CloudSEK

Hello from cloudsek team Brazil

We welcome Guilherme N. as a Senior Security Consultant at CloudSEK. He'll be serving as a Security Consultant for the LATAM region, delivering client-focused threat intelligence and supporting customers across Latin America by turning findings into actionable insights. Prior to joining CloudSEK, he found Nocera Information Security, serving enterprise and government clients in Brazil, and led penetration testing and AI security research (prompt injection) at Arlequim Technologies. Notably, he bypassed ChatGPT's guardrails during the viral "David Mayer" incident in 2024, and shared his research through TecMundo articles and university talks on red teaming. #welcometotheteam #welcomeonboard #cybersecurity #securityconsulting #cloudster

Every tax season, millions of Indians expect messages about refunds, notices and filing deadlines. Cybercriminals know that too. CloudSEK has uncovered an active campaign where fake Income Tax Department penalty notices are being circulated over WhatsApp and other messaging platforms. Victims are pressured to act within 72 hours, only to end up downloading malware instead of tax documents. But that's just one part of a much larger ecosystem. Our latest threat intelligence report uncovers: • Fake WhatsApp tax notices • Cloned Income Tax e-Filing portals • Credential-stealing malware • Fake refund messages • Fraudulent tax consultants targeting taxpayers Read the full report: https://lnkd.in/gu2qUdmU

A password doesn’t have to be stolen. Sometimes, it’s already waiting on the dark web. CloudSEK’s Xvigil uncovered active login credentials linked to a library management platform, exposed through a massive credential dump shared on a cybercrime forum. The compromised accounts could have provided attackers with access to internal systems, sensitive records, and operational data. This wasn’t just a leaked password. It was a trusted identity waiting to be misused. XVigil continuously monitors the dark web and cybercrime forums to detect exposed credentials early, giving organizations a chance to reset, revoke, and respond before attackers log in. Because the first sign of a breach isn’t always inside your network. Sometimes, it's already being traded online.

It started with a single leaked credential. But what it exposed was far bigger: internal portals, API keys linked to multiple banks, and WhatsApp bot tokens. For threat actors, this is not just leaked data. It is a ready-made map to an organisation’s most critical systems. The consequences could range from unauthorised access and targeted phishing to identity theft and the compromise of sensitive financial infrastructure. CloudSEK’s SVigil detected the exposure through continuous monitoring of the external threat landscape, helping the organisation identify and secure the leaked credentials before they could be exploited. Because major cyber incidents rarely begin with a dramatic breach. Sometimes, they begin with one exposed secret.

France’s cyber threat landscape is changing fast. Underground activity linked to the country has surged more than fourfold in two years, driven by a growing market for stolen credentials, ransomware pressure and geopolitically motivated hacktivism. But the numbers reveal only part of the story. CloudSEK’s latest report examines what is fuelling this rise, which sectors face the greatest exposure and why the threat may remain elevated. Read the full report: https://lnkd.in/gqayG5Y2

The strongest firewalls are still built by communities. At Security BSides Bangalore 2026, researchers, builders, breakers and defenders came together for honest conversations on AI-powered attacks, evolving cyber risks and how security teams must respond. For CloudSEK, supporting BSides goes beyond sponsorship. It is about backing the people, ideas and conversations that keep cybersecurity moving forward. Thank you to everyone who made it such an energetic and insightful gathering.

The teams that work together, play together.  This weekend, Cloudsters swapped laptops for cricket bats and took the field for the CloudSEK Premier League 2026. Four teams, plenty of competitive spirit, big hits, close calls, team huddles and even bigger cheers made CPL a memorable celebration of teamwork beyond the workplace. A huge shout-out to every player, volunteer and organiser who brought the tournament to life. The matches may be over, but the camaraderie continues.

🤝 𝗦𝘁𝗿𝗲𝗻𝗴𝘁𝗵𝗲𝗻𝗶𝗻𝗴 𝗼𝘂𝗿 𝗽𝗮𝗿𝘁𝗻𝗲𝗿 𝗲𝗰𝗼𝘀𝘆𝘀𝘁𝗲𝗺 𝗮𝗰𝗿𝗼𝘀𝘀 𝗟𝗔𝗧𝗔𝗠 🇧🇷 Last week, we brought together our partners in São Paulo, Brazil, for an evening of collaboration, product innovation, and conversations on predicting cyber threats in the AI era. The event showcased two important milestones for our channel community: 🚀 𝗔 𝗹𝗶𝘃𝗲 𝗱𝗲𝗺𝗼 𝗼𝗳 𝘁𝗵𝗲 𝗖𝗹𝗼𝘂𝗱𝗦𝗘𝗞 𝗣𝗮𝗿𝘁𝗻𝗲𝗿 𝗣𝗼𝗿𝘁𝗮𝗹, giving partners a closer look at the tools, resources, campaigns, and enablement designed to help them accelerate customer success and business growth. 🤖 𝗧𝗵𝗲 𝗹𝗮𝘂𝗻𝗰𝗵 𝗼𝗳 𝗔𝗜𝗩𝗶𝗴𝗶𝗹, 𝗖𝗹𝗼𝘂𝗱𝗦𝗘𝗞'𝘀 𝗔𝗜 𝗔𝘁𝘁𝗮𝗰𝗸 𝗦𝘂𝗿𝗳𝗮𝗰𝗲 𝗠𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺, built to help organizations discover, assess, and secure exposed AI assets, models, agents, credentials, and infrastructure before attackers can exploit them. 🌎 𝗧𝗵𝗮𝗻𝗸 𝘆𝗼𝘂 𝘁𝗼 𝗲𝘃𝗲𝗿𝘆𝗼𝗻𝗲 𝘄𝗵𝗼 𝗷𝗼𝗶𝗻𝗲𝗱 𝘂𝘀 and continues to strengthen our growing partner ecosystem across Latin America. Together, we're helping organizations stay ahead of emerging cyber threats in the AI era. 𝗛𝗲𝗿𝗲'𝘀 𝘁𝗼 𝘀𝘁𝗿𝗼𝗻𝗴𝗲𝗿 𝗽𝗮𝗿𝘁𝗻𝗲𝗿𝘀𝗵𝗶𝗽𝘀, 𝗰𝗼𝗻𝘁𝗶𝗻𝘂𝗲𝗱 𝗶𝗻𝗻𝗼𝘃𝗮𝘁𝗶𝗼𝗻, 𝗮𝗻𝗱 𝘀𝗲𝗰𝘂𝗿𝗶𝗻𝗴 𝘁𝗵𝗲 𝗳𝘂𝘁𝘂𝗿𝗲 — 𝘁𝗼𝗴𝗲𝘁𝗵𝗲𝗿. 🥂 Rogério Rodrigues Matias Cunha Jessica Montibeller

Your customers do not always meet fraud on a dark web forum. Sometimes, it reaches them through a simple reward point scam. CloudSEK’s XVigil helped detect fraudulent applications leaking sensitive PII, identify malicious APKs, fake domains, and exposed databases, and enable swift action to restrict access and prevent further misuse. From detection to threat analysis to immediate containment, XVigil gives security teams the intelligence they need before digital fraud becomes business damage. See threats early. Act faster. Protect what matters.