🚨 GLOBAL CYBERINTELLIGENCE ALERT: WAVE OF GOVERNMENT, ACADEMIC, AND TECH LEAKS 📡📂🔓
A new series of data breaches and critical infrastructure attacks has been detected today, May 4, 2026. This activity involves multiple threat actors who have exfiltrated sensitive information from entities in Portugal, Mexico, Brazil, and Saudi Arabia.
🇵🇹 Government Initiative (https://t.co/lw7wAKODqB) - Portugal
Threat Actor: vicmeow.
Sector: Government.
Impact: Compromise of a Portuguese government initiative focused on promoting public services or policies. Data exfiltration from .gov.pt domains poses a direct risk to the integrity of state information and citizen privacy.
🇲🇽 Universidad Tecnológica de la Sierra... - Mexico
Threat Actor: MagoSpeak.
Sector: Education.
Impact: Intrusion into the systems of a Mexican technological university. This type of attack typically exposes Personally Identifiable Information (PII) belonging to students, faculty, and administrative staff, as well as academic and financial records.
🇧🇷 Brazil Leak - CPFs Linked to Emails/Names - Brazil
Threat Actor: Shinigami.
Sector: Industry.
Impact: Massive leak of CPFs (Brazilian tax identifiers) directly linked to names and email addresses. This database serves as a critical tool for large-scale identity theft and banking fraud within Brazil.
🇸🇦 Oracle Cloud VPS (https://t.co/x4SOGM9uwH) - Saudi Arabia
Threat Actor: watari.
Sector: Technology.
Impact: Compromise of cloud infrastructure (Oracle Cloud VPS) belonging to the entity https://t.co/x4SOGM9uwH. The breach includes access credentials for cPanel/WHM, granting the attacker full administrative control over the organization's server, files, and email accounts. 🛡️ Immediate Response Recommendations
🔒 Administrative Credential Reset: In the case of https://t.co/x4SOGM9uwH, it is imperative to perform a global password reset for cPanel/WHM and review for the creation of unauthorized users.
🔑 Multi-Factor Authentication (MFA): Implement additional security layers across all government and academic portals to mitigate the use of stolen credentials.
Monitor: https://t.co/wk9bZJ2Nli
#CyberSecurity #GlobalLeaks #Portugal #Mexico #Brazil #SaudiArabia #DataBreach #cPanelAccess #VECERT #InfoSec 🌍🛡️⚠️🚨📂
China’s decision to detain or otherwise impede Panama-flagged vessels engaged in lawful trade destabilizes supply chains, raises costs, and erodes confidence in the global trading system. The United States stands with Panama against any retaliatory actions against its sovereignty and will always support our partners in the face of bullying.
https://t.co/PMS0KqLWtF
🦔The FBI issued a FLASH notice identifying 18 popular router models targeted in a large malware operation. Affected models include routers from D-Link, Netgear, TP-Link, and Zyxel. Attackers exploited known vulnerabilities to install malware called AVrecon, turning compromised devices into residential proxies, essentially renting out access to your home network to criminals who use it to hide their identity online. The FBI estimates access to around 369,000 devices has been sold since 2020 across more than 160 countries.
My Take
The detail worth understanding here is what a residential proxy actually means for the people whose routers were compromised. Criminals pay for access to these devices specifically because traffic routed through a home router looks like a regular person browsing the internet rather than a server in a data center. Your router becomes cover for someone else's fraud, cyberattacks, or worse, and you have no idea it's happening because your internet still works fine.
The FBI noted patches were already available for some of the vulnerabilities that were exploited. If your router is on this list, check the manufacturer's site for a firmware update. If it's old enough to no longer receive security patches, it's worth replacing reddgardless of whether it appears here specifically.
Hedgie🤗
Zúrich acaba de inaugurar un túnel de 440 m iluminado con LED para bicicletas, con arte, señalización y estacionamiento para más de 1.200 vehículos, incluso bicicletas eléctricas y ciclomotores, todos a salvo de las inclemencias del tiempo 🚴♂️
🇺🇸 | AHORA: AOL anuncia que cerrará oficialmente su servicio de Internet por discado el 30 de septiembre, lo que marca el final de su funcionamiento durante 34 años.
🇺🇸 | AHORA: Hugging Face lanza un robot humanoide de inteligencia artificial de escritorio de $ 299, "Reachy Mini", con Sequoia Capital, Amazon, Google, NVIDIA, IBM, Intel y otros.
Grey hair isn’t aging.
1 in 4 people go grey before 30.
It’s your cells screaming for help.
Here’s everything you need to know about grey hair (& how to fix it naturally):🧵
Lo que no entiendo es por qué no veo a nadie quejándose de esto. Por qué tenemos que cubrir los que facturamos más a los que facturan menos? El resto ahorra mientras yo les cubro su ahorro?
Hola @saldelasredes. Por qué ustedes ocultan que comuniqué la Declaración con transparencia el día 9 de abril, o sea, hace casi un mes, como se ve en este video. Jugar con el Canal de Panamá para hacer polítiquería es peligroso para el país. No sólo fui al diario La Prensa sino también fui a dos televisoras, y la ACP además hizo un comunicado. Somos transparentes, y rechazamos cualquier tipo de manipulación.