Noticias de ciberseguridad · semana del 12 al 18 oct 2026
Lo más relevante de la actualidad en ciberseguridad, con enlace a la fuente original.
North Macedonian police arrest alleged administrator behind OLVX cybercrime market
A raid on a home in a North Macedonia led to the arrest of the suspected administrator of the OLVX market, according to the Balkan country's Interior Ministry along with the FBI.
Fuente: The Record ↗La salud digital condiciona el optimismo de las empresas españolas a un año vista
La preparación tecnológica de las empresas españolas se ha convertido en un factor determinante para explicar cómo afrontan el futuro más inmediato. De acuerdo con la última edición del Estudio de Salud Digital de Zoho, la madurez digital…
Fuente: CyberSecurity News ↗¿A qué hora prefieren atacar los ciberdelincuentes y por qué es más difícil responder?
Las noches, los fines de semana y los festivos son momentos especialmente sensibles para las empresas, ya que suele haber menos personal pendiente de sus sistemas. Los ciberdelincuentes conocen esta circunstancia y pueden aprovechar esas…
Fuente: CyberSecurity News ↗Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Fuente: SecurityWeek ↗ También en: BleepingComputer, The Hacker News, Dark ReadingBrooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains.
Fuente: The Record ↗Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Fuente: Dark Reading ↗FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]
Fuente: BleepingComputer ↗Alguien ha robado 100 millones de dólares en criptomonedas utilizando puertas traseras plantadas de antemano en monederos físicos
Cuando hablamos de proteger nuestras criptomonedas, solemos pensar en contraseñas, estafas por Internet o ataques informáticos. Sin embargo, existe otra dimensión de la seguridad que puede pasar más inadvertida: la integridad del…
Fuente: Xataka ↗Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
Fuente: BleepingComputer ↗ También en: The Hacker NewsLedger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device…
Fuente: BleepingComputer ↗Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A…
Fuente: The Hacker News ↗Spyware manufacturer had access to data harvested by former Polish government, current PM says
Prime Minister Donald Tusk, who ordered the investigation, on Monday called the sprawling spyware operation spearheaded by the country’s previous ruling party “one of the biggest scandals in Polish history since the fall of communism.”
Fuente: The Record ↗AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.
Fuente: SecurityWeek ↗ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
Fuente: SecurityWeek ↗Microsoft fixes VPN issues caused by September Windows updates
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates. [...]
Fuente: BleepingComputer ↗U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime…
Fuente: KrebsOnSecurity ↗Harmonic Security Raises $50 Million for Workforce AI Protection
The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.
Fuente: SecurityWeek ↗The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure…
Fuente: BleepingComputer ↗Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting domains that were part of the infrastructure underlying YAM Store, CoGUI…
Fuente: The Record ↗"Nuestra prioridad número uno en materia digital es la ciberseguridad"
La Región de Murcia fue una de las primeras comunidades autónomas en apostar por un organismo específico para liderar la transformación digital. ¿Qué balance hace de estos primeros años de funcionamiento y cuáles son sus principales…
Fuente: Red Seguridad ↗"La IA no necesita frenos, sino volante y un conductor humano"
AESIA es el organismo público encargado de garantizar el desarrollo y uso de la inteligencia artificial (IA) en España de manera ética, segura y respetuosa con los derechos fundamentales de los ciudadanos. ¿Cuáles son las competencias…
Fuente: Red Seguridad ↗Russian travel booking platform suspends reservations after cyberattack
Customers of Russian travel website Anydayanyway were unable to book tickets or hotel rooms as the company responded to a cyberattack.
Fuente: The Record ↗CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]
Fuente: BleepingComputer ↗CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
Fuente: The Record ↗Congressional probe faults Match Group for failing to rein in dating app scams
The Joint Economic Committee on Tuesday released the results of a year-long investigation into Tinder, Hinge, Match, Plenty of Fish and several other dating sites owned by Match Group.
Fuente: The Record ↗Múltiples vulnerabilidades en productos de GitLab
Múltiples vulnerabilidades en productos de GitLab Mar, 13/10/2026 - 09:38 Aviso Recursos Afectados Para la vulnerabilidad crítica:GitLab Community Edition y Enterprise Edition 19.2, versiones anteriores a 19.2.8;GitLab Community Edition y…
Fuente: INCIBE-CERT ↗ También en: BleepingComputer, The Hacker News, SecurityWeek, INCIBE-CERT, INCIBE-CERT, The Hacker NewsHirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks. [...]
Fuente: BleepingComputer ↗Two arrested as DOJ takes down laptop farms responsible for $3 million in North Korean revenue
More than 40 residences in Texas were the target of a federal operation in September to clamp down on remote worker scams that feed money back to the North Korean regime.
Fuente: The Record ↗ También en: SecurityWeekMicrosoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled. [...]
Fuente: BleepingComputer ↗Un ciberataque apaga vitrinas frigoríficas en supermercados franceses
Un ciberataque permitió manipular a distancia sistemas de refrigeración en supermercados de Francia, elevó temperaturas al activar ciclos de desescarche y obligó a retirar producto. El caso vuelve a señalar un punto débil conocido:…
Fuente: Una al día ↗“Tu lavadora está sujeta a más reglas de seguridad que la IA”: Brad Smith, presidente de Microsoft, pide frenar el Salvaje Oeste de la IA
Brad Smith, presidente de Microsoft, ha prestado declaración recientemente sobre cómo está el panorama de la IA en términos de regulación. La cosa no está para tirar cohetes, y el propio Smith sostiene que hasta un cartón de leche tiene…
Fuente: Xataka ↗Múltiples vulnerabilidades en Integrated Lights-Out de HPE
Múltiples vulnerabilidades en Integrated Lights-Out de HPE Mié, 14/10/2026 - 11:52 Aviso Recursos Afectados HPE Integrated Lights-Out 5 (iLO 5) para servidores HPE Gen10, versiones anteriores a la 3.22;HPE Integrated Lights-Out 6 (iLO 6),…
Fuente: INCIBE-CERT ↗- ● Explotada activamente
Boletín mensual de seguridad de Microsoft de octubre de 2026
Boletín mensual de seguridad de Microsoft de octubre de 2026 Mié, 14/10/2026 - 10:03 Aviso Recursos Afectados Las actualizaciones de seguridad afectan a diferentes versiones y componentes de:Windows;Microsoft Office, incluidos Excel,…
Fuente: INCIBE-CERT ↗ También en: INCIBE-CERT Ciberdefensa a velocidad de máquina ante el impacto de la IA
En abril de este año, Anthropic revolucionó la inteligencia artificial (IA) y la ciberseguridad al vetar el lanzamiento público de Claude Mythos, una IA con capacidad sin precedentes para descubrir y explotar nuevas vulnerabilidades. Para…
Fuente: Red Seguridad ↗Múltiples vulnerabilidades en TSplus Remote Access
Múltiples vulnerabilidades en TSplus Remote Access Mié, 14/10/2026 - 10:34 Aviso Recursos Afectados TSplus Remote Access, versión 19.20.3.10. Se ha confirmado que esta versión está afectada, aunque otras versiones anteriores podrían verse…
Fuente: INCIBE-CERT ↗AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's…
Fuente: The Hacker News ↗Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.
Fuente: SecurityWeek ↗Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
Fuente: SecurityWeek ↗- ● Explotada activamente
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.
Fuente: SecurityWeek ↗ Divulgación no autorizada de información en el servicio web de facturación de Copart
Divulgación no autorizada de información en el servicio web de facturación de Copart Mié, 14/10/2026 - 09:05 Aviso Recursos Afectados Customer invoicing web service. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de…
Fuente: INCIBE-CERT ↗Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
Fuente: SANS ISC ↗SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
Fuente: SecurityWeek ↗Inteligencia aplicada al cumplimiento normativo
El entorno regulatorio en España ha cambiado bastante en poco tiempo, y no precisamente para simplificarse. La transposición de la Directiva NIS2 ha ampliado el número de organizaciones obligadas y ha elevado el listón, con una gestión…
Fuente: Red Seguridad ↗Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.
Fuente: Dark Reading ↗Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten…
Fuente: KrebsOnSecurity ↗Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI.
Fuente: SecurityWeek ↗Saudi national charged with planting spy device in OpenAI executive conference room
Abdulrahman Alfozan, 35, a Saudi national working as an engineer for OpenAI, was charged Tuesday with secretly bugging an executive conference room at one of the company’s buildings in San Francisco.
Fuente: The Record ↗OpenAI engineer arrested for allegedly planting spy device in office
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations. [...]
Fuente: BleepingComputer ↗October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and…
Fuente: SANS ISC ↗ También en: BleepingComputer, Dark ReadingGhostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]
Fuente: BleepingComputer ↗North Korea Phishes Ukrainians for War Intel
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Fuente: Dark Reading ↗Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data…
Fuente: BleepingComputer ↗El 42% de las organizaciones deja alertas de seguridad sin investigar
Los equipos de operaciones de seguridad y de redes detectan los incidentes con mayor eficacia, pero no siempre cuentan con los recursos necesariospara investigarlos y resolverlos. El informe «2026 State of AI Agents in Security and…
Fuente: CyberSecurity News ↗La UPV impulsa VANTAGE, un proyecto de IA multiagente para prevenir ciberataques en Europa
La Universitat Politècnica de València (UPV) ha reunido a un grupo de cerca de 40 profesionales de la ciberseguridad en la primera reunión técnica del consorcio del proyecto europeo VANTAGE, financiado por European Cybersecurity…
Fuente: CyberSecurity News ↗Anthropic Finds Ingredients for Future AI Worms
Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Fuente: Dark Reading ↗“Importancia nacional”: OpenAI encuentra un sofisticado dispositivo de grabación en sus oficinas y el FBI acaba interviniendo
Las empresas que desarrollan inteligencia artificial tienen motivos de sobra para proteger su tecnología. Hablamos de sistemas que requieren enormes inversiones, información confidencial y conocimientos cuyo valor va mucho más allá de los…
Fuente: Xataka ↗FTC: Company netted at least $60 million charging sextortion victims for help it didn’t provide
An Ohio-based company charged individuals thousands of dollars to fight sextortion scams, but the operation itself was fraudulent, according to a Federal Trade Commission complaint.
Fuente: The Record ↗Microsoft releases Windows 10 KB5126657 extended security update
Microsoft released the Windows 10 KB5126657 extended security update, which includes this month's record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes. [...]
Fuente: BleepingComputer ↗Microsoft: Windows 11 23H2 reaches end of support in 30 days
Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month. [...]
Fuente: BleepingComputer ↗ También en: BleepingComputerLos ciberataques se han disparado tanto en Japón que ya se habla de “un estado de emergencia en el ciberespacio”
Cuando reservamos un billete de tren o alquilamos un coche, solemos prestar atención al precio, al horario o a las condiciones del servicio. Mucho menos a lo que ocurre con los datos personales que dejamos durante la operación y a cuántas…
Fuente: Xataka ↗Small AI Models May Soon Be Able to Self-Replicate on IoT Devices, Anthropic Warns
Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.
Fuente: SecurityWeek ↗ También en: The Hacker NewsUK Housing Ombudsman Service investigates 'security incident'
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. [...]
Fuente: BleepingComputer ↗Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited…
Fuente: The Hacker News ↗Windows 11 KB5127648 & KB5126653 cumulative updates released
Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new features. [...]
Fuente: BleepingComputer ↗SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business…
Fuente: The Hacker News ↗Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
Fuente: SecurityWeek ↗Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
Fuente: SecurityWeek ↗TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
Fuente: BleepingComputer ↗Alerta por un falso sitio de Frávega: el sistema de checkouts variables detrás de la estafa
Una campaña que utiliza la imagen de Frávega atrae compradores con ofertas falsas y los deriva a checkouts externos variables diseñados para robar datos de tarjetas.
Fuente: WeLiveSecurity ↗GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having…
Fuente: The Hacker News ↗Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit…
Fuente: The Record ↗West African scam compounds raided, more than 100 suspected trafficking victims ‘rescued’
More than two dozen people were arrested by police in Ghana and Nigeria as part of a U.K.-hosted operation that also included tech companies.
Fuente: The Record ↗Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
Fuente: SecurityWeek ↗Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
Fuente: BleepingComputer ↗North Korean hackers target Ukrainian experts for possible intelligence on Russia's war
North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.
Fuente: The Record ↗El CNI busca 17 perfiles técnicos para anticiparse a las amenazas de la IA y la cuántica: lo que piden dice mucho de cómo se prepara
El Centro Nacional de Inteligencia ha abierto una campaña para incorporar ingenieros y analistas técnicos. Son 17 perfiles, desde el análisis de malware hasta el despliegue de modelos de IA, para los que el CNI está recibiendo currículums…
Fuente: Xataka ↗The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn't enough and how…
Fuente: BleepingComputer ↗SAP warns of maximum severity OAuth2 SSRF security flaw
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]
Fuente: BleepingComputer ↗El riesgo de la IA no va a parecerse a Terminator. Se parecerá a lo que acaba de pasar en 500 supermercados franceses
La noche del domingo al lunes, los frigoríficos de cientos de supermercados franceses se descongelaron a la vez. Alguien activó a distancia los ciclos de desescarche de sus controladores. El ataque alcanzó al menos 300 establecimientos de…
Fuente: Xataka ↗Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
One of St. Petersburg's major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services including online gaming, voice calls and video conferencing.
Fuente: The Record ↗Ledger says hardware implant in cryptocurrency wallets stole recovery phrases
Ledger cryptocurrency wallets sold through a Southeast Asian reseller had an implant allowing outsiders to drain funds, the company said.
Fuente: The Record ↗South African clothing retailer Foschini Group investigating cyberattack on British fashion brands
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.
Fuente: The Record ↗Russian Influence Operation Widely Targeting Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
Fuente: Dark Reading ↗Cyber incident hits grocery stores in US, Netherlands and Belgium
Ahold Delhaize, the Dutch multinational retailer, announced it was taking precautionary measures following a cybersecurity incident, with stores in the U.S., Netherlands and Belgium reportedly impacted.
Fuente: The Record ↗Ciberataque sin precedentes en Francia contra las neveras de los supermercados
Lo ocurrido la noche del 11 al 12 de octubre de 2026 en Francia no tiene precedentes en la historia de la delincuencia digital. Cientos de supermercados de las principales cadenas del país, como Carrefour, Monoprix, Intermarché, La…
Fuente: Red Seguridad ↗XWorm RAT Evolves Into Surveillance Platform
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
Fuente: SecurityWeek ↗AI Turns Familiar Cyberattacks Into a Race Against Time
IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses.
Fuente: SecurityWeek ↗Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via Cryptobilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said it was investigating reports of loss…
Fuente: The Hacker News ↗ También en: BleepingComputer, SecurityWeekLa IA exige una nueva forma de entender la ciberseguridad
La inteligencia artificial (IA) está cambiando nuestra relación con la tecnología. Ya no se limita a responder preguntas o generar contenidos; sino que empieza a comprender mejor nuestro contexto, anticipar necesidades y ayudarnos a…
Fuente: Red Seguridad ↗Retail giant Ahold Delhaize takes systems offline after cyberattack
Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekRefrigeration Controller Hack Spoils Food Across European Supermarkets
A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.
Fuente: SecurityWeek ↗Los ciberataques aumentan un 45% en España durante el primer semestre de 2026
España destaca entre los países con mayor volumen de ciberataques durante el primer semestre de 2026, según un nuevo informe realizado por NTT Data. Durante ese período, el equipo de Cyber Threat Intelligence de la compañía ha…
Fuente: Red Seguridad ↗Cross-Site Scripting en la aplicación web de YouMind
Cross-Site Scripting en la aplicación web de YouMind Mar, 13/10/2026 - 09:39 Aviso Recursos Afectados Aplicación web de YouMind. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad media que afecta a la…
Fuente: INCIBE-CERT ↗Múltiples vulnerabilidades en NonStop Servers de HPE
Múltiples vulnerabilidades en NonStop Servers de HPE Mar, 13/10/2026 - 09:38 Aviso Recursos Afectados HPE NonStop Servers y los componentes de software indicados en el boletín del fabricante.Para la vulnerabilidad crítica está afectado…
Fuente: INCIBE-CERT ↗Desbordamiento de búfer basado en montículo en NX-OS Software de Cisco
Desbordamiento de búfer basado en montículo en NX-OS Software de Cisco Mar, 13/10/2026 - 09:38 Aviso Recursos Afectados Versiones vulnerables de Cisco NX-OS Software en los siguientes productos:Cisco Nexus 3000 Series Switches con la…
Fuente: INCIBE-CERT ↗Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Fuente: Dark Reading ↗Detectan más de 390.000 ataques de phishing a través de plataformas cloud
Los ciberdelincuentes están aprovechando servicios cloud de confianza como Cloudflare Workers, Vercel, Netlify, GitHub Pages o IPFS para lanzar campañas de phishing cada vez más sofisticadas. En los últimos doce meses se han llevado a…
Fuente: CyberSecurity News ↗El 91% de los profesionales de TI y ciberseguridad sufre estrés laboral
Los equipos de TI y ciberseguridad trabajan bajo una presión cada vez mayor. Los ataques son cada vez más sofisticados, las expectativas de recuperación son cada vez mayores y la responsabilidad de la continuidad del negocio recae a…
Fuente: CyberSecurity News ↗Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]
Fuente: BleepingComputer ↗Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
Fuente: Dark Reading ↗Yandex confirms service outage as users lose access to cloud files
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. [...]
Fuente: BleepingComputer ↗Anthropic takes risky AI tests offline after models breach govt sites
Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]
Fuente: BleepingComputer ↗No Identity, No Recovery: Cyber Resilience Starts With IAM
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Fuente: Dark Reading ↗Un ciberataque pone patas arriba los frigoríficos de supermercados franceses y otro incidente afecta a cadenas europeas
Cuando pensamos en ciberseguridad, es fácil imaginar un correo sospechoso, una contraseña robada o una página web que deja de funcionar. Pero los sistemas informáticos también intervienen en actividades que no asociamos de inmediato con…
Fuente: Xataka ↗Cyberattack disrupts refrigeration at hundreds of French supermarkets
A cyberattack overnight Sunday disrupted refrigerators at hundreds of French supermarkets, spoiling fresh food at stores run by some of the country’s largest grocery chains.
Fuente: The Record ↗ También en: BleepingComputerIonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio.
Fuente: SecurityWeek ↗Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based…
Fuente: BleepingComputer ↗Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which…
Fuente: The Hacker News ↗ También en: SecurityWeekGitLab warns of max severity code execution vulnerability
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]
Fuente: BleepingComputer ↗2026-016: Critical Vulnerability in GitLab CE and EE
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated…
Fuente: CERT-EU ↗Passing the Baton: Dark Reading Names New Editor-in-Chief
Fahmida Y Rashid will keep the momentum going as she leads Dark Reading.
Fuente: Dark Reading ↗Help the NCSC understand how organisations approach external attack surface risk
We're looking to hear from people involved in evaluating, selecting or adopting EASM.
Fuente: NCSC-UK ↗Ukraine strikes third Yandex data center, disrupting digital services across Russia
A third Yandex data center in Russia was hit by Ukrainian drones over the weekend, forcing it to shut down and causing further disruptions to cloud services, payments, deliveries and other online services across the country.
Fuente: The Record ↗Canonical Websites Disrupted in Second DDoS Attack This Year
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal
Fuente: SecurityWeek ↗Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty…
Fuente: The Hacker News ↗Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US.
Fuente: SecurityWeek ↗iRhythm Data Breach Impacts at Least 360,000 People
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.
Fuente: SecurityWeek ↗Critical SonicWall Vulnerability Exploited Days After Disclosure
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
Fuente: SecurityWeek ↗ También en: The Hacker NewsRansomware Response Expert Arrested in ShinyHunters FBI Hack Probe
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.
Fuente: SecurityWeek ↗Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default.
Fuente: SecurityWeek ↗CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The…
Fuente: The Hacker News ↗