correlating data across multiple sources. A leaked credential in DeHashed, an exposed server in Shodan, and a suspicious domain in URLScan may look unrelated individually—but together they can reveal the early stages of a compromise.

What tools are missing from your daily workflow?

#DDW #Intelligence #DarkWeb #OSINT

[UCYBERS @UCybersX]

📌 أداة flowsint
اداة (OSINT) لجمع المعلومات عن اي شخص بضغطة زر واحدة سواء معرفة حساباته على مواقع التواصل الأجتماعي او ارقام الهواتف المرتبطة به وحتى البريد الألكتروني وتجميع البيانات المتناثرة

تحتوي على أكثر من 30 أداة لجمع المعلومات في اداة واحدة يمكنك فحص وتوسيع البيانات الخاصة بـ (أسماء الـ Domains وعناوين الـ IP وأرقام الهواتف والبريد الإلكتروني وأسماء المستخدمين والمواقع وحتى محافط العملات الرقمية Crypto Wallets)

باختصار: بمجرد امتلاكك لنقطة انطلاق واحدة (سواء كانت بريد إلكتروني او اسم مستخدم او الـ IP أو الأسم) ستساعدك الأداة على كشف شيء عن الشخص والروابط المخفية وبناء مخطط تحقيقي متكامل خلال دقائق

👇 رابط الأداة

[Es Geeks @EsGeeks]

🚨 ¿Tu PC está comprometida?

8 comandos lo dicen en 2 minutos.

Sin instalar nada. CMD + PowerShell como admin.
Hilo 🧵👇

#ciberseguridad #hackingetico #pentesting #infosec #esgeeks

[pashov @pashov]

🚨Claude Opus 4.6 wrote vulnerable code, leading to a smart contract exploit with $1.78M loss

cbETH asset's price was set to $1.12 instead of ~$2,200. The PRs of the project show commits were co-authored by Claude - Is this the first hack of vibe-coded Solidity code?

[Tech Fusionist @techyoutbe]

This Weekend, let's focus on Cloud Security 🔥🔥

One Module at a time! ⬇️⬇️

[Merill Fernando @merill]

👋 Folks, I'm super excited to announce the launch of the Microsoft Zero Trust Assessment!

I've been working on this project for the past year at Microsoft with an extended team including our security researchers, product feature teams and docs

Here's what it does

🧵👇

[Alex Xu @alexxubyte]

How to Learn AWS?

[Tech Fusionist @techyoutbe]

AWS Serverless Architecture!

[Tech Fusionist @techyoutbe]

🛡️ Cloud Security 360° — Everything You Must Protect, Layer by Layer (From End User to Datacenter) 🔐

[LetsDefend @LetsDefendIO]

Financial Cybersecurity

[Laprovittera Carlos @laprovittera]

CAIDO ya tiene su propio Lab para hacking web

Una colección de herramientas de prueba de seguridad web para ayudar a los profesionales y entusiastas de la seguridad a auditar aplicaciones web con eficiencia y facilidad.

https://t.co/dZlb0oB8Jc

[Govardhana Miriyala Kannaiah @govardhana_mk]

Not a joke, many Cloud Engineers don’t fully understand Internet and NAT Gateway differences or their implications.

Here, I’ve made this to help you better understand.

55K+ read my DevOps and Cloud newsletter: https://t.co/WBucLdwLhJ

What do we cover:
DevOps, Cloud, Kubernetes, IaC, GitOps, MLOps

🔁 Consider a Repost if this is helpful

[Tech Fusionist @techyoutbe]

AWS Cloud Roadmap: Master the Cloud with This Simple 30 Days Planner 🔥

[Branko @brankopetric00]

Simple guide to understand Serverless on AWS:

1) No servers to manage - you write code, AWS runs it
2) Pay only when code executes (per request, not per hour)
3) Lambda - your code that runs when triggered
4) API Gateway - receives HTTP requests and triggers Lambda
5) DynamoDB - NoSQL database that stores JSON data
6) Auto-scales from 0 to millions of requests automatically

Simple newsletter serverless system project:

1) Create Lambda function to handle email submissions
2) Set up API Gateway POST endpoint to trigger Lambda
3) Create DynamoDB table to store emails as JSON
4) Write Lambda code to save email to DynamoDB
5) Build simple HTML form and host on S3
6) Connect form to API Gateway endpoint
7) Test by submitting emails and checking DynamoDB

This is perfect first serverless project - real use case, no infrastructure headaches.

[Tech Fusionist @techyoutbe]

CI/CD Pipeline with Github Actions (Step by Step) 🔥

[Dhanian 🗯️ @e_opore]

Cloud Providers and Their Core Services in Cloud Computing

1. Amazon Web Services (AWS)

Compute Services

→ Amazon EC2 provides scalable virtual servers for running applications.
→ AWS Lambda enables serverless computing by executing code on demand.
→ Elastic Beanstalk simplifies application deployment and management.

Storage Services

→ Amazon S3 offers reliable object storage for data and backups.
→ Amazon EBS provides persistent block storage for EC2 instances.
→ Amazon Glacier delivers low-cost, long-term archival storage.

Networking Services

→ Amazon VPC allows creation of isolated cloud networks.
→ Elastic Load Balancing distributes incoming traffic efficiently.
→ Route 53 manages DNS and domain routing.

2. Microsoft Azure

Compute Services

→ Azure Virtual Machines offer scalable cloud-based compute resources.
→ Azure Functions supports event-driven serverless computing.
→ Azure App Service enables hosting and scaling of web applications easily.

Storage Services

→ Azure Blob Storage handles large amounts of unstructured data.
→ Azure Disk Storage provides fast and durable storage for applications.
→ Azure Files offers fully managed shared file systems.

Networking Services

→ Azure Virtual Network enables secure communication between services.
→ Azure Load Balancer distributes workloads across instances.
→ Azure DNS provides global domain name resolution.

3. Google Cloud Platform (GCP)

Compute Services

→ Google Compute Engine offers virtual machines with flexible configurations.
→ Google Cloud Functions supports serverless execution of lightweight apps.
→ Google Kubernetes Engine (GKE) automates container orchestration.

Storage Services

→ Google Cloud Storage provides scalable and durable object storage.
→ Persistent Disk offers high-performance block storage.
→ Nearline and Coldline Storage serve as cost-effective archival options.

Networking Services

→ Virtual Private Cloud (VPC) offers customizable and secure network setups.
→ Cloud Load Balancing distributes traffic globally with high reliability.
→ Cloud CDN accelerates content delivery across multiple regions.

4. IBM Cloud

Compute Services

→ IBM Virtual Servers provide scalable computing environments.
→ IBM Cloud Functions enable serverless and event-driven workloads.
→ Red Hat OpenShift on IBM Cloud manages containerized applications.

Storage Services

→ IBM Cloud Object Storage offers secure, scalable data storage.
→ Block Storage supports mission-critical workloads.
→ File Storage provides network-attached file system solutions.

Networking Services

→ IBM Cloud VPC ensures isolated and secure virtual networks.
→ Load Balancer Service manages application traffic effectively.
→ Direct Link establishes private connections between data centers and IBM Cloud.

5. Oracle Cloud Infrastructure (OCI)

Compute Services

→ OCI Compute delivers both virtual and bare metal instances.
→ Oracle Functions supports scalable serverless execution.
→ Container Engine for Kubernetes manages cloud-native workloads.

Storage Services

→ Object Storage provides durable, cost-efficient data storage.
→ Block Volumes offer high-performance persistent storage.
→ Archive Storage handles long-term, low-cost data retention.

Networking Services

→ Virtual Cloud Network (VCN) creates isolated, secure network environments.
→ Load Balancer enhances reliability and performance of applications.
→ FastConnect provides dedicated private connectivity to Oracle Cloud.

eBook Reference

For a deeper understanding of cloud computing and its core services, check out this ebook:
https://t.co/lfsplLPENi