Noticias de ciberseguridad · semana del 9 al 15 nov 2026
Lo más relevante de la actualidad en ciberseguridad, con enlace a la fuente original.
Railway breach leads to $740,000 in fraudulent AI charges
Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to…
Fuente: BleepingComputer ↗Identifican una nueva campaña de Lazarus APT que utiliza IA y cifrado poscuántico
Durante el Security Analyst Summit celebrado en Bali (Indonesia), el Global Research and Analysis Team (GReAT) de Kaspersky presentó los resultados de su investigación sobre Operation FlashHole, una campaña de ciberespionaje atribuida al…
Fuente: CyberSecurity News ↗Las tendencias en redes y ciberseguridad que definirán 2027
La rápida adopción de la IA, no solo por parte de organizaciones en todo el mundo, sino también por ciberdelincuentes, está haciendo surgir una amplia gama de retos. Expertos de Infoblox han identificado una serie de tendencias clave que…
Fuente: CyberSecurity News ↗Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month's Patch Tuesday addresses 63 critical flaws -- including…
Fuente: KrebsOnSecurity ↗US Army member arrested in UK over allegations of spying for Russia
The unnamed soldier was arrested by British counterterrorism police “working closely” with U.S. authorities, including the FBI and the military, the Metropolitan Police said in a statement.
Fuente: The Record ↗Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
Forks of the open source Artex framework, along with 45 similar pen-testing tools, remain capable of executing credential attacks and cloud breaches at machine speed across multiple industries.
Fuente: Dark Reading ↗Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
An exploited Outlook vulnerability drew most of the attention in Microsoft's latest Patch Tuesday, which listed 1,093 bugs total.
Fuente: The Record ↗Japanese furniture giant Nitori says hackers stole 37.6M customer records
Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37.62 million customer records. [...]
Fuente: BleepingComputer ↗F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them
New AI Harms Taxonomy traces how harm moves through AI systems, from misleading chatbot answers to compromised autonomous agents, and identifies where defenses can intervene.
Fuente: Dark Reading ↗Checkmarx Appoints Kobi Sivilya as Chief Information Security Officer
Sivilya brings deep cybersecurity and technology leadership to Checkmarx as AI transforms software development.
Fuente: Dark Reading ↗How to Assess OT Incident Response Preparedness
Cloud Range's free 28-question OT Cyber Readiness Assessment helps organizations identify gaps in operational technology (OT) incident response.
Fuente: Dark Reading ↗Microsoft releases Windows 10 KB5131096 extended security update
Microsoft released the Windows 10 KB5131096 extended security update, which includes this month's November 2026 Patch Tuesday fixes and a few bug fixes and changes. [...]
Fuente: BleepingComputer ↗Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that…
Fuente: The Hacker News ↗ También en: BleepingComputerGit Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55…
Fuente: The Hacker News ↗Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability. [...]
Fuente: BleepingComputer ↗ También en: SANS ISC, SecurityWeekSGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that…
Fuente: The Hacker News ↗AI Coding Agents Leak Thousands of Secrets to GitHub
A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.
Fuente: Dark Reading ↗Windows 11 KB5132061 & KB5131087 cumulative updates released
Microsoft has released the Patch Tuesday Windows 11 and cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs, and add new features. [...]
Fuente: BleepingComputer ↗Adobe Patches 110 Vulnerabilities Across 9 Products
Adobe has fixed vulnerabilities in AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content Credentials SDK, and Media Encoder.
Fuente: SecurityWeek ↗Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes Next
SBOM pioneer Allan Friedman joined the SecurityWeek Podcast to discuss why knowing what is inside software is only the beginning, how AI is complicating software supply chain visibility, and what organizations should be doing with SBOM…
Fuente: SecurityWeek ↗Google Widens Gemini 4 Carbon Access After AI Agents Verify Signal Code
Google opened Carbon to paying developers and businesses as DeepMind used agents built on it to prove libsignal security guarantees.
Fuente: SecurityWeek ↗Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [...]
Fuente: BleepingComputer ↗AI company Fireworks says hackers stole data, billing info during October breaches
Fireworks said the incident affected a “limited number of customer accounts” — all of whom were notified of the attack.
Fuente: The Record ↗- ● Explotada activamente
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a…
Fuente: The Hacker News ↗ Binance warns of iOS flaw that could leak crypto wallet secrets
Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, including cryptocurrency seed phrases, secret keys, and login credentials. [...]
Fuente: BleepingComputer ↗Cybercriminals are increasingly infecting regular people with spyware
Cybercriminals are infecting devices on a large scale with spyware, increasingly compromising systems belonging to average people, according to a new report.
Fuente: The Record ↗Ransomware recovery is now a client retention metric
Recovering from ransomware doesn't guarantee an MSP will retain its clients, especially when delays, poor communication, and unexpected costs undermine trust. Kaseya examines how disconnected recovery tools create these problems and how…
Fuente: BleepingComputer ↗Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders
Designed for cybersecurity leaders, this immersive two-day virtual event is your premier destination to discuss, share, and learn innovative risk management and defense strategies defining the modern enterprise.
Fuente: SecurityWeek ↗WhiteMatter Raises $20 Million in Series A Funding
The cybersecurity startup deploys a dedicated guardian agent for every AI agent in an organization’s environment.
Fuente: SecurityWeek ↗SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
Michael LoSapio, Palantir's chief information officer, is officially President Donald Trump's pick to lead the Cybersecurity and Infrastructure Security Agency.
Fuente: The Record ↗Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Hackers used compromised Qubole IAM credentials to steal customer files, secrets, keys, environment variables, and credentials.
Fuente: SecurityWeek ↗AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising fresh concerns for defenders.
Fuente: Dark Reading ↗Russian hackers compromised government email servers to steal NATO, EU correspondence
Russian state-linked hackers have compromised government email servers in Romania and Kazakhstan to secretly intercept messages exchanged with NATO and European Union officials, researchers said.
Fuente: The Record ↗Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
Anthropic says Mythos 5.2 improves vulnerability discovery while showing a lower tendency to escape sandboxes in controlled tests.
Fuente: SecurityWeek ↗La infidelidad de Jensen Huang con la supuesta espía china Alice Huang: qué sabemos (y qué no) de lo que pudo conseguir
Tras la confesión de infidelidad por parte de Jensen Huang, CEO de Nvidia, esta semana las aguas están muy revueltas en torno a la supuesta operación de espionaje contra la compañía que ese mismo romance habría provocado. La consecuencia,…
Fuente: Xataka ↗Hackers now exploit critical Barracuda ESG flaws to gain root access
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges. [...]
Fuente: BleepingComputer ↗Turla hackers use new Ceral malware to spy on govt Exchange servers
The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]
Fuente: BleepingComputer ↗Un ciberataque demuestra que han muerto 400.000 soldados rusos en Ucrania
La guerra de Ucrania ha entrado en su quinto año envuelta en un tupido velo de silencio, ahora roto de forma inesperada por la puerta trasera de un servidor. Un ciberataque contra el Rosstat, el servicio federal de estadística de Rusia,…
Fuente: Red Seguridad ↗N-able takes cloud platform offline after 30+ “zero-days” published
N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that…
Fuente: BleepingComputer ↗ También en: SecurityWeek- ● Explotada activamente
CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog,…
Fuente: The Hacker News ↗ También en: SecurityWeek Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.
Fuente: SecurityWeek ↗ También en: The Hacker News, BleepingComputerIA y ciberseguridad: avanzar sin olvidar los cimientos
La inteligencia artificial (IA) ha irrumpido en la conversación sobre ciberseguridad con una velocidad difícil de ignorar. Modelos cada vez más capaces pueden analizar grandes volúmenes de información, identificar patrones, revisar…
Fuente: Red Seguridad ↗Fireworks AI discloses new breach after cloud provider hack
AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider. [...]
Fuente: BleepingComputer ↗France blames Iranian hackers for supermarket attacks that sparked fires
France has attributed October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires.…
Fuente: BleepingComputer ↗ También en: The Record, SecurityWeekVanderbilt University hit in BYOD ransomware attack, data theft claimed
Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data. [...]
Fuente: BleepingComputer ↗People Are Getting Weird About AI
Dark Reading Confidential Episode 22: You can love AI without being blind to cybersecurity being sacrificed for utility.
Fuente: Dark Reading ↗SEGA newsletter data breach exposes 2.2 million email addresses
Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers. [...]
Fuente: BleepingComputer ↗Los ciberataques a Binance, PHP y otros sectores obligan a reinventar la ciberseguridad
Los recientes episodios en materia de ciberseguridad a nivel global ponen de relieve la vulnerabilidad de las organizaciones frente a amenazas hiperconectadas y automatizadas como el compromiso de credenciales en Binance, las…
Fuente: CyberSecurity News ↗Cuando se descuida la seguridad del IoT, el congelador se convierte en un horno
Por Alex Fray, responsable global de Innovación en Zscaler Tradicionalmente, la ciberseguridad se ha centrado en proteger información como los datos de clientes, los datos financieros o la propiedad intelectual. Sin embargo, actualmente…
Fuente: CyberSecurity News ↗CISA Announces Enhanced Reporting Form for Cyber Incidents
New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.
Fuente: Dark Reading ↗York University breach exposed personal information dating to 2007
York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms. [...]
Fuente: BleepingComputer ↗Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.
Fuente: Dark Reading ↗Amplifon Americas Data Breach Impacts 1.3 Million
Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.
Fuente: SecurityWeek ↗ También en: The RecordLos ciberataques a frigoríficos de supermercados europeos dieron la vuelta al mundo. Francia acaba de señalar a un responsable
Fuente: Xataka ↗Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India
Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and strategic dialogue.
Fuente: Dark Reading ↗Vanderbilt cybersecurity incident impacting campus devices and systems
Vanderbilt University announced a cyberattack, warning students and employees that campus devices and systems may be impacted by the incident.
Fuente: The Record ↗Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Just saw a new (to me) URL in our honeypot data today:
Fuente: SANS ISC ↗Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux
Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.
Fuente: Dark Reading ↗Russian cloud firm Beget rebuilds from scratch after data wiper attack
A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...]
Fuente: BleepingComputer ↗Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware
Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code…
Fuente: The Hacker News ↗PwC's CISO on AI, Robots & What's Next for Security
As AI accelerates change across the enterprise, PwC's James Shira explains why security teams must rethink their approach to risk and adapt their strategies.
Fuente: Dark Reading ↗Binance denies data breach after alleged ShinyHunters claims
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum. [...]
Fuente: BleepingComputer ↗- ● Explotada activamente
Hackers exploit SSHole OpenSSH flaw to breach Linux systems
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...]
Fuente: BleepingComputer ↗ NIST: Solo Shouldn't Mean Less Secure
New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.
Fuente: Dark Reading ↗Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]
Fuente: BleepingComputer ↗ También en: The RecordThe Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC workplace: data literacy,…
Fuente: BleepingComputer ↗FBI agent stole $2.5 million in crypto from hackers under investigation
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...]
Fuente: BleepingComputer ↗Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called…
Fuente: The Hacker News ↗Alleged AI-aided cyberattack exploits assistant interface to breach German web host
Hackers allegedly assisted by AI breached a German web hosting company through a tool designed to allow customers to connect AI assistants to their accounts, the company disclosed.
Fuente: The Record ↗Revolve Puts Data Breach Victim Count at 1.5 Million
Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.
Fuente: SecurityWeek ↗US bans MEXC crypto exchange over sanctions evasion, cybercrime links
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]
Fuente: BleepingComputer ↗Pro-Russian hackers target European officials, offer rewards for personal information
Pro-Russian hackers published the personal information of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web, offering cryptocurrency rewards for additional details about them and their families.
Fuente: The Record ↗Plex2Shell Exploited Against QNAP NAS Users
Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.
Fuente: SecurityWeek ↗Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers
Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.
Fuente: SecurityWeek ↗Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web
Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.
Fuente: SecurityWeek ↗Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH
The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.
Fuente: SecurityWeek ↗El Gobierno lleva a TikTok ante la Fiscalía después de que 'Maldita' haya encontrado más de mil vídeos de abuso sexual infantil
El Ministerio de Juventud e Infancia ha pedido a la Fiscalía que investigue a TikTok después de que Maldita.es haya documentado miles de vídeos y directos de abuso sexual infantil explícito en la plataforma. La ministra Sira Rego ha…
Fuente: Xataka ↗Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the…
Fuente: The Hacker News ↗Over 3 Million People Hit by Frontline Education Data Breach
Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.
Fuente: SecurityWeek ↗Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack
Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.
Fuente: SecurityWeek ↗- ● Explotada activamente
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been…
Fuente: The Hacker News ↗ También en: INCIBE-CERT Cross-site Scripting (XSS) almacenado en Tankuam Places
Cross-site Scripting (XSS) almacenado en Tankuam Places Lun, 09/11/2026 - 09:10 Aviso Recursos Afectados Tankuam Places, versiones anteriores a la apl.00007.00005 (diciembre de 2025). Descripción INCIBE ha coordinado la publicación de una…
Fuente: INCIBE-CERT ↗