Cybersecurity developments this week highlighted both systemic risk and the accelerating role of AI in attacks. In Mexico, the government advanced its digital identity initiative with Llave MX and biometric CURP integration, while hotels faced renewed AI-driven campaigns from the RevengeHotels group. In international news, Oneleet’s US$33 million raise underscored demand for proactive compliance platforms, even as breaches at the US Federal Emergency Management Agency (FEMA) and Oracle-linked extortion attempts reminded leaders that critical infrastructure remains highly vulnerable to targeted exploitation.

Ready? This is the Week in Cybersecurity! 

Mexico

Mexico Boosts Digital ID Security With Llave MX, CURP Integration

Mexico is implementing a new cybersecurity shielding strategy to consolidate its national digital identity initiative. The program, which will be supported by the cybersecurity company IQSEC, is centered on the Llave MX platform and the biometric CURP. It aims to securely unify citizen interaction with the government and the private sector, marking a significant step in the country’s digital transformation.

AI Cyberattacks Hit Mexican Hotels, RevengeHotels Resurfaces

A new wave of cyberattacks using AI is compromising the security of the hotel industry in Mexico. The attacks have been linked to the cybercriminal group RevengeHotels, and focused on stealing guest financial information through advanced phishing techniques that breach hotel systems, according to research from Kaspersky.

International

Oneleet Secures US$33 Million to Revolutionize Security Compliance

Oneleet, a security compliance company, has raised US$33 million in a Series A funding round. The company aims to help businesses go beyond the minimum requirements for security compliance by offering a platform that integrates compliance management with security tools. This platform includes features like attack surface monitoring and code scanning to proactively identify and address security vulnerabilities, ensuring that companies are not just compliant, but also secure.

Hacker Steals FEMA and Border Patrol Employee Data

A hacker successfully stole sensitive data concerning employees of both the US FEMA and Customs and Border Protection. The breach, which occurred over the summer, was described as “widespread” and involved the use of compromised login credentials to access FEMA’s systems. The incident has led to the dismissal of two dozen FEMA technology employees and has raised concerns about the security of government networks.

Extortion Emails Claim Oracle Data Theft; Google Investigates

Corporate executives are being targeted with extortion emails claiming a data breach of their Oracle E-Business Suite accounts. While the emails have been linked to the notorious ransomware group Cl0p, researchers at Google and Mandiant are still investigating and have not ruled out the involvement of another financially motivated group, FIN11. Organizations are being urged to take the threats seriously and investigate their systems for any signs of malicious activity.