π¨ GLOBAL CYBERINTELLIGENCE ALERT: WAVE OF GOVERNMENT, ACADEMIC, AND TECH LEAKS π‘ππ
A new series of data breaches and critical infrastructure attacks has been detected today, May 4, 2026. This activity involves multiple threat actors who have exfiltrated sensitive information from entities in Portugal, Mexico, Brazil, and Saudi Arabia.
π΅πΉ Government Initiative (
pnc.gov.pt) - Portugal
Threat Actor: vicmeow.
Sector: Government.
Impact: Compromise of a Portuguese government initiative focused on promoting public services or policies. Data exfiltration from .gov.pt domains poses a direct risk to the integrity of state information and citizen privacy.
π²π½ Universidad TecnolΓ³gica de la Sierra... - Mexico
Threat Actor: MagoSpeak.
Sector: Education.
Impact: Intrusion into the systems of a Mexican technological university. This type of attack typically exposes Personally Identifiable Information (PII) belonging to students, faculty, and administrative staff, as well as academic and financial records.
π§π· Brazil Leak - CPFs Linked to Emails/Names - Brazil
Threat Actor: Shinigami.
Sector: Industry.
Impact: Massive leak of CPFs (Brazilian tax identifiers) directly linked to names and email addresses. This database serves as a critical tool for large-scale identity theft and banking fraud within Brazil.
πΈπ¦ Oracle Cloud VPS (
demco.sa) - Saudi Arabia
Threat Actor: watari.
Sector: Technology.
Impact: Compromise of cloud infrastructure (Oracle Cloud VPS) belonging to the entity
demco.sa. The breach includes access credentials for cPanel/WHM, granting the attacker full administrative control over the organization's server, files, and email accounts. π‘οΈ Immediate Response Recommendations
π Administrative Credential Reset: In the case of
demco.sa, it is imperative to perform a global password reset for cPanel/WHM and review for the creation of unauthorized users.
π Multi-Factor Authentication (MFA): Implement additional security layers across all government and academic portals to mitigate the use of stolen credentials.
Monitor:
analyzer.vecert.io
#CyberSecurity #GlobalLeaks #Portugal #Mexico #Brazil #SaudiArabia #DataBreach #cPanelAccess #VECERT #InfoSec ππ‘οΈβ οΈπ¨π