Underground · what matters today

Venta de 20 exploits de día cero para el kernel de Windows

DarkForums seller Jumpa is offering 20 zero-day exploits targeting Windows kernel drivers, in a post dated early October 2026. Kernel-level bugs enable privilege escalation and full host compromise, and once sold they can be weaponized against unpatched government and enterprise endpoints. Windows estate owners should prioritize kernel hardening, exploit detection and rapid patch monitoring.

Venta de herramienta para eludir verificación KYC bancaria

A seller on Cracked.st offers a KYC-bypass and document-forgery toolkit claiming to defeat major identity vendors including Sumsub, Onfido, Persona, Jumio, Idnow, Veriff and Ondato. This directly enables fraudulent account opening and money laundering at banks and fintechs relying on those providers. Defenders should expect forged onboarding attempts and tighten document and liveness checks.

FBI advierte sobre ataques FortiBleed contra VPNs FortiGate

Fortinet FortiGate SSL-VPN (global)

A darknet news repost relays an FBI advisory about ongoing 'FortiBleed' attacks that lock out administrators of FortiGate SSL-VPN appliances, an edge device widely deployed in government, telecom and critical-infrastructure networks. Defenders relying on FortiGate VPNs for remote access should patch urgently, hunt for persistence and rotate credentials. No Latin American victim is named yet, but the campaign is global and directly relevant to AR/LATAM perimeter security.

Comprador busca cuentas bancarias de Chile y Colombia

Bancolombia / Banco de Bogotá / Santander Chile

A carding-forum user is actively seeking bank accounts from Chile and Colombia, explicitly referencing logos from Banco de Bogotá and Santander Chile. This signals ongoing demand for LatAm banking access and credentials that fuels account-takeover and fraud. It is a demand-side solicitation, not a confirmed breach, so treat it as context rather than a fresh compromise.