Cybersecurity threats are becoming more autonomous, distributed, and operationally disruptive across Latin America. AI-assisted ransomware has reached Mexico, AI agents are reportedly being used against financial institutions, and attacks against supply chains and operational environments show that organizations must increasingly defend not only data, but the systems that keep businesses running.
Ready? This is your Week in Cybersecurity!
AI-Powered Ransomware Reaches Mexico
A ransomware affiliate used an AI coding assistant through MCP to execute actions inside compromised systems, affecting more than two dozen organizations across six countries, including Mexico. The operation also exposed how stolen CI/CD credentials and development secrets can provide the initial foothold for increasingly automated attacks.
Mexico Emerges as Latin America’s QRishing Hotspot
ESET reported that Mexico accounted for nearly 70% of QRishing activity detected across Latin America during the first half of 2026. Phishing and malicious downloaders each represented about one-fifth of detected threats, while legacy vulnerabilities remained a significant source of exploitation.
AI Agents Emerge as an Offensive Capability
South Korean authorities are investigating attacks against financial institutions that reportedly involved AI agents capable of identifying and exploiting vulnerabilities. At least seven banks were affected, with data from 68,000 individuals reportedly stolen, adding financial services to the growing list of sectors facing autonomous cyber risks.
Supply Chains Face Multistage Attacks Across Latin America
Akamai detected a complex intrusion targeting Linux, OpenShift and Windows DMZ workloads in Latin American supply-chain infrastructure. The incident reinforces the importance of segmentation and continuous exposure analysis as organizations connect increasingly complex hybrid environments.
OT Security Moves Closer to the Center of Business Resilience
Claroty found that 58% of cyber-physical system operators experienced a cyberattack affecting operational environments in the past year. The findings position OT security as a business continuity issue, with implications for digital transformation, AI adoption, compliance and cyber insurance.
