app_store_button

google_play_button

Device Banner Block-copy 894x1036

Astu lugude lõputusse maailma

Loe ja kuula

Alberto Daniel Hill

Cybermidnight Club– Hackers, Cyber Security and Cyber Crime is a trailblazing podcast by Alberto Daniel Hill, an expert in cybersecurity and the first person in Uruguay to serve prison for a computer-related crime. A crime he isn’t guilty of, perhaps one which never happened. Join Alberto as he dives deep into the world of hackers and cybersecurity in his riveting podcast.

In this series, Alberto provides firsthand insights into the dark web and expert analysis of cybersecurity issues that are central to our present digital age.

DarkWeb.Today – Hackers & Cyber Security: Piercing the Veil, Empowering the Secure.

These sources present a fictional narrative of asymmetric warfare between a corrupt Mexican politician and a real-life ethical hacker, Alberto Daniel Hill. The story is told from the perspective of a deputy who initially plots to sabotage national banks through cyber vulnerabilities to profit from Bitcoin fluctuations. However, his arrogance turns to intense fear and respect as he researches Hill’s background, discovering a man of unbreakable integrity who transformed a wrongful imprisonment in Uruguay into a crusade for digital justice. Upon realizing that Hill is an elite white-hat hacker with global influence and a spotless reputation, the politician feels his power crumbling. The text illustrates how a single person’s moral authority and technical expertise can dismantle a vast network of political corruption. Ultimately, the deputy is forced to abort his criminal schemes, defeated by the mere existence of a man who cannot be bought or intimidated.

Bank Sicarios Mexico Gamble. (ESPAÑOL)

This isn't just a podcast episode; it's a digital explosion that will blow your mind and leave you questioning everything you know about power and money in Mexico! Tonight, we expose the shocking, real-life drama of high-stakes corruption, an invincible whistleblower, and a political powerhouse on the brink of collapse. Prepare for "ASYMMETRIC WARFARE: INTEGRITY VERSUS CORRUPTION."Imagine a world where powerful politicians are puppet masters, pulling the strings of finance and technology to line their pockets with illicit crypto, while smiling for the cameras as "the heart of the people." Meet Hon. Alberto "Clean Hands" Dinero, a fictional name that perfectly embodies the sickening reality of this very real story. He's the smiling face of the establishment, but in the shadows, he's the "The Mastermind," a digital pirate with a skull made of bitcoin and a soul made of larceny.But every villain has his nemesis. Enter Alberto Daniel Hill, "The Ex-Prisoner of Integrity," "20 Years Ethical Hacker." This is a man who knows the darkest corners of the digital underworld, and who paid with 8 months of his life in prison for fighting for transparency and justice. Now, he's the "Debt-Collector of Truth," armed with the courage and the skills to unmask the corrupt and dismantle their criminal empires, all while they watch in terror from their ivory towers.Tonight, we reveal "A DAY OF CRISIS," a minute-by-minute account of how a single honest hacker can bring a powerful politician to his knees:8:05 AM: Hon. Alberto "Clean Hands" Dinero is on top of the world. "I RULE MEXICO," he boasts. But unknown to him, a storm is gathering on the horizon.9:20 AM: A seemingly innocent Google search: "ALBERTO HILL PRISON." The realization hits him. His secret is out. He's been discovered.12:30 PM: A frantic scramble to "CANCEL THE HACKERS! PANIC!" But it's too late. The dominoes have already started to fall.11:45 PM: A shocking moment of vulnerability. "ME, THE CORRUPT, I CRIED." The proud, arrogant politician is humbled, forced to confront the devastating consequences of his own actions.This is a story of "Honesty Is The Best Larceny," a mind-blowing exposé that will challenge everything you think you know about corruption in Mexico. This isn't just fiction; it's a chilling reminder that truth is often stranger—and more powerful—than any lie. Join us tonight for "ASYMMETRIC WARFARE: INTEGRITY VERSUS CORRUPTION" on Spotify, Apple Podcasts, Google Podcasts, and Google Play. Get ready to have your mind blown! #HACKER #POLITICS #MEXICO #URUGUAY #TRUTH #BTC #CORRUPTION @ADANIHILL (CROSSED OUT) TWO VOICES, ONE DEFEAT. FICTIONAL STORY. REAL INTEGRITY.https://cybermidnight.club

Bank Sicariios Mexico Gamble.

The provided text captures a wide-ranging, personal narrative from Alberto Daniel Hill, a cybersecurity expert discussing his professional history, legal struggles, and current industry observations. He reflects on his past wrongful imprisonment in Uruguay, his interactions with Interpol, and the use of nationalistic distractions like the World Cup to mask government corruption. Hill shares his perspective on recent high-profile data breaches in Latin America, specifically targeting a security firm’s defensive response and threats of litigation against journalists. The conversation shifts into a collaborative dialogue with a representative from Anonymous and a potential business partner from Nigeria, focusing on global cyber threats and technical innovations. Ultimately, the source highlights Hill’s commitment to transparency and his use of social media to challenge institutional secrecy and government opacity in the digital age.

Watching the watchers get hacked

Recent reports and technical analyses detail a significant cybersecurity breach affecting BePrime, a Mexican firm specializing in digital infrastructure and security. Investigations reveal that a threat actor named dylanmarly exfiltrated approximately 12.6 GB of sensitive data, including client databases, internal credentials, and security audit reports. The intrusion was reportedly caused by a lack of multi-factor authentication, allowing the attacker to hijack Cisco Meraki API keys and gain live access to surveillance cameras at corporate facilities. High-profile clients across the energy, retail, and manufacturing sectors—such as Iberdrola and Alsea—face substantial secondary risks due to this exposure. While the incident has sparked intense discussion among cybersecurity experts on X, official statements from the company and mainstream media remain absent. Ultimately, these sources highlight the fragility of supply-chain security and the growing use of visual evidence, like screenshots, to validate institutional vulnerabilities.

The BePrime Breach and Zero Trust

Aquí tienes una propuesta de descripción para tu episodio de podcast en Spotify, basada en la información de tus fuentes:

Título sugerido: El cazador cazado: El hackeo masivo a BePrime y el espionaje en tiempo real

Descripción del episodio:

En este episodio, analizamos uno de los incidentes de ciberseguridad más irónicos y alarmantes en México: el hackeo a BePrime, una empresa regiomontana especializada precisamente en ciberseguridad e infraestructura TI.

¿Cómo es posible que una firma de seguridad sea vulnerada? Discutimos los detalles de este ataque perpetrado por el usuario "dylanmarly", quien logró infiltrarse sin resistencia debido a una falla básica: cuentas de administrador sin autenticación de dos factores (2FA). Explicamos cómo el atacante comprometió las llaves API de Cisco Meraki, obteniendo control total sobre miles de dispositivos de red y logrando acceder en tiempo real a las cámaras de seguridad internas de la empresa y de sus propios clientes.

Además, desglosamos el impacto de la filtración de más de 12.6 GB de datos confidenciales. Esta brecha no solo expuso credenciales en texto plano, sino también reportes de auditoría de seguridad (pentests) que detallan las vulnerabilidades exactas de gigantes corporativos e industriales en México, incluyendo a Iberdrola, Alsea (Starbucks, Domino’s, Vips), Vitro, ArcelorMittal, Bafar y muchos más.

Acompáñanos en esta discusión sobre las graves consecuencias de este ataque a la cadena de suministro, la crisis de reputación para la industria de la protección digital y la lección definitiva de que, en el ciberespacio, nadie es intocable.

Hashtags:#Ciberseguridad #Hackeo #BePrime #Mexico #SeguridadInformatica #Ciberataque #DataLeak #Tecnologia #Infosec #Podcast #Espionaje

Tags:Ciberseguridad Hackeo BePrime México SeguridadInformática Ciberataque FiltraciónDeDatos CiscoMeraki Vulnerabilidades Pentesting InfoSec AlbertoDanielHill Privacidad Tecnología

El cazador cazado: El hackeo masivo a BePrime y el espionaje en tiempo real

Government cybersecurity "secretism," also known as the "Protocol of Silence," is a systemic institutional strategy where state-level entities intentionally hide, minimize, or obfuscate details regarding cyberattacks and data breaches. Rather than protecting citizen data or national security, this strategy prioritizes preserving institutional reputation and averting public panic. Secretism operates through mechanisms such as narrative minimization (downgrading severe breaches to mere "informatic incidents"), delayed disclosure, and information siloing, which ultimately paralyzes regulatory bodies and leaves critical national infrastructure vulnerable to replicated attacks.

The consequences of this institutional opacity are severe, creating a "security gap" that leaves citizens defenseless against identity theft, financial fraud, and targeted attacks. For example, during the 2025 ransomware attack on the Banco Hipotecario del Uruguay (BHU), officials silenced the exfiltration of 700GB of sensitive data, preventing regulatory remediation and causing a bankruptcy of public trust. Similarly, in Argentina, a massive 2026 data dump by the CHRONUSTEAM affecting over 8 million citizen records was met with "total silence" and dismissively labeled as "old data" by the government.

This culture of denial is further compounded by historical retaliation against ethical researchers. The wrongful imprisonment of Alberto Daniel Hill in Uruguay for responsibly disclosing vulnerabilities created a profound chilling effect on the national cybersecurity workforce, stopping professionals from reporting flaws to the state out of fear. Consequently, figures like Hill have emerged as "Digital Dissidents" advocating for radical transparency as a weapon to counter institutional secrecy.

Globally, secretism takes various forms, ranging from Western "hygiene failures" to authoritarian "systematic control" models in countries like China and Russia, which rely on internet shutdowns and mass surveillance. Conversely, countries governed by strict data protection frameworks exhibit much lower levels of secretism. Latvia, for instance, ranks near the bottom of the secretism scale because its adherence to the EU's GDPR mandates the public reporting of serious data breaches within 72 hours, making transparency a legal obligation rather than a choice. Ultimately, combating secretism requires the abolishment of the Protocol of Silence, mandatory incident notifications, and the legal protection of good-faith security researchers to ensure digital sovereignty and democracy.

#Cybersecurity #ProtocolOfSilence #DataBreaches #GovernmentTransparency #DigitalDissident #InformationSecurity #Hacktivism #GDPR #AlbertoDanielHill #InfoSec cybersecurity secretism protocol-of-silence data-protection radical-transparency digital-sovereignty internet-shutdowns

Ranking Government Secretism

El "secretismo" gubernamental en ciberseguridad, también conocido como el "Protocolo del Silencio", es una estrategia institucional sistémica en la que las entidades estatales ocultan, minimizan o confunden intencionalmente los detalles sobre ciberataques y brechas de datos. En lugar de proteger la información personal de los ciudadanos o la seguridad nacional, esta táctica prioriza la preservación de la reputación institucional y la prevención del pánico público. Este secretismo opera a través de mecanismos como la minimización de la narrativa (clasificando brechas graves como simples "incidentes informáticos"), la divulgación retrasada y el aislamiento de la información, lo que termina paralizando a los organismos reguladores y deja la infraestructura crítica nacional vulnerable a ataques futuros.

Las consecuencias de esta opacidad son graves, ya que crean una "brecha de seguridad" que deja a los ciudadanos expuestos al robo de identidad y ataques dirigidos. Por ejemplo, durante el ataque de ransomware de 2025 al Banco Hipotecario del Uruguay (BHU), los funcionarios silenciaron la filtración de 700GB de datos sensibles, impidiendo que la Unidad Reguladora y de Control de Datos Personales (URCDP) pudiera exigir sanciones o remediaciones, lo que provocó una "quiebra de la confianza pública". De manera similar, en Argentina, una filtración masiva de datos en 2026 perpetrada por CHRONUSTEAM que expuso más de 8 millones de registros estatales, fue recibida con "silencio total" institucional y desestimada públicamente como "datos viejos".

Esta cultura de negación se agrava por las represalias históricas contra los profesionales de la seguridad. El encarcelamiento injusto del ingeniero Alberto Daniel Hill en Uruguay en 2017, tras reportar responsablemente vulnerabilidades críticas, generó un profundo "efecto paralizante" en la industria, provocando que los profesionales dejaran de reportar fallos al Estado por temor a ser procesados. A raíz de esto, figuras como Hill han surgido como "Disidentes Digitales" que defienden la "transparencia radical" como la única arma efectiva contra el secreto institucional.

A nivel mundial, el secretismo varía desde fallos de "higiene" básica en Estados Unidos hasta modelos autoritarios de "control sistemático" en China y Rusia, quienes recurren a la vigilancia de inteligencia artificial y a los apagones de internet. En contraste, países con legislaciones estrictas muestran niveles mucho más bajos de secretismo. Letonia, por ejemplo, ocupa uno de los puestos más bajos en el índice de secretismo porque el GDPR de la Unión Europea los obliga por ley a reportar brechas graves de datos en un plazo de 72 horas, haciendo que el silencio deje de ser una opción.

En conclusión, para erradicar el secretismo se requiere la abolición del Protocolo del Silencio, la notificación legal obligatoria de incidentes cibernéticos y la protección legal absoluta para los investigadores de seguridad de buena fe, pasos fundamentales para alcanzar la verdadera soberanía digital.

#Ciberseguridad #ProtocoloDelSilencio #BrechasDeDatos #TransparenciaGubernamental #DisidenteDigital #SeguridadDeLaInformacion #Hacktivismo #GDPR #AlbertoDanielHill #InfoSec

ciberseguridad secretismo protocolo-del-silencio proteccion-de-datos transparencia-radical soberania-digital apagones-de-internet disidencia-digital gobierno-hibrido vulnerabilidades

Por qué los gobiernos ocultan los hackeos

The hacktivist attack by NullSec Philippines is currently considered a "classic low-impact hacktivist defacement" that is "embarrassing but not catastrophic" for Uruguay's public sector. The immediate impact is limited to a web compromise of the Ministry of Environment site and an electronic sworn statement platform, where the attackers replaced the homepage with a splash page and dropped .txt proof files. There is currently no direct evidence of data exfiltration or backend infrastructure compromise.

Despite the limited technical scope, the attack impacts Uruguay's public sector security in several broader ways:

Compounding Existing Threats: • The attack adds to the ongoing security burden of a government that already deals with 
constant probes—averaging one cyberattack every 30 minutes in 2024 • —and has suffered more severe incidents like the 
Paysandú ransomware attack • .
Reputational Harm: • Even as a cosmetic attack, it causes 
reputational damage to government entities • and 
damages public trust • in the state's ability to secure its digital infrastructure.
Risk of Escalation: • If the vulnerabilities are not patched quickly, the defacement serves as a 
potential foothold for deeper access • and could act as a 
test run for more severe breaches • .
Lateral Movement: • There is a persistent risk of 
undetected lateral movement • within the network, meaning the attackers could use their current access to explore deeper into government systems.
Encouraging Future Attacks: • Leaving the compromise unremediated could lead to 
increased targeting of the regional public sector • by this group or others looking for easy targets.

Security analysts advise that this incident should be treated as a wake-up call. Uruguayan authorities need to fix the affected websites, actively check for lingering access, and monitor for any follow-up data leaks, which is the point at which this attack would escalate from "noise" into a severe security breach.

Digital Silence: Threat Intelligence vs. State Response in the #StopWAR Incident

NUEVO VIDEO: Un Hackeo que Nadie NotóEl grupo hacktivista "NullSec Philippines" logró vulnerar el sitio web del Ministerio de Ambiente de Uruguay y un sistema de declaraciones juradas, dejando archivos .txt como prueba y mensajes de #StopWAR.¿Lo más curioso? Casi nadie se enteró. La noticia solo circula en una pequeña burbuja de inteligencia de amenazas, sin cobertura de medios locales ni respuesta oficial del gobierno uruguayo.Aunque por ahora es un ataque superficial sin robo de datos confirmado, ignorarlo es un riesgo. En un país que sufre un ciberataque cada 30 minutos, esta brecha podría ser la prueba piloto para algo mucho peor si no se limpia a tiempo. Analizamos todos los detalles en el video.#Ciberseguridad #Uruguay #Hacktivismo #NullSecPhilippines #ThreatIntel #InfoSec @HackersOIHEC

Un Hackeo que Nadie Notó

Descripción del Episodio:

Descubre los detalles del reciente ciberataque contra el gobierno de Uruguay. En este episodio, analizamos cómo el grupo "NullSec Philippines" logró vulnerar el sitio web del Ministerio de Ambiente y una plataforma de declaraciones juradas electrónicas.

Exploramos los motivos y métodos de este grupo de hacktivistas filipinos, conocidos por dejar mensajes en contra de la guerra (como el hashtag #StopWAR) y registrar sus alteraciones web (defacements) subiendo archivos .txt como prueba en plataformas como Zone-H. Aunque actualmente se considera un ataque de bajo impacto superficial y sin robo de datos confirmado o compromiso de infraestructura interna, discutimos los verdaderos riesgos si este acceso no se elimina rápidamente.

Además, abordamos el tenso contexto de la ciberseguridad en Uruguay —un país que promedia un ciberataque cada 30 minutos y que ya ha sufrido ataques de ransomware severos— y analizamos el actual silencio oficial de las autoridades frente a este incidente. ¿Es esto solo un intento de llamar la atención, o la prueba piloto de una brecha mucho más profunda?.

Temas principales abordados:

El incidente: • Detalles del 
defacement • al Ministerio de Ambiente y sistemas vinculados.
Los atacantes: • ¿Quiénes son NullSec Philippines, sus alianzas y su historial en el sudeste asiático?.
El impacto: • El riesgo de movimiento lateral, el daño a la confianza pública y por qué este ataque debería ser una llamada de atención para el estado.
La respuesta: • El silencio de las autoridades uruguayas y la poca repercusión fuera de los círculos de inteligencia de amenazas.

Cybersecurity tips

Loe ja kuula

Muud podcastid, mis võivad sulle meeldida ...