Noticias de ciberseguridad · semana del 19 al 25 oct 2026
Lo más relevante de la actualidad en ciberseguridad, con enlace a la fuente original.
PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)
This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP fit that description. By now, you either know about it, or you probably never will, so…
Fuente: SANS ISC ↗Sam Altman: "No encuentro una palabra lo bastante dramática para describir el problema que se nos viene encima"
Con la resaca por la amenaza de los ataques a los sistemas basados en PHP todavía reciente en las cabezas de los responsables de seguridad de las empresas, Sam Altman añade un poco más de incertidumbre a sus vidas señalando que lo vivido…
Fuente: Xataka ↗Quest Diagnostics warns of potential data theft after attack on lab service system
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
Fuente: The Record ↗HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]
Fuente: BleepingComputer ↗Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.
Fuente: SecurityWeek ↗AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack
Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may multiply — not contain — the risk.
Fuente: Dark Reading ↗URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an…
Fuente: The Hacker News ↗Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth…
Fuente: The Hacker News ↗Alerta global por un fallo grave de ciberseguridad en Internet
El miedo a un ciberataque de alcance global es una idea que ronda las cabezas de cientos de miles de personas. Hace apenas unas horas, ese temor parecía haberse confirmado cuando dos vulnerabilidades críticas de PHP han obligado a activar…
Fuente: Red Seguridad ↗China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.
Fuente: SecurityWeek ↗Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
Fuente: BleepingComputer ↗ También en: The Hacker News, SecurityWeekCritical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which…
Fuente: The Hacker News ↗El miedo a la IA nace de nuestra incapacidad para entender cómo funciona. Un científico cree estar a punto de resolverlo
Geoffrey Hinton, Yoshua Bengio, Leo Gao, Stephen Wolfram y Dario Amodei tienen al menos dos cosas en común. Todos ellos, junto a muchos otros científicos, han contribuido a que la inteligencia artificial (IA) alcance el grado de…
Fuente: Xataka ↗11 Million Impacted by Capcom Data Breach
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
Fuente: SecurityWeek ↗Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
Medical laboratory operator Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients. In a Thursday regulatory filing, Quest Diagnostics reported “unauthorized…
Fuente: SecurityWeek ↗Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.
Fuente: SecurityWeek ↗ También en: The Hacker News, BleepingComputer, SecurityWeek, The Hacker News, SecurityWeekMúltiples actualizaciones en productos de Fortinet
Múltiples actualizaciones en productos de Fortinet Vie, 23/10/2026 - 10:02 Aviso Recursos Afectados FortiOS: 8.0.0–8.0.1; 7.6.0–7.6.7; 7.4.0–7.4.12; 7.2.0–7.2.13.FortiManager y FortiAnalyzer: 8.0.0–8.0.1; 7.6.0–7.6.7; 7.4.0–7.4.11;…
Fuente: INCIBE-CERT ↗Múltiples vulnerabilidades en PHP
Múltiples vulnerabilidades en PHP Mar, 20/10/2026 - 15:53 Aviso Recursos Afectados El equipo de seguridad del ecosistema PHP indica que todas las versiones podrían estar afectadas. Las pruebas se han realizado únicamente en las versiones…
Fuente: INCIBE-CERT ↗ También en: The Hacker News, SecurityWeek, SANS ISC, BleepingComputer, Xataka, INCIBE-CERT, Xataka, Xataka, Xataka, Xataka, The Hacker News, INCIBE-CERT, INCIBE-CERT, INCIBE-CERT, INCIBE-CERT, INCIBE-CERT, INCIBE-CERTMúltiples vulnerabilidades en productos de Oracle
Múltiples vulnerabilidades en productos de Oracle Mié, 21/10/2026 - 08:10 Aviso Recursos Afectados El Critical Patch Update de octubre afecta a múltiples familias de productos Oracle, entre ellas Oracle Database, Oracle E-Business Suite,…
Fuente: INCIBE-CERT ↗ También en: INCIBE-CERT, INCIBE-CERT, INCIBE-CERT, INCIBE-CERTNode.js corrige fallos graves de TLS y Brotli en sus ramas 26, 24 y 22
Node.js publicó el 21 de octubre de 2026 versiones de seguridad para 26.x, 24.x y 22.x. El lote corrige vulnerabilidades de severidad alta que afectan a la validación TLS y al decodificador Brotli, además de actualizar dependencias…
Fuente: Una al día ↗Atlassian Patches 75 Flaws in Data Center and Server Products
Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.
Fuente: SecurityWeek ↗Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0…
Fuente: The Hacker News ↗Horizon3 nombra a Keith Poyser director general para EMEA tras registrar un crecimiento de los ingresos en la región
Horizon3 ha nombrado a Keith Poyser director general de la compañía para EMEA (Europa, Oriente Medio y África). Poyser, hasta ahora vicepresidente, se encargará de supervisar la fase de crecimiento y expansión de la compañía en la región.…
Fuente: Red Seguridad ↗Ciberseguridad desde fábrica: qué exige Europa a los sistemas de seguridad
Cada año aumenta el número de dispositivos conectados a una red. El teletrabajo se ha consolidado, sectores tradicionalmente analógicos han acelerado su digitalización y los equipos intercambian cada vez más información entre sí. Este…
Fuente: Red Seguridad ↗Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016.
Fuente: SecurityWeek ↗State Bank of India Suffers a Customer PII Data Leak
Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
Fuente: Dark Reading ↗Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
Fuente: BleepingComputer ↗Apagar el móvil cinco minutos al día: el consejo que recibió Pedro Sánchez en Moncloa para protegerlo de amenazas
Hay pocas cosas aparentemente más sencillas que apagar un móvil. Otra muy distinta es pensar que mantenerlo apagado durante cinco minutos puede ayudar a protegerlo de los virus, especialmente en un momento en el que los ataques contra…
Fuente: Xataka ↗Toronto crime tips org freezes operations after details of data breach come to light
Late Wednesday night the Toronto chapter of Crime Stoppers broke ranks with the national association, revealing a timeline showing what it knew and when along with an announcement that it will pause operations.
Fuente: The Record ↗ConnectWise Suspends Cloud Services in Response to Cyberattack
The services remain unavailable as the company continues remediation and security validation.
Fuente: SecurityWeek ↗ También en: The Record, Dark ReadingWhat We Missed: Feds Lasso Texas Laptop Farms
In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation Lonestar Justice" to Staples' gift card bonanza.
Fuente: Dark Reading ↗Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]
Fuente: BleepingComputer ↗Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
Fuente: Dark Reading ↗LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]
Fuente: BleepingComputer ↗Indian tech company eMudhra announces withdrawal from certificate business after security incident
The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.
Fuente: The Record ↗eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its…
Fuente: The Hacker News ↗ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays.…
Fuente: The Hacker News ↗Los agentes de IA ya se mueven por cuentas bancarias y algunas entidades de EEUU se preparan para lo peor
Agentes, agentes y más agentes. Estos sistemas de inteligencia artificial capaces de ejecutar tareas con cierto grado de autonomía están apareciendo en servicios, aplicaciones y herramientas que utilizamos cada día. Y ahora también están…
Fuente: Xataka ↗Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them,…
Fuente: The Hacker News ↗Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the…
Fuente: The Record ↗Meta on the spot for $25 billion under New Mexico privacy ruling
The Cambridge Analytica data privacy case from a decade ago is still weighing on Meta's finances.
Fuente: The Record ↗ También en: SecurityWeek, The Hacker NewsMicrosoft shares how to fix broken Exchange Online EWS apps
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. [...]
Fuente: BleepingComputer ↗Hacker Conversations: Corey Thuen and the Evil Bit
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
Fuente: SecurityWeek ↗As AI Risks Grow, Insurers Split on Covering the Damage
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
Fuente: Dark Reading ↗Machine speed attacks require machine speed detection and response
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing,…
Fuente: BleepingComputer ↗MythicRatatoskr: el backdoor que utilizó la red Yggdrasil antes de un ataque destructivo de Sandworm
Investigadores de ESET descubrieron MythicRatatoskr, un backdoor hasta ahora desconocido que utiliza la red Yggdrasil para ocultar su infraestructura de C&C y que fue empleado en una intrusión que culminó en un ataque destructivo de…
Fuente: WeLiveSecurity ↗Node.js corrige un fallo en Brotli que abre la puerta a ejecución remota de código
Un fallo de alta severidad en el decodificador Brotli de Node.js puede provocar una escritura fuera de límites y acabar en ejecución remota de código al procesar datos manipulados. Node.js ya ha publicado versiones corregidas para las…
Fuente: Una al día ↗La IA no ha encontrado un fallo nuevo en PHP, sino algo peor: la forma de aprovechar uno viejo
La crisis del lenguaje de programación PHP a la que nos estamos enfrentando no se ha fraguado de repente. La lección más importante que podemos aprender de lo que está sucediendo es que la infraestructura que sostiene tanto internet como…
Fuente: Xataka ↗Cybercrime crackdown across Africa leads to 1,462 arrests, $105 million seized
More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown on the gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol said.
Fuente: The Record ↗PHP2Shell Exploitation Started Days Before Patches
Initial attempts were observed on October 17, and mass activity began shortly after patches were released.
Fuente: SecurityWeek ↗ También en: BleepingComputerIndurex Raises $8 Million to Expand Industrial Cybersecurity Platform
The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
Fuente: SecurityWeek ↗Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
Fuente: SecurityWeek ↗Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.
Fuente: SecurityWeek ↗South Carolina officials offer assistance after state capital hit with cyberattack
The systems impacted by the attack include the MyColaSC platform that citizens use to pay utility bills, report non-emergency issues and access other city services.
Fuente: The Record ↗GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]
Fuente: BleepingComputer ↗Splunk, SolarWinds Release Fresh Security Updates
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
Fuente: SecurityWeek ↗Lo que ha sucedido con PHP nos avisa: tenemos un problema grave con el software antiguo que sostiene internet
La infraestructura que sostiene internet está envejeciendo. Es natural que sea así, pero lo que hace apenas tres años no habríamos podido anticipar es que la llegada de los modelos de inteligencia artificial (IA) de frontera iba a…
Fuente: Xataka ↗Cisco Patches 34 Vulnerabilities Across Multiple Products
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.
Fuente: SecurityWeek ↗5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as five suspects. Held in Amsterdam from 23 to 25 September 2026, the fifth EMPACT…
Fuente: Europol ↗2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU recommends…
Fuente: CERT-EU ↗Authorities disrupt nearly 11,000 cybercrime networks in Africa
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. [...]
Fuente: BleepingComputer ↗Vulnerabilidad en Java SE y GraalVM de Oracle
Vulnerabilidad en Java SE y GraalVM de Oracle Jue, 22/10/2026 - 09:58 Aviso Recursos Afectados Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5 y 27.0.1.Oracle GraalVM for JDK: 17.0.21 y 21.0.13.Oracle GraalVM…
Fuente: INCIBE-CERT ↗Múltiples vulnerabilidades en GitLab CE/EE de GitLab
Múltiples vulnerabilidades en GitLab CE/EE de GitLab Jue, 22/10/2026 - 09:58 Aviso Recursos Afectados GitLab Community Edition (CE) y Enterprise Edition (EE). Los rangos afectados varían según el CVE; el fallo crítico CVE-2026-110264…
Fuente: INCIBE-CERT ↗Christophe Canguilhem será el nuevo presidente y CEO de Stormshield a partir de 2027
Stormshield ha anunciado la incorporación de Christophe Canguilhem como nuevo presidente y CEO de la compañía, sucediendo a Pierre-Yves Hentzen. El relevo, que será oficial el próximo 1 de enero de 2027, tiene como objetivo garantizar una…
Fuente: Red Seguridad ↗Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.
Fuente: SecurityWeek ↗UAE Transitions 50% of Gov't Services to Agentic AI
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
Fuente: Dark Reading ↗Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. [...]
Fuente: BleepingComputer ↗Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]
Fuente: BleepingComputer ↗TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
Fuente: Dark Reading ↗IA segura y seguridad gestionada, dos tendencias que marcarán el futuro de la ciberseguridad
Infinigate Iberia, plataforma tecnológica y asesor de confianza en ciberseguridad, cloud e infraestructura de red, participa en una nueva edición del Encuentro Internacional de Seguridad de la Información (ENISE 2026), el evento de…
Fuente: CyberSecurity News ↗Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. [...]
Fuente: BleepingComputer ↗Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
Fuente: Dark Reading ↗Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
Fuente: Dark Reading ↗Tech trio launches $10 million initiative to help under-resourced utilities bolster cybersecurity
Up to 500 under-resourced utilities will receive support in order to bolster their cybersecurity through a private sector initiative launched this week.
Fuente: The Record ↗PHP publica parches de urgencia por dos fallos críticos PHP2Shell con intentos de explotación
PHP ha lanzado parches de urgencia para dos vulnerabilidades críticas agrupadas como PHP2Shell que permiten ejecución remota de código sin autenticación. Ya se han detectado intentos de explotación activa, así que la recomendación es…
Fuente: Una al día ↗'PHP2Shell' Bugs Signal Red Alert for Security Industry
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
Fuente: Dark Reading ↗Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for…
Fuente: The Hacker News ↗Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure
Threat actors have been observed delivering cryptocurrency miners and proxy software.
Fuente: SecurityWeek ↗ También en: BleepingComputerCómo saber si una web está afectada por la vulnerabilidad de PHP con la herramienta que OpenAI ha publicado
Las dos vulnerabilidades críticas detectadas en PHP han llevado a administradores y organizaciones de distintos países a revisar servidores y aplicar actualizaciones con urgencia. Algunas webs incluso han optado por desconectarse…
Fuente: Xataka ↗Democrat lawmakers say Russia is aiming to undermine party ahead of midterms
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure or tamper directly with votes.
Fuente: The Record ↗PHP says AI review of critical bugs first sparked alarm in August, but signs first surfaced in 2024
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it scrambled to post information earlier than…
Fuente: The Record ↗Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
Fuente: SecurityWeek ↗PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications.
Fuente: SecurityWeek ↗OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
Fuente: Dark Reading ↗OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks. The AI company said the…
Fuente: The Hacker News ↗OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so. [...]
Fuente: BleepingComputer ↗¿Es una estafa? Cómo identificar un anuncio fraudulento antes de hacer clic
Los anuncios fraudulentos pueden aparecer incluso en plataformas confiables. Estas son las señales para detectarlos antes de hacer clic
Fuente: WeLiveSecurity ↗Un vecino de Puente Genil denuncia ante la Policía Local una de las primeras estafas en España con el prefijo 400
Un vecino de Puente Genil, Córdoba, ha denunciado un intento de estafa telefónica realizado desde un número que empieza por +400. Este nuevo prefijo, una medida del Ministerio para la Transformación Digital, tiene como objetivo reunir a…
Fuente: Xataka ↗Optiv Launches CyberBOT Cybersecurity Awareness Training Program
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
Fuente: Dark Reading ↗Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
Fuente: Dark Reading ↗Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over…
Fuente: KrebsOnSecurity ↗Un falso concurso de baile permite a los ciberdelincuentes utilizar tu cuenta de WhatsApp
Un falso concurso de baile permite a los ciberdelincuentes utilizar tu cuenta de WhatsApp Mié, 21/10/2026 - 17:02 Aviso Recursos Afectados Personas que hayan recibido un mensaje de WhatsApp solicitando su voto en un supuesto concurso de…
Fuente: INCIBE ↗‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets
Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold.
Fuente: SecurityWeek ↗High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.
Fuente: SecurityWeek ↗Russian hackers teamed up to wipe data at Ukrainian grain firm
The Russian state-linked hacking group Sandworm collaborated with another threat actor to carry out a destructive cyberattack against a Ukrainian grain logistics company last year, researchers said Thursday.
Fuente: The Record ↗Hundreds of websites taken offline as concern grows over two PHP vulnerabilities
The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.
Fuente: The Record ↗ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and…
Fuente: BleepingComputer ↗PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only…
Fuente: The Hacker News ↗Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security
Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform.
Fuente: SecurityWeek ↗Decades-Old Windows Utility Powers Modern ClickFix Attack
The attack uses malicious Google search results related to Amazon and leverages the 'finger' utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
Fuente: Dark Reading ↗Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.
Fuente: SecurityWeek ↗OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.
Fuente: SecurityWeek ↗Microsoft PowerToys adds CursorHide, Button Lock mouse tools
Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. [...]
Fuente: BleepingComputer ↗Critical security issue affecting PHP
Fuente: NCSC-UK ↗Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
Fuente: SecurityWeek ↗China Defends DeepSeek After US Ban of Its AI From Government Systems
The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems.
Fuente: SecurityWeek ↗La estafa de la niña bailarina en WhatsApp: Prevención y soluciones
En la última semana, circula por España de manera viral, a través de la red WhatsApp, una estafa que pide votar en un concurso a una niña bailarina de ballet clásico llamada Sophie o Eliska. De hecho, se trata de una campaña de phishing…
Fuente: Red Seguridad ↗Microsoft says October updates didn’t actually fix VPN issues
Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. [...]
Fuente: BleepingComputer ↗Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.
Fuente: SecurityWeek ↗CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. [...]
Fuente: BleepingComputer ↗Ciberseguridad en la videovigilancia: marco normativo en España
Durante décadas, la seguridad física y la ciberseguridad transitaron caminos paralelos, con escasas intersecciones. La primera se ocupaba de barreras, cámaras analógicas y vigilantes; la segunda, de firewalls, cifrado y antivirus en el…
Fuente: Red Seguridad ↗- ● Explotada activamente
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively…
Fuente: The Hacker News ↗ Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader.
Fuente: SecurityWeek ↗Talent4Cyber reúne a 440 estudiantes universitarios para poner a prueba sus habilidades en ciberseguridad
La tercera edición del Attack & Defense Hackaton universitario Talent4Cyber fue todo un éxito. La iniciativa, organizada por el Mando Conjunto del Ciberespacio (MCCE), el 14 y 15 de octubre, reunió un total de 440 participantes repartidos…
Fuente: Red Seguridad ↗Accenture, Dragos, SANS Launch $10M Initiative to Defend Small US Utilities
The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training.
Fuente: SecurityWeek ↗Stolen UpdraftCentral keys used to backdoor WordPress sites
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. [...]
Fuente: BleepingComputer ↗Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.
Fuente: Dark Reading ↗ También en: BleepingComputerLa IA nos obliga a redefinir la concienciación en ciberseguridad
por Chris Bevil, director de Ciberresiliencia e Inteligencia Artificial de Commvault Durante años, hemos enseñado a la gente a buscar las señales: una palabra mal escrita, una dirección de correo extraña, un enlace sospechoso. La IA está…
Fuente: CyberSecurity News ↗El 47% de las empresas ve los ataques a proveedores como un riesgo clave
Las empresas mantienen una relación cada vez más estrecha con proveedores tecnológicos, plataformas cloud, empresas de servicios, fabricantes, distribuidores y otros terceros. Muchos de estos actores tienen acceso a sus sistemas,…
Fuente: CyberSecurity News ↗PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. [...]
Fuente: BleepingComputer ↗2026-018: Critical Vulnerabilities in PHP
On 20 October 2026, the PHP foundation announced an upcoming security release addressing two critical vulnerabilities in PHP that could lead to remote code execution, according to other leaks. At this time, no technical details have been…
Fuente: CERT-EU ↗FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.
Fuente: The Record ↗Zeabur shutting down after second security breach in two months
Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable…
Fuente: BleepingComputer ↗Menos de 100 caracteres, 1.200 webs atacadas y más de 100 comprometidas: así está cambiando la IA la ciberseguridad
Durante años hemos asumido que la ciberseguridad era una carrera de fondo: alguien encontraba una vulnerabilidad, otro intentaba cerrarla y, entre medias, hacían falta tiempo, conocimientos y bastante trabajo humano para convertir ese…
Fuente: Xataka ↗California warns all public school students of data stolen in contractor breach
The CDE released multiple statements over the last week warning the state’s students that assessment contractor Educational Testing Service (ETS) suffered a months-long data breach.
Fuente: The Record ↗Ex-OpenAI Engineer Held Over Secret Recorder, Saudi Ties
A judge ordered that Abdulrahman Alfozan be detained after he was arrested earlier this month for allegedly bugging an OpenAI conference room.
Fuente: Dark Reading ↗23andMe successor settles with California for $6 million over cybersecurity failings
California Attorney General Rob Bonta announced a settlement under which 23andMe's successor will pay $6 million to resolve allegations that the company did not properly protect customers' data before a 2023 breach.
Fuente: The Record ↗OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code
OpenAI confirmed that its newer models are much better at writing and migrating software in older programming languages. [...]
Fuente: BleepingComputer ↗Nigerian national given 8-year sentence for tax business hacks
A Nigerian national who worked with a group to hack tax prep businesses and conduct millions of dollars in fraud using customer data was sentenced this week.
Fuente: The Record ↗Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so…
Fuente: The Hacker News ↗La Guardia Civil compra por 2,5 millones un sistema para acceder de forma remota a móviles Android y iPhone
La Guardia Civil ha comprado una herramienta diseñada para registrar de forma remota los móviles de las personas que se encuentren bajo investigación, sin necesidad de incautar los dispositivos. El contrato, publicado en el BOE, ofrece…
Fuente: Xataka ↗US Agencies Detail Incident Response Practices for Rogue AI Agents
NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.
Fuente: SecurityWeek ↗Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as…
Fuente: The Hacker News ↗Close Identity Gaps in Software Development Before Unleashing AI
Artificial Intelligence is complicating security in the software development lifecycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead.
Fuente: Dark Reading ↗EU cyber law won’t force fixes for fridge controllers hit in French attack
The EU’s Cyber Resilience Act that took effect last month only requires companies to fix vulnerabilities and issue free updates during a product's support period, which manufacturers define.
Fuente: The Record ↗Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins.
Fuente: Dark Reading ↗DHS bans DeepSeek products across US federal civilian agencies
The U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government systems. [...]
Fuente: BleepingComputer ↗AOMEI yet to notify customers after hackers hijacked its software updates
In an email, the Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting the software to download malware for minutes at…
Fuente: The Record ↗Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet. The…
Fuente: The Hacker News ↗Anti-Putin messages disrupt nationwide school assessments in Russia
A pro-Ukraine group that says it operates within Russia took responsibility for anti-Putin messages appearing on an education assessment platform. Authorities said they had restored systems.
Fuente: The Record ↗CJIS v6.1 Compliance: 5 Practical Priorities for Agencies
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging,…
Fuente: BleepingComputer ↗The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
Fuente: SecurityWeek ↗Hacker gets 8 years for stealing $3.3 million from taxpayers
A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US tax preparation businesses since 2019. [...]
Fuente: BleepingComputer ↗Ahold Delhaize: Cyberattack affects services across US and Europe
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekAI Platform Cairn Abused to Hack Over 100 Organizations
At least three threat actors have been abusing Cairn for persistent access and financial theft.
Fuente: SecurityWeek ↗Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say
Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest.
Fuente: SecurityWeek ↗Introducing a new AI chapter in the NCSC research problem book
A revolution is underway at the intersection of AI and cyber security.
Fuente: NCSC-UK ↗OVHcloud CLI releases backdoored on GitHub to steal developer secrets
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. [...]
Fuente: BleepingComputer ↗Microsoft Targets Rogue AI Agents With Dynamic Permissions, Risk Scoring
Microsoft says companies should treat AI agents as insiders, and is adding controls that grant access per task and tighten it as an agent’s risk rises.
Fuente: SecurityWeek ↗Windows Server 2025 gets support for quick machine recovery
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update. [...]
Fuente: BleepingComputer ↗La Guardia Civil lanza su primer ciberpuesto
La Guardia Civil ha puesto en marcha su primer ciberpuesto nacional, emplazado en la localidad de Baracaldo, Vizcaya. Esta nueva unidad descentralizada, supeditada a la Cibercomandancia, funcionará para todo el territorio español con el…
Fuente: Red Seguridad ↗Hackers Steal 1.8 Million Records From Nikkei
The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.
Fuente: SecurityWeek ↗Defense contractors in two NATO allies hacked in recent Russia-linked campaign
The Russian group known as APT28 and Fancy Bear used a recently documented backdoor to dwell in the networks of two defense contractors and a law enforcement agency in two NATO allies, researchers said.
Fuente: The Record ↗Revolut outage disrupts online banking operations worldwide
Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today. [...]
Fuente: BleepingComputer ↗970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.
Fuente: SecurityWeek ↗Múltiples vulnerabilidades en FacturaScripts
Múltiples vulnerabilidades en FacturaScripts Mar, 20/10/2026 - 09:14 Aviso Recursos Afectados FacturaScripts:2025.61 Descripción INCIBE ha coordinado la publicación de 2 vulnerabilidades de severidad media, que afectan a FacturaScripts,…
Fuente: INCIBE-CERT ↗Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
Fuente: SecurityWeek ↗ También en: The Hacker NewsNikkei discloses third data breach in a month, 1.8M records exposed
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]
Fuente: BleepingComputer ↗Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
Fuente: Dark Reading ↗Las pesadillas de la IA que se han hecho realidad en 2026… justo a tiempo para Halloween
Malware capaz de modificar su propio código para evitar ser detectado, sistemas que encuentran vulnerabilidades en cuestión de minutos o ciberataques que se ejecutan prácticamente solos. Lo que hace apenas unos años parecía propio de una…
Fuente: CyberSecurity News ↗La IA obliga a replantear la seguridad de los centros de datos
Los expertos de /fdata y /fsafe, las unidades de centros de datos y de ciberseguridad de fibratel, advierten de que el modelo tradicional basado en proteger por separado redes, sistemas, accesos físicos y operación resulta insuficiente,…
Fuente: CyberSecurity News ↗'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
Fuente: Dark Reading ↗Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not revealing enough information.
Fuente: The Record ↗Hackers hijack AOMEI update servers to secretly spread malware
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the…
Fuente: BleepingComputer ↗ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
Fuente: Dark Reading ↗El mercado de la ciberseguridad sufrió un desplome del 26% en EEUU. Una especialidad fue a contracorriente: creció un 268%
Imaginemos una empresa que comienza a incorporar inteligencia artificial a sus servicios. Además de proteger sus sistemas habituales, ahora debe prestar atención a los datos que utilizan sus modelos, las personas que pueden acceder a…
Fuente: Xataka ↗Bullhorn takes staffing platform offline to contain cyberattack
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]
Fuente: BleepingComputer ↗Two more Serbian opposition figures targeted with spyware, researchers say
A phone belonging to the rector of the University of Belgrade was discovered to have been infected with Pegasus spyware, the latest in a series of such discoveries in the lead-up to Serbia's national elections.
Fuente: The Record ↗Qué hacer cuando una empresa informa una brecha de datos, pero aporta poca información
Las notificaciones de brechas de datos ofrecen cada vez menos información a las víctimas. Lo que una organización omite puede influir en las medidas que tomes después.
Fuente: WeLiveSecurity ↗Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the…
Fuente: The Hacker News ↗OpenCode hack exposes API keys amid AI distillation attacks
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]
Fuente: BleepingComputer ↗Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
Fuente: The Record ↗Russian social media giant VK faces disruptions after data center drone strike
The disruptions began Sunday, when users complained of difficulties loading news feeds, playing music and accessing other features of VK's platforms.
Fuente: The Record ↗Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
Fuente: SecurityWeek ↗Microsoft fixes game, app crashes caused by recent Windows update
Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). [...]
Fuente: BleepingComputer ↗OnlyFans Copyright Takedowns Expose Compromised Websites
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what…
Fuente: Dark Reading ↗Inside the Underground Market for Know Your Client Services
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to…
Fuente: BleepingComputer ↗The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
Fuente: Dark Reading ↗F5 releases out-of-band patches for critical NGINX vulnerabilities
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems. [...]
Fuente: BleepingComputer ↗Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations…
Fuente: KrebsOnSecurity ↗GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake…
Fuente: The Hacker News ↗50 muertos o 1.000 millones de dólares en daños: el listón que Anthropic quiere fijar para que el Gobierno pueda frenar un modelo de IA
Anthropic ha estado presentando entre bambalinas un borrador de proyecto de ley sobre la seguridad de los modelos de IA más punteros en el Capitolio, según el medio Politico. Desde luego no es frecuente que un laboratorio de IA intente…
Fuente: Xataka ↗Microsoft fixes classic Outlook bug that hid Copilot buttons
Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users. [...]
Fuente: BleepingComputer ↗ITE obtiene la certificación ISO/IEC 42001, primera norma internacional sobre sistemas de gestión de la IA
La compañía Integración Tecnológica Empresarial (ITE) ha recibido la certificación ISO/IEC 42001, el primer estándar internacional que establece los requisitos para implantar, mantener y mejorar de forma continua un sistema de gestión de…
Fuente: Red Seguridad ↗Japón declara un estado de emergencia en ciberseguridad
Japón ha cruzado un umbral histórico. En octubre de 2026, la Sede de la Estrategia Nacional de Ciberseguridad nipona declaró oficialmente un estado de emergencia cibernética, medida sin precedentes en el país. La decisión llega tras…
Fuente: Red Seguridad ↗One Compromised Login Exposed Millions of California Students’ Records
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
Fuente: SecurityWeek ↗From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, Email-to-Case and Web-to-Case turn inbound…
Fuente: The Hacker News ↗Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers.
Fuente: The Record ↗Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Fuente: SecurityWeek ↗Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude…
Fuente: The Hacker News ↗MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
Fuente: SecurityWeek ↗Microsoft: October Windows Server updates break Exchange sign-in, mail flow
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems. [...]
Fuente: BleepingComputer ↗Anthropic Acquires Confidential AI Startup Opaque Systems
Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.
Fuente: SecurityWeek ↗- ● Explotada activamente
Validación incorrecta del origen en Remote Support de BeyondTrust
Validación incorrecta del origen en Remote Support de BeyondTrust Lun, 19/10/2026 - 09:27 Aviso Recursos Afectados BeyondTrust Remote Support, todas las versiones hasta la 26.2.3, inclusive. Descripción BeyondTrust ha publicado una…
Fuente: INCIBE-CERT ↗ La IA obliga al sector salud a reforzar su ciberseguridad
La adopción acelerada de herramientas de inteligencia artificial (IA) está transformando los modelos de negocio, la atención sanitaria y la gestión de la seguridad. Sin embargo, la expansión de estas tecnologías también está ampliando la…
Fuente: Red Seguridad ↗Ausencia de verificación de integridad en MobaXterm de Mobatek
Ausencia de verificación de integridad en MobaXterm de Mobatek Lun, 19/10/2026 - 09:03 Aviso Recursos Afectados MobaXterm Personal Edition (Portable), versión 26.4 GA, de Mobatek. Descripción INCIBE ha coordinado la publicación de una…
Fuente: INCIBE-CERT ↗