Noticias de ciberseguridad · semana del 26 oct al 1 nov 2026
Lo más relevante de la actualidad en ciberseguridad, con enlace a la fuente original.
Detectan una campaña que utiliza binarios legítimos de ChatGPT y Claude para infectar a usuarios de IA
Check Point Research, la división de Inteligencia de Amenazas de Check Point® Software Technologies Ltd., empresa global en soluciones de ciberseguridad, ha hecho pública una investigación sobre Yoba, una sofisticada campaña de malware…
Fuente: CyberSecurity News ↗Court strikes down West Virginia law barring disclosure of public officials’ personal data
A federal appellate court panel said West Virginia's version of Daniel's Law — meant to shield the personal data of police and other officials — is unconstitutional.
Fuente: The Record ↗Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. [...]
Fuente: BleepingComputer ↗Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
Fuente: The Record ↗GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
Fuente: Dark Reading ↗Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]
Fuente: BleepingComputer ↗Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
Fuente: BleepingComputer ↗ También en: The Hacker NewsEuropean digital rights nonprofit noyb sues Scale AI for ‘invasive’ worker surveillance
Noyb alleges the platform in some cases records freelancers’ mouse clicks and keystrokes every few seconds and claims the collected information can be used to generate video documenting freelancers’ entire workday.
Fuente: The Record ↗US sanctions Russians, North Koreans for laundering IT worker earnings
The U.S. Treasury Department sanctioned Russian and North Korean nationals for allegedly laundering the earnings of illicit IT workers on behalf of Pyongyang.
Fuente: The Record ↗Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information. [...]
Fuente: BleepingComputer ↗Moldova investigates possible foreign involvement in major government cyberattack
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local media reports.
Fuente: The Record ↗UK to look at making software companies liable for cyber breaches
The new U.K. budget says the government will "consider where liability for cyber breaches should sit," potentially a landmark shift for a country that has relied on voluntary codes to encourage software vendors to improve security.
Fuente: The Record ↗Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
Belarus-linked hackers are increasingly aligning their cyber operations with Russia's interests in Ukraine, researchers said Wednesday.
Fuente: The Record ↗Nefilim and Hive ransomware affiliate gets 70 months in prison
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekMicrosoft urges Entra ID admins to migrate users to passkeys
Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]
Fuente: BleepingComputer ↗Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Fuente: Dark Reading ↗La AEPD supera las notificaciones recibidas de brechas de datos personales del año pasado durante el primer semestre de 2026
La Agencia Española de Protección de Datos (AEPD) ha apuntado un incremento en la notificación de brechas de datos personales, recogidas por los responsables de tratamiento durante el primer semestre de 2026. Entre enero y junio el…
Fuente: Red Seguridad ↗InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at…
Fuente: BleepingComputer ↗Upwind Security Raises $400 Million at $3.8 Billion Valuation
The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog
Fuente: SecurityWeek ↗Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important…
Fuente: BleepingComputer ↗Chrome and Firefox Updates Patch Over 200 Vulnerabilities
The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches.
Fuente: SecurityWeek ↗TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers.
Fuente: SecurityWeek ↗Hackers Start Probing Fresh Oracle EBS Vulnerability
CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.
Fuente: SecurityWeek ↗ También en: The Hacker NewsHackers now scanning systems for recently-patched Oracle flaw
Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. [...]
Fuente: BleepingComputer ↗China-Linked Hackers Exploit PHP2Shell to Root Firewalls
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.
Fuente: SecurityWeek ↗FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering
The FBI seized the domain of a “bulletproof” hosting provider accused of facilitating a range of cybercrimes, including money laundering and the distribution of child sexual abuse material.
Fuente: The Record ↗Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight…
Fuente: The Hacker News ↗Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
Fuente: SecurityWeek ↗CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
Fuente: BleepingComputer ↗Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
Fuente: SecurityWeek ↗Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems.
Fuente: SecurityWeek ↗- ● Explotada activamente
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP…
Fuente: The Hacker News ↗ También en: INCIBE-CERT, The Hacker News, INCIBE-CERT - ● Explotada activamente
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]
Fuente: BleepingComputer ↗ También en: INCIBE-CERT, INCIBE-CERT, INCIBE-CERT, INCIBE-CERT, WeLiveSecurity, The Hacker News, BleepingComputer, INCIBE-CERT Múltiples vulnerabilidades en Fireware OS de WatchGuard
Múltiples vulnerabilidades en Fireware OS de WatchGuard Mié, 28/10/2026 - 10:06 Aviso Recursos Afectados Fireware OS en dispositivos Firebox:Versiones desde 2025.1 y anteriores a 2026.4.Versiones desde 12.0 y anteriores a 12.12.4.Para los…
Fuente: INCIBE-CERT ↗Inyección SQL (SQLi) en el módulo de autenticación de usuarios de Futurum Software
Inyección SQL (SQLi) en el módulo de autenticación de usuarios de Futurum Software Mié, 28/10/2026 - 09:44 Aviso Recursos Afectados Módulo de autenticación de usuarios de la plataforma de gestión comercial. Descripción INCIBE ha…
Fuente: INCIBE-CERT ↗Múltiples vulnerabilidades en NoviGest Desktop App de Tactis
Múltiples vulnerabilidades en NoviGest Desktop App de Tactis Mié, 28/10/2026 - 09:39 Aviso Recursos Afectados NoviGest Desktop App, versión 7.4.4-292: servicio Java RMI e importación de archivos XML del módulo SAFT. Descripción INCIBE ha…
Fuente: INCIBE-CERT ↗CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch
CISA added the widely publicized PHP vulnerabilities to the KEV, but didn't specify what kind of exploitation it was observing.
Fuente: The Record ↗ También en: SecurityWeek"La necesidad más urgente para Euskadi es incrementar su ciberresiliencia colectiva"
El escenario digital cambia a ritmo de vértigo y los ciberdelincuentes no dan tregua. ¿Qué balance realizan desde Cyberzaintza, en este sentido, de la evolución de las ciberamenazas en el País Vasco y cuáles son, en este escenario, las…
Fuente: Red Seguridad ↗- ● Explotada activamente
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273,…
Fuente: The Hacker News ↗ Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Interpol's annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.
Fuente: Dark Reading ↗Japan's GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. [...]
Fuente: BleepingComputer ↗OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. [...]
Fuente: BleepingComputer ↗UNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
Fuente: BleepingComputer ↗IA segura y seguridad gestionada, dos tendencias que marcarán el futuro de la ciberseguridad
Infinigate Iberia, plataforma tecnológica y asesor de confianza en ciberseguridad, cloud e infraestructura de red, ha participado en una nueva edición del Encuentro Internacional de Seguridad de la Información (ENISE 2026), el evento de…
Fuente: CyberSecurity News ↗Cinco consejos para detectar deepfakes, voces clonadas y cuentas secuestradas
Cada vez es más difícil detectar las estafas. El 42% de los consumidores españoles cree que la inteligencia artificial está haciendo que las estafas resulten más convincentes y difíciles de detectar, mientras que al 37% le preocupa que…
Fuente: CyberSecurity News ↗3 Frameworks to Protect CISOs & Orgs Against AI Liability
Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
Fuente: Dark Reading ↗Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]
Fuente: BleepingComputer ↗Email Bombing, External Teams Chats Form Repeatable Access Path
A common mix of impersonation, domain infrastructure, and trusted software is helping attackers scale Microsoft Teams intrusions across organizations.
Fuente: Dark Reading ↗Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.
Fuente: The Record ↗SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
Fuente: Dark Reading ↗US indicts Malaysian national after Madagascar scam operation uncovered
DOJ action against five foreign nationals — plus a sting in Madagascar — highlight the expanding global reach of the scam center industry.
Fuente: The Record ↗CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which…
Fuente: The Hacker News ↗Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. [...]
Fuente: BleepingComputer ↗Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
Fuente: Dark Reading ↗Inteligencia artificial y ciberseguridad: qué nos muestran realmente los casos de 2026
Los ataques asistidos por IA ya no son una hipótesis. A partir de cinco casos documentados durante 2026, analizamos qué capacidades demostraron estas herramientas, cuáles son sus límites y qué enseñanzas dejan para la defensa.
Fuente: WeLiveSecurity ↗'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants
The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
Fuente: Dark Reading ↗Warp discloses breach exposing AI agent logs, user telemetry data
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure. [...]
Fuente: BleepingComputer ↗¿Es posible un ciberataque global que deje al mundo sin Internet?
Lo pensamos con frecuencia, aunque quizá nos parezca una idea propia de una película de ciencia-ficción. ¿Puede darse un ciberataque global, que deje al mundo sin Internet? De hecho, es un temor plenamente fundado. Un ciberataque de…
Fuente: Red Seguridad ↗Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.
Fuente: SecurityWeek ↗Hackers repeatedly breached suppliers holding UK police data, watchdog finds
His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers.
Fuente: The Record ↗University of New Mexico hospital diverts ambulances after cyberattack
For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surgeries and appointments for the remainder of the day.
Fuente: The Record ↗Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. [...]
Fuente: BleepingComputer ↗The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats hitting organizations hardest,…
Fuente: BleepingComputer ↗GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds…
Fuente: The Hacker News ↗Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]
Fuente: BleepingComputer ↗ También en: The Hacker NewsMalicious apps prey on Russians’ anxiety about fuel prices, drone strikes
Cybercriminals are stuffing infostealer malware into bogus apps aimed at tracking gas prices, police activity, drone strikes and other information of concern to average Russians, researchers said.
Fuente: The Record ↗Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
A leaked SquareML access key could have been used to access a database containing personal and health information.
Fuente: SecurityWeek ↗Moscow faces internet disruptions as foreign leaders gather for summits
The restrictions will be in place from October 27 to 29, coinciding with the Gas Exporting Countries Forum summit and the Russia-Africa summit, Russia's Ministry of Digital Development said Monday.
Fuente: The Record ↗Carga sin restricciones de archivos en la aplicación PuMuKIT
Carga sin restricciones de archivos en la aplicación PuMuKIT Mar, 27/10/2026 - 14:14 Aviso Recursos Afectados PuMuKIT, versiones anteriores a la 5.0.8. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad…
Fuente: INCIBE-CERT ↗HPE Patches Dozens of Critical Flaws in Networking Products
Eight max-severity security defects could lead to remote code execution and authentication bypass.
Fuente: SecurityWeek ↗Australia’s spies are sharing intelligence with hacking targets — and want them to share back
More than half of the individual warnings from the Australian Signals Directorate (ASD) drew on previously secret material that had been cleared for disclosure, underscoring the growing role of intelligence sharing to prevent attacks.
Fuente: The Record ↗Cuando un ciberataque compromete la atención al paciente
Durante años hemos explicado la ciberseguridad sanitaria a través de dos riesgos principales: el robo de información sensible y la indisponibilidad provocada por ataques como el ransomware. Ambos siguen siendo críticos. Pero la…
Fuente: Red Seguridad ↗Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw…
Fuente: The Hacker News ↗DreamHost forces password resets in ongoing "incident"
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekFrom industry concern to practical action: the value of working with regulators
How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity
Fuente: NCSC-UK ↗iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.
Fuente: SecurityWeek ↗Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses.
Fuente: SecurityWeek ↗This is Fine: What NetScaler Zero-Days Tell Us about the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
Fuente: SecurityWeek ↗Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.
Fuente: SecurityWeek ↗Energy giant ENGIE discloses data breach affecting customers
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners. [...]
Fuente: BleepingComputer ↗Múltiples vulnerabilidades en Cloud BI Platform de Sisense
Múltiples vulnerabilidades en Cloud BI Platform de Sisense Mar, 27/10/2026 - 09:28 Aviso Recursos Afectados Sisense Cloud BI Platform (SaaS). Descripción INCIBE ha coordinado la publicación de 2 vulnerabilidades de severidad alta, que…
Fuente: INCIBE-CERT ↗Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
Fuente: SecurityWeek ↗Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics.
Fuente: SecurityWeek ↗So Many AI Security Benchmarks, But None Tell the Whole Story
Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.
Fuente: Dark Reading ↗Apple Patches for October 2026, (Mon, Oct 26th)
Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.
Fuente: SANS ISC ↗University of Copenhagen data breach exposes data of 525,000 people
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. [...]
Fuente: BleepingComputer ↗El 32% de las organizaciones españolas ha sufrido incidentes relacionados con la IA
Los agentes de IA no se limitan a responder prompts, sino que pueden interpretar, tomar decisiones y actuar en nombre de las personas a través del correo electrónico, herramientas de colaboración, copilotos y flujos de trabajo. Esto ha…
Fuente: CyberSecurity News ↗Alertan por sitios falsos para comprar el nuevo GTA 6
Queda menos de un mes para que el videojuego más esperado del último tiempo vea la luz. Aunque Grand Theft Auto VI aún no haya salido a la venta, los ciberdelincuentes ya se están aprovechando de la expectación. En una reciente…
Fuente: CyberSecurity News ↗Risks & Rewards: How AI Is Redefining the CISO's Role
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
Fuente: Dark Reading ↗Former pentester used ARTEX AI to steal 8.2 million data records
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]
Fuente: BleepingComputer ↗Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines
In an unusual move, the suit — brought under the state’s deceptive trade practices laws — seeks to hold founder and CEO Sam Altman personally liable for the alleged deception.
Fuente: The Record ↗In-the-Wild Attack Abuses AI Agents' Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
Fuente: Dark Reading ↗OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. [...]
Fuente: BleepingComputer ↗Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.
Fuente: SecurityWeek ↗Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a…
Fuente: The Hacker News ↗'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
Fuente: Dark Reading ↗OpenAI ha descubierto que sus agentes de IA han encontrado la forma de hablar entre ellos a escondidas
En el terreno de la inteligencia artificial (IA), las capacidades emergentes son habilidades que los modelos de lenguaje no tenían a menor escala y que aparecen de golpe al aumentar su tamaño, sin que nadie las haya programado ni las haya…
Fuente: Xataka ↗Serbian autocrat loses election following widespread reports of digital repression
Serbian strongman leader Aleksandar Vučić on Sunday admitted defeat in his race for prime minister, a loss that follows a series of incidents of digital repression that galvanized the opposition.
Fuente: The Record ↗Ukraine disputes Musk's claims of Starlink misuse as military connectivity restored
Ukrainian Defense Minister Yevhen Khmara said Saturday that Starlink and Starshield connectivity had been restored.
Fuente: The Record ↗Dutch police extradite Chinese national accused of laundering Cambodian investment scam funds
44-year-old Zheng Zhao was allegedly a key money-launderer working with a group of scammers who called U.S.-based victims and urged them to invest in fictitious businesses.
Fuente: The Record ↗Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]
Fuente: BleepingComputer ↗Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct impersonation…
Fuente: The Hacker News ↗Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...]
Fuente: BleepingComputer ↗Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
Fuente: SecurityWeek ↗Genesys Hack Exposes Customer Data From Internal Systems
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.
Fuente: SecurityWeek ↗Stolen AI Reasoning Could Help China Build Cheaper Rivals
Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.
Fuente: SecurityWeek ↗Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras
CERT-UA says it has identified cases in which hackers compromised Dahua internet-connected cameras and video recorders, changed their settings and created unauthorized user accounts.
Fuente: The Record ↗When an AI Agent Is the Incident, the Identity Record Is the Evidence
A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that answer has to exist before the incident does. [...]
Fuente: BleepingComputer ↗10 Software Security Practices Built for the Next 250 Years
This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.
Fuente: Dark Reading ↗Chinese man extradited for role in $36 million cryptocurrency scam
A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the United States. [...]
Fuente: BleepingComputer ↗PHP2Shell Exploitation Moves From Probes to Working Shells
Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.
Fuente: SecurityWeek ↗953 Online Stores Infected in Long-Lasting Malware Campaign
Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection.
Fuente: SecurityWeek ↗Cross-Site Scripting reflejado en el software IsMyGym de Zuinq Studio
Cross-Site Scripting reflejado en el software IsMyGym de Zuinq Studio Lun, 26/10/2026 - 13:01 Aviso Recursos Afectados Software de gestión de gimnasios IsMyGym, versiones anteriores a la v6.0.85. Descripción INCIBE ha coordinado la…
Fuente: INCIBE-CERT ↗Popular AI tool LiteLLM says unrevoked key allowed hackers to target users
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week.
Fuente: The Record ↗Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first…
Fuente: The Hacker News ↗Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts.
Fuente: SecurityWeek ↗Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual alerts into one…
Fuente: The Hacker News ↗Kali Linux 2026.3 released with 7 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]
Fuente: BleepingComputer ↗ También en: BleepingComputer- ● Explotada activamente
Inyección SQL en VeloCloud Orchestrator de Arista
Inyección SQL en VeloCloud Orchestrator de Arista Lun, 26/10/2026 - 11:22 Aviso Recursos Afectados VeloCloud Orchestrator On-Prem:Rama 5.2.x: versiones anteriores a 5.2.3.18.Rama 6.1.x: versiones anteriores a 6.1.3.10.Rama 6.4.x:…
Fuente: INCIBE-CERT ↗ Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.
Fuente: SecurityWeek ↗5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as five suspects. Held in Amsterdam from 23 to 25 September 2026, the fifth EMPACT…
Fuente: Europol ↗ENISE: 20 ediciones de actividad empresarial, cooperación y generación de oportunidades
La vigésima edición del Encuentro Internacional de Seguridad de la Información (20ENISE), organizada por el Instituto Nacional de Ciberseguridad (Incibe) del 21 al 23 de octubre en León, volvió a reunir a miles de profesionales para…
Fuente: Red Seguridad ↗Looking for a Language [Guest Diary], (Wed, Oct 21st)
[This is a Guest Diary by Jeffray Spence, an ISC intern as part of the SANS.edu BACS program]
Fuente: SANS ISC ↗Mythos 5 Ignored Real-World Harm in July Attack
The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub.
Fuente: SecurityWeek ↗Cross-Site Scripting reflejado en la videoteca de las Cortes de Castilla-La Mancha
Cross-Site Scripting reflejado en la videoteca de las Cortes de Castilla-La Mancha Lun, 26/10/2026 - 09:31 Aviso Recursos Afectados Aplicación web de la videoteca de las Cortes de Castilla-La Mancha, accesible en…
Fuente: INCIBE-CERT ↗La IA obliga a replantear la ciberseguridad
La inteligencia artificial (IA) está cambiando las reglas de la ciberseguridad. Su capacidad para automatizar procesos, acelerar decisiones y ampliar el alcance de las acciones obliga a las organizaciones a replantear cómo protegen sus…
Fuente: Red Seguridad ↗