Noticias de ciberseguridad · semana del 9 al 15 nov 2026
Lo más relevante de la actualidad en ciberseguridad, con enlace a la fuente original.
Cybercriminals are increasingly infecting regular people with spyware
Cybercriminals are infecting devices on a large scale with spyware, increasingly compromising systems belonging to average people, according to a new report.
Fuente: The Record ↗Ransomware recovery is now a client retention metric
Recovering from ransomware doesn't guarantee an MSP will retain its clients, especially when delays, poor communication, and unexpected costs undermine trust. Kaseya examines how disconnected recovery tools create these problems and how…
Fuente: BleepingComputer ↗Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders
Designed for cybersecurity leaders, this immersive two-day virtual event is your premier destination to discuss, share, and learn innovative risk management and defense strategies defining the modern enterprise.
Fuente: SecurityWeek ↗WhiteMatter Raises $20 Million in Series A Funding
The cybersecurity startup deploys a dedicated guardian agent for every AI agent in an organization’s environment.
Fuente: SecurityWeek ↗SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
SAP patched 35 vulnerabilities in its November 2026 security updates, including four maximum-severity issues affecting its NetWeaver, Web Dispatcher, and Gateway software. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
Michael LoSapio, Palantir's chief information officer, is officially President Donald Trump's pick to lead the Cybersecurity and Infrastructure Security Agency.
Fuente: The Record ↗Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Hackers used compromised Qubole IAM credentials to steal customer files, secrets, keys, environment variables, and credentials.
Fuente: SecurityWeek ↗AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising fresh concerns for defenders.
Fuente: Dark Reading ↗Russian hackers compromised government email servers to steal NATO, EU correspondence
Russian state-linked hackers have compromised government email servers in Romania and Kazakhstan to secretly intercept messages exchanged with NATO and European Union officials, researchers said.
Fuente: The Record ↗Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
Anthropic says Mythos 5.2 improves vulnerability discovery while showing a lower tendency to escape sandboxes in controlled tests.
Fuente: SecurityWeek ↗Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today.…
Fuente: The Hacker News ↗Beyond the Alert: The Case for Rich Network Data
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place. And, it’s why once we accept that prevention has its…
Fuente: The Hacker News ↗La infidelidad de Jensen Huang con la supuesta espía china Alice Huang: qué sabemos (y qué no) de lo que pudo conseguir
Tras la confesión de infidelidad por parte de Jensen Huang, CEO de Nvidia, esta semana las aguas están muy revueltas en torno a la supuesta operación de espionaje contra la compañía que ese mismo romance habría provocado. La consecuencia,…
Fuente: Xataka ↗Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access…
Fuente: The Hacker News ↗Hackers now exploit critical Barracuda ESG flaws to gain root access
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges. [...]
Fuente: BleepingComputer ↗Turla hackers use new Ceral malware to spy on govt Exchange servers
The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]
Fuente: BleepingComputer ↗Un ciberataque demuestra que han muerto 400.000 soldados rusos en Ucrania
La guerra de Ucrania ha entrado en su quinto año envuelta en un tupido velo de silencio, ahora roto de forma inesperada por la puerta trasera de un servidor. Un ciberataque contra el Rosstat, el servicio federal de estadística de Rusia,…
Fuente: Red Seguridad ↗N-able takes cloud platform offline after 30+ “zero-days” published
N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that…
Fuente: BleepingComputer ↗ También en: SecurityWeek- ● Explotada activamente
CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog,…
Fuente: The Hacker News ↗ También en: SecurityWeek Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.
Fuente: SecurityWeek ↗ También en: The Hacker News, BleepingComputerIA y ciberseguridad: avanzar sin olvidar los cimientos
La inteligencia artificial (IA) ha irrumpido en la conversación sobre ciberseguridad con una velocidad difícil de ignorar. Modelos cada vez más capaces pueden analizar grandes volúmenes de información, identificar patrones, revisar…
Fuente: Red Seguridad ↗Fireworks AI discloses new breach after cloud provider hack
AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider. [...]
Fuente: BleepingComputer ↗France blames Iranian hackers for supermarket attacks that sparked fires
France has attributed October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires.…
Fuente: BleepingComputer ↗ También en: The Record, SecurityWeekVanderbilt University hit in BYOD ransomware attack, data theft claimed
Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data. [...]
Fuente: BleepingComputer ↗SEGA newsletter data breach exposes 2.2 million email addresses
Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers. [...]
Fuente: BleepingComputer ↗Los ciberataques a Binance, PHP y otros sectores obligan a reinventar la ciberseguridad
Los recientes episodios en materia de ciberseguridad a nivel global ponen de relieve la vulnerabilidad de las organizaciones frente a amenazas hiperconectadas y automatizadas como el compromiso de credenciales en Binance, las…
Fuente: CyberSecurity News ↗Cuando se descuida la seguridad del IoT, el congelador se convierte en un horno
Por Alex Fray, responsable global de Innovación en Zscaler Tradicionalmente, la ciberseguridad se ha centrado en proteger información como los datos de clientes, los datos financieros o la propiedad intelectual. Sin embargo, actualmente…
Fuente: CyberSecurity News ↗CISA Announces Enhanced Reporting Form for Cyber Incidents
New questionnaire captures critical data and information that improves the agency’s ability to assess incidents, identify trends and prioritize response actions.
Fuente: Dark Reading ↗York University breach exposed personal information dating to 2007
York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms. [...]
Fuente: BleepingComputer ↗Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
Last month, Microsoft disclosed a vulnerability in Microsoft Paint, but messaging regarding a patch was unclear.
Fuente: Dark Reading ↗Amplifon Americas Data Breach Impacts 1.3 Million
Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.
Fuente: SecurityWeek ↗ También en: The RecordLos ciberataques a frigoríficos de supermercados europeos dieron la vuelta al mundo. Francia acaba de señalar a un responsable
Fuente: Xataka ↗Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India
Inaugural edition by Informa Markets in India brings together leading researchers, security practitioners and industry decision makers for four days of cutting-edge research, technical exchange and strategic dialogue.
Fuente: Dark Reading ↗Vanderbilt cybersecurity incident impacting campus devices and systems
Vanderbilt University announced a cyberattack, warning students and employees that campus devices and systems may be impacted by the incident.
Fuente: The Record ↗Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Just saw a new (to me) URL in our honeypot data today:
Fuente: SANS ISC ↗Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on Linux
Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.
Fuente: Dark Reading ↗Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that…
Fuente: The Hacker News ↗Russian cloud firm Beget rebuilds from scratch after data wiper attack
A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...]
Fuente: BleepingComputer ↗Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware
Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code…
Fuente: The Hacker News ↗PwC's CISO on AI, Robots & What's Next for Security
As AI accelerates change across the enterprise, PwC's James Shira explains why security teams must rethink their approach to risk and adapt their strategies.
Fuente: Dark Reading ↗Binance denies data breach after alleged ShinyHunters claims
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum. [...]
Fuente: BleepingComputer ↗- ● Explotada activamente
Hackers exploit SSHole OpenSSH flaw to breach Linux systems
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...]
Fuente: BleepingComputer ↗ NIST: Solo Shouldn't Mean Less Secure
New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.
Fuente: Dark Reading ↗Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]
Fuente: BleepingComputer ↗ También en: The RecordThe Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC workplace: data literacy,…
Fuente: BleepingComputer ↗FBI agent stole $2.5 million in crypto from hackers under investigation
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...]
Fuente: BleepingComputer ↗Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called…
Fuente: The Hacker News ↗Alleged AI-aided cyberattack exploits assistant interface to breach German web host
Hackers allegedly assisted by AI breached a German web hosting company through a tool designed to allow customers to connect AI assistants to their accounts, the company disclosed.
Fuente: The Record ↗Revolve Puts Data Breach Victim Count at 1.5 Million
Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.
Fuente: SecurityWeek ↗US bans MEXC crypto exchange over sanctions evasion, cybercrime links
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]
Fuente: BleepingComputer ↗Pro-Russian hackers target European officials, offer rewards for personal information
Pro-Russian hackers published the personal information of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web, offering cryptocurrency rewards for additional details about them and their families.
Fuente: The Record ↗Plex2Shell Exploited Against QNAP NAS Users
Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.
Fuente: SecurityWeek ↗Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers
Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.
Fuente: SecurityWeek ↗Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web
Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.
Fuente: SecurityWeek ↗Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH
The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.
Fuente: SecurityWeek ↗El Gobierno lleva a TikTok ante la Fiscalía después de que 'Maldita' haya encontrado más de mil vídeos de abuso sexual infantil
El Ministerio de Juventud e Infancia ha pedido a la Fiscalía que investigue a TikTok después de que Maldita.es haya documentado miles de vídeos y directos de abuso sexual infantil explícito en la plataforma. La ministra Sira Rego ha…
Fuente: Xataka ↗Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the…
Fuente: The Hacker News ↗Over 3 Million People Hit by Frontline Education Data Breach
Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.
Fuente: SecurityWeek ↗Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack
Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.
Fuente: SecurityWeek ↗- ● Explotada activamente
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been…
Fuente: The Hacker News ↗ También en: INCIBE-CERT Cross-site Scripting (XSS) almacenado en Tankuam Places
Cross-site Scripting (XSS) almacenado en Tankuam Places Lun, 09/11/2026 - 09:10 Aviso Recursos Afectados Tankuam Places, versiones anteriores a la apl.00007.00005 (diciembre de 2025). Descripción INCIBE ha coordinado la publicación de una…
Fuente: INCIBE-CERT ↗