Noticias de ciberseguridad · semana del 12 al 18 oct 2026
Lo más relevante de la actualidad en ciberseguridad, con enlace a la fuente original.
Casi 9 de cada 10 ciberdelitos judicializados en España son estafas mientras la IA dificulta su detención
Durante años, identificar un intento de fraude digital parecía responder a unas reglas relativamente sencillas: desconfiar de remitentes desconocidos, buscar errores ortográficos, evitar enlaces extraños o sospechar de mensajes poco…
Fuente: CyberSecurity News ↗Stoïk alerta de un aumento del 46% de los ciberataques al comercio tras el incidente en Francia
El ciberataque que durante la noche del 11 al 12 de octubre afectó a los sistemas de refrigeración de supermercados en Francia ha acabado por trascender el ámbito empresarial y ha llegado hasta el Parlamento. Ante los diputados, el…
Fuente: CyberSecurity News ↗Federal bankruptcy courts dealing with outages after contractor cyberattack
The incident, which involved a government contractor, has halted all production of bankruptcy notices.
Fuente: The Record ↗AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Fuente: Dark Reading ↗Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A…
Fuente: The Hacker News ↗ También en: BleepingComputerAI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's…
Fuente: The Hacker News ↗ También en: The Hacker NewsAndroid gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
Fuente: BleepingComputer ↗Zero-click spyware infecting devices through online ads, researchers say
Powerful zero-click spyware is infected devices worldwide through targeted ads, new research shows — an alarming development in the spread of surveillance technology.
Fuente: The Record ↗ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small…
Fuente: The Hacker News ↗Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
Fuente: BleepingComputer ↗Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
Fuente: SecurityWeek ↗Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
Fuente: BleepingComputer ↗Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand
This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.
Fuente: SecurityWeek ↗¿Por qué los ciberdelincuentes atacan a los influencers?
Los ciberdelincuentes tienen en el punto de mira las cuentas de los influencers, porque les interesan los grandes públicos que confían casi a ojos cerrados en los creadores de contenidos digitales. Al tomar el control de un perfil con…
Fuente: Red Seguridad ↗OpenAI encontró un micrófono envuelto en papel higiénico, ahora afronta un caso de espionaje que apunta a Arabia Saudí
OpenAI lleva unos meses movidos en lo que a cuestiones de seguridad y privacidad se refiere. Este año se han encontrado algunos modelos de la startup de IA husmeando donde no debían, pero quizá el caso más sonado era el de ese que se coló…
Fuente: Xataka ↗Vulnerability Management Isn't About the Score — It's About How It Applies to You
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Fuente: Dark Reading ↗Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will take time. Therefore, regardless of the nature of the threats that may emerge,…
Fuente: Europol ↗UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. [...]
Fuente: BleepingComputer ↗ También en: The RecordUK Legal Aid Agency Hack Scope Widens After Forensic Review
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.
Fuente: SecurityWeek ↗Is AI pentesting as good as a human pentester?
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and…
Fuente: BleepingComputer ↗Suspected Kazakhstan-linked hackers target governments across former Soviet states
A roughly 2-year-old cyber-espionage campaign against Central Asian states appears to originate in Kazakhstan, researchers said.
Fuente: The Record ↗Microsoft: Windows 11 23H2 reaches end of support in 30 days
Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month. [...]
Fuente: BleepingComputer ↗ También en: BleepingComputer, BleepingComputerSupermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.
Fuente: SecurityWeek ↗Using TLS to protect data
Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.
Fuente: NCSC-UK ↗Post-quantum updates to our TLS guidance
The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.
Fuente: NCSC-UK ↗Police arrests 95 suspects in international CSAM crackdown action
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups. [...]
Fuente: BleepingComputer ↗CikaBika Bot RAT Uses Discord for C&C
Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.
Fuente: SecurityWeek ↗Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekCenterPoint Energy Data Breach Impacts 1 Million Texans
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
Fuente: SecurityWeek ↗Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
Fuente: BleepingComputer ↗ También en: The Hacker News, SecurityWeek, CERT-EUMicrosoft fixes VPN issues caused by September Windows updates
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates. [...]
Fuente: BleepingComputer ↗ También en: BleepingComputerCISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope.
Fuente: SecurityWeek ↗Omisión de autenticación en Stela de Diaple Networking
Omisión de autenticación en Stela de Diaple Networking Jue, 15/10/2026 - 09:59 Aviso Recursos Afectados Stela, versiones anteriores a 1.60.1. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad crítica que…
Fuente: INCIBE-CERT ↗Múltiples vulnerabilidades en productos de Juniper Networks
Múltiples vulnerabilidades en productos de Juniper Networks Jue, 15/10/2026 - 09:40 Aviso Recursos Afectados Las siguientes versiones de Junos OS:anteriores a 23.2R2-S7.7;23.4 anteriores a 23.4R2-S8.13;24.2 anteriores a 24.2R2-S5.5;24.4…
Fuente: INCIBE-CERT ↗- ● Explotada activamente
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
Fuente: BleepingComputer ↗ También en: The Hacker News, SecurityWeek, INCIBE-CERT Múltiples vulnerabilidades en productos de GitLab
Múltiples vulnerabilidades en productos de GitLab Mar, 13/10/2026 - 09:38 Aviso Recursos Afectados Para la vulnerabilidad crítica:GitLab Community Edition y Enterprise Edition 19.2, versiones anteriores a 19.2.8;GitLab Community Edition y…
Fuente: INCIBE-CERT ↗ También en: BleepingComputer, The Hacker News, SecurityWeek, INCIBE-CERT, INCIBE-CERT, The Hacker News, Dark Reading, INCIBE-CERTLangflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows.…
Fuente: The Hacker News ↗EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.
Fuente: Dark Reading ↗- ● Explotada activamente
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are…
Fuente: The Hacker News ↗ Pasan los años y el FBI sigue tumbando redes de norcoreanos presentándose y obteniendo trabajos en remoto dentro de EEUU
Aunque es una tendencia cada vez más a la baja, contratar a programadores en remoto todavía es una práctica muy habitual en las grandes empresas. De ese modo, las empresas pueden contratar al mejor talento, sin tener la limitación de…
Fuente: Xataka ↗La ciberseguridad del transporte y la logística depende de toda la cadena de valor
La ciberseguridad en transporte y logística ya no se puede medir solo por la fortaleza de los sistemas propios. La operación depende de terceros, de datos que circulan entre empresas y de aplicaciones aparentemente menores. Si una de esas…
Fuente: Red Seguridad ↗Una IA permite a la policía localizar tu casa con una sola foto del interior
Graylark Technologies, la empresa detrás de Raven (anteriormente conocida como GeoSpy), ha añadido una función que permite a los que usan su herramienta subir una foto del interior de una casa y conseguir la dirección de donde fue tomada.…
Fuente: Xataka ↗Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
Fuente: SANS ISC ↗Ukraine says Elon Musk's Starshield service restored after restrictions disrupted drone missions
The Ukrainian military can again use SpaceX’s Starshield satellite service on the move, a Defense Ministry source told Recorded Future News on Thursday, days after sudden restrictions disrupted drone missions along the front line.
Fuente: The Record ↗North Macedonian police arrest alleged administrator behind OLVX cybercrime market
A raid on a home in a North Macedonia led to the arrest of the suspected administrator of the OLVX market, according to the Balkan country's Interior Ministry along with the FBI.
Fuente: The Record ↗La salud digital condiciona el optimismo de las empresas españolas a un año vista
La preparación tecnológica de las empresas españolas se ha convertido en un factor determinante para explicar cómo afrontan el futuro más inmediato. De acuerdo con la última edición del Estudio de Salud Digital de Zoho, la madurez digital…
Fuente: CyberSecurity News ↗¿A qué hora prefieren atacar los ciberdelincuentes y por qué es más difícil responder?
Las noches, los fines de semana y los festivos son momentos especialmente sensibles para las empresas, ya que suele haber menos personal pendiente de sus sistemas. Los ciberdelincuentes conocen esta circunstancia y pueden aprovechar esas…
Fuente: CyberSecurity News ↗Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
Fuente: SecurityWeek ↗ También en: BleepingComputer, The Hacker News, Dark ReadingBrooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains.
Fuente: The Record ↗Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Fuente: Dark Reading ↗FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]
Fuente: BleepingComputer ↗Alguien ha robado 100 millones de dólares en criptomonedas utilizando puertas traseras plantadas de antemano en monederos físicos
Cuando hablamos de proteger nuestras criptomonedas, solemos pensar en contraseñas, estafas por Internet o ataques informáticos. Sin embargo, existe otra dimensión de la seguridad que puede pasar más inadvertida: la integridad del…
Fuente: Xataka ↗Cómo los estafadores se aprovechan de los propietarios de tiempos compartidos
Los delincuentes utilizan falsas ofertas de compra, servicios fraudulentos para cancelar contratos y esquemas de recuperación de dinero para engañar a quienes buscan deshacerse de un tiempo compartido.
Fuente: WeLiveSecurity ↗Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device…
Fuente: BleepingComputer ↗Spyware manufacturer had access to data harvested by former Polish government, current PM says
Prime Minister Donald Tusk, who ordered the investigation, on Monday called the sprawling spyware operation spearheaded by the country’s previous ruling party “one of the biggest scandals in Polish history since the fall of communism.”
Fuente: The Record ↗AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.
Fuente: SecurityWeek ↗ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
Fuente: SecurityWeek ↗U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime…
Fuente: KrebsOnSecurity ↗Harmonic Security Raises $50 Million for Workforce AI Protection
The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.
Fuente: SecurityWeek ↗The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure…
Fuente: BleepingComputer ↗Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting domains that were part of the infrastructure underlying YAM Store, CoGUI…
Fuente: The Record ↗"Nuestra prioridad número uno en materia digital es la ciberseguridad"
La Región de Murcia fue una de las primeras comunidades autónomas en apostar por un organismo específico para liderar la transformación digital. ¿Qué balance hace de estos primeros años de funcionamiento y cuáles son sus principales…
Fuente: Red Seguridad ↗"La IA no necesita frenos, sino volante y un conductor humano"
AESIA es el organismo público encargado de garantizar el desarrollo y uso de la inteligencia artificial (IA) en España de manera ética, segura y respetuosa con los derechos fundamentales de los ciudadanos. ¿Cuáles son las competencias…
Fuente: Red Seguridad ↗Russian travel booking platform suspends reservations after cyberattack
Customers of Russian travel website Anydayanyway were unable to book tickets or hotel rooms as the company responded to a cyberattack.
Fuente: The Record ↗CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]
Fuente: BleepingComputer ↗CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
Fuente: The Record ↗Congressional probe faults Match Group for failing to rein in dating app scams
The Joint Economic Committee on Tuesday released the results of a year-long investigation into Tinder, Hinge, Match, Plenty of Fish and several other dating sites owned by Match Group.
Fuente: The Record ↗- ● Explotada activamente
Los ciberdelincuentes están utilizando cuentas de WhatsApp en iPhone sin actualizar para pedir dinero a sus contactos
Los ciberdelincuentes están utilizando cuentas de WhatsApp en iPhone sin actualizar para pedir dinero a sus contactos Mié, 14/10/2026 - 13:07 Aviso Recursos Afectados Usuarios de iPhone con iOS 16 o anteriores, que no tienen actualizado…
Fuente: INCIBE ↗ Two arrested as DOJ takes down laptop farms responsible for $3 million in North Korean revenue
More than 40 residences in Texas were the target of a federal operation in September to clamp down on remote worker scams that feed money back to the North Korean regime.
Fuente: The Record ↗ También en: SecurityWeekMicrosoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled. [...]
Fuente: BleepingComputer ↗Un ciberataque apaga vitrinas frigoríficas en supermercados franceses
Un ciberataque permitió manipular a distancia sistemas de refrigeración en supermercados de Francia, elevó temperaturas al activar ciclos de desescarche y obligó a retirar producto. El caso vuelve a señalar un punto débil conocido:…
Fuente: Una al día ↗“Tu lavadora está sujeta a más reglas de seguridad que la IA”: Brad Smith, presidente de Microsoft, pide frenar el Salvaje Oeste de la IA
Brad Smith, presidente de Microsoft, ha prestado declaración recientemente sobre cómo está el panorama de la IA en términos de regulación. La cosa no está para tirar cohetes, y el propio Smith sostiene que hasta un cartón de leche tiene…
Fuente: Xataka ↗Múltiples vulnerabilidades en Integrated Lights-Out de HPE
Múltiples vulnerabilidades en Integrated Lights-Out de HPE Mié, 14/10/2026 - 11:52 Aviso Recursos Afectados HPE Integrated Lights-Out 5 (iLO 5) para servidores HPE Gen10, versiones anteriores a la 3.22;HPE Integrated Lights-Out 6 (iLO 6),…
Fuente: INCIBE-CERT ↗- ● Explotada activamente
Boletín mensual de seguridad de Microsoft de octubre de 2026
Boletín mensual de seguridad de Microsoft de octubre de 2026 Mié, 14/10/2026 - 10:03 Aviso Recursos Afectados Las actualizaciones de seguridad afectan a diferentes versiones y componentes de:Windows;Microsoft Office, incluidos Excel,…
Fuente: INCIBE-CERT ↗ También en: INCIBE-CERT Ciberdefensa a velocidad de máquina ante el impacto de la IA
En abril de este año, Anthropic revolucionó la inteligencia artificial (IA) y la ciberseguridad al vetar el lanzamiento público de Claude Mythos, una IA con capacidad sin precedentes para descubrir y explotar nuevas vulnerabilidades. Para…
Fuente: Red Seguridad ↗Múltiples vulnerabilidades en TSplus Remote Access
Múltiples vulnerabilidades en TSplus Remote Access Mié, 14/10/2026 - 10:34 Aviso Recursos Afectados TSplus Remote Access, versión 19.20.3.10. Se ha confirmado que esta versión está afectada, aunque otras versiones anteriores podrían verse…
Fuente: INCIBE-CERT ↗Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.
Fuente: SecurityWeek ↗Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
Fuente: SecurityWeek ↗- ● Explotada activamente
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.
Fuente: SecurityWeek ↗ Divulgación no autorizada de información en el servicio web de facturación de Copart
Divulgación no autorizada de información en el servicio web de facturación de Copart Mié, 14/10/2026 - 09:05 Aviso Recursos Afectados Customer invoicing web service. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de…
Fuente: INCIBE-CERT ↗Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
Fuente: SANS ISC ↗SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
Fuente: SecurityWeek ↗Inteligencia aplicada al cumplimiento normativo
El entorno regulatorio en España ha cambiado bastante en poco tiempo, y no precisamente para simplificarse. La transposición de la Directiva NIS2 ha ampliado el número de organizaciones obligadas y ha elevado el listón, con una gestión…
Fuente: Red Seguridad ↗Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.
Fuente: Dark Reading ↗Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten…
Fuente: KrebsOnSecurity ↗Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI.
Fuente: SecurityWeek ↗Saudi national charged with planting spy device in OpenAI executive conference room
Abdulrahman Alfozan, 35, a Saudi national working as an engineer for OpenAI, was charged Tuesday with secretly bugging an executive conference room at one of the company’s buildings in San Francisco.
Fuente: The Record ↗OpenAI engineer arrested for allegedly planting spy device in office
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations. [...]
Fuente: BleepingComputer ↗October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and…
Fuente: SANS ISC ↗ También en: BleepingComputer, Dark ReadingGhostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]
Fuente: BleepingComputer ↗North Korea Phishes Ukrainians for War Intel
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Fuente: Dark Reading ↗Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data…
Fuente: BleepingComputer ↗El 42% de las organizaciones deja alertas de seguridad sin investigar
Los equipos de operaciones de seguridad y de redes detectan los incidentes con mayor eficacia, pero no siempre cuentan con los recursos necesariospara investigarlos y resolverlos. El informe «2026 State of AI Agents in Security and…
Fuente: CyberSecurity News ↗La UPV impulsa VANTAGE, un proyecto de IA multiagente para prevenir ciberataques en Europa
La Universitat Politècnica de València (UPV) ha reunido a un grupo de cerca de 40 profesionales de la ciberseguridad en la primera reunión técnica del consorcio del proyecto europeo VANTAGE, financiado por European Cybersecurity…
Fuente: CyberSecurity News ↗Anthropic Finds Ingredients for Future AI Worms
Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Fuente: Dark Reading ↗“Importancia nacional”: OpenAI encuentra un sofisticado dispositivo de grabación en sus oficinas y el FBI acaba interviniendo
Las empresas que desarrollan inteligencia artificial tienen motivos de sobra para proteger su tecnología. Hablamos de sistemas que requieren enormes inversiones, información confidencial y conocimientos cuyo valor va mucho más allá de los…
Fuente: Xataka ↗FTC: Company netted at least $60 million charging sextortion victims for help it didn’t provide
An Ohio-based company charged individuals thousands of dollars to fight sextortion scams, but the operation itself was fraudulent, according to a Federal Trade Commission complaint.
Fuente: The Record ↗Microsoft releases Windows 10 KB5126657 extended security update
Microsoft released the Windows 10 KB5126657 extended security update, which includes this month's record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes. [...]
Fuente: BleepingComputer ↗Los ciberataques se han disparado tanto en Japón que ya se habla de “un estado de emergencia en el ciberespacio”
Cuando reservamos un billete de tren o alquilamos un coche, solemos prestar atención al precio, al horario o a las condiciones del servicio. Mucho menos a lo que ocurre con los datos personales que dejamos durante la operación y a cuántas…
Fuente: Xataka ↗Small AI Models May Soon Be Able to Self-Replicate on IoT Devices, Anthropic Warns
Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.
Fuente: SecurityWeek ↗ También en: The Hacker NewsUK Housing Ombudsman Service investigates 'security incident'
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. [...]
Fuente: BleepingComputer ↗Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited…
Fuente: The Hacker News ↗Windows 11 KB5127648 & KB5126653 cumulative updates released
Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new features. [...]
Fuente: BleepingComputer ↗SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business…
Fuente: The Hacker News ↗Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
Fuente: SecurityWeek ↗Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
Fuente: SecurityWeek ↗TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
Fuente: BleepingComputer ↗Alerta por un falso sitio de Frávega: el sistema de checkouts variables detrás de la estafa
Una campaña que utiliza la imagen de Frávega atrae compradores con ofertas falsas y los deriva a checkouts externos variables diseñados para robar datos de tarjetas.
Fuente: WeLiveSecurity ↗GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having…
Fuente: The Hacker News ↗Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit…
Fuente: The Record ↗West African scam compounds raided, more than 100 suspected trafficking victims ‘rescued’
More than two dozen people were arrested by police in Ghana and Nigeria as part of a U.K.-hosted operation that also included tech companies.
Fuente: The Record ↗Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
Fuente: SecurityWeek ↗Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
Fuente: BleepingComputer ↗North Korean hackers target Ukrainian experts for possible intelligence on Russia's war
North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.
Fuente: The Record ↗El CNI busca 17 perfiles técnicos para anticiparse a las amenazas de la IA y la cuántica: lo que piden dice mucho de cómo se prepara
El Centro Nacional de Inteligencia ha abierto una campaña para incorporar ingenieros y analistas técnicos. Son 17 perfiles, desde el análisis de malware hasta el despliegue de modelos de IA, para los que el CNI está recibiendo currículums…
Fuente: Xataka ↗The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn't enough and how…
Fuente: BleepingComputer ↗SAP warns of maximum severity OAuth2 SSRF security flaw
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]
Fuente: BleepingComputer ↗El riesgo de la IA no va a parecerse a Terminator. Se parecerá a lo que acaba de pasar en 500 supermercados franceses
La noche del domingo al lunes, los frigoríficos de cientos de supermercados franceses se descongelaron a la vez. Alguien activó a distancia los ciclos de desescarche de sus controladores. El ataque alcanzó al menos 300 establecimientos de…
Fuente: Xataka ↗Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
One of St. Petersburg's major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services including online gaming, voice calls and video conferencing.
Fuente: The Record ↗Ledger says hardware implant in cryptocurrency wallets stole recovery phrases
Ledger cryptocurrency wallets sold through a Southeast Asian reseller had an implant allowing outsiders to drain funds, the company said.
Fuente: The Record ↗South African clothing retailer Foschini Group investigating cyberattack on British fashion brands
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.
Fuente: The Record ↗Russian Influence Operation Widely Targeting Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
Fuente: Dark Reading ↗Cyber incident hits grocery stores in US, Netherlands and Belgium
Ahold Delhaize, the Dutch multinational retailer, announced it was taking precautionary measures following a cybersecurity incident, with stores in the U.S., Netherlands and Belgium reportedly impacted.
Fuente: The Record ↗Ciberataque sin precedentes en Francia contra las neveras de los supermercados
Lo ocurrido la noche del 11 al 12 de octubre de 2026 en Francia no tiene precedentes en la historia de la delincuencia digital. Cientos de supermercados de las principales cadenas del país, como Carrefour, Monoprix, Intermarché, La…
Fuente: Red Seguridad ↗XWorm RAT Evolves Into Surveillance Platform
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
Fuente: SecurityWeek ↗AI Turns Familiar Cyberattacks Into a Race Against Time
IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses.
Fuente: SecurityWeek ↗Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via Cryptobilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said it was investigating reports of loss…
Fuente: The Hacker News ↗ También en: BleepingComputer, SecurityWeekLa IA exige una nueva forma de entender la ciberseguridad
La inteligencia artificial (IA) está cambiando nuestra relación con la tecnología. Ya no se limita a responder preguntas o generar contenidos; sino que empieza a comprender mejor nuestro contexto, anticipar necesidades y ayudarnos a…
Fuente: Red Seguridad ↗Retail giant Ahold Delhaize takes systems offline after cyberattack
Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...]
Fuente: BleepingComputer ↗ También en: SecurityWeekRefrigeration Controller Hack Spoils Food Across European Supermarkets
A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.
Fuente: SecurityWeek ↗Los ciberataques aumentan un 45% en España durante el primer semestre de 2026
España destaca entre los países con mayor volumen de ciberataques durante el primer semestre de 2026, según un nuevo informe realizado por NTT Data. Durante ese período, el equipo de Cyber Threat Intelligence de la compañía ha…
Fuente: Red Seguridad ↗Cross-Site Scripting en la aplicación web de YouMind
Cross-Site Scripting en la aplicación web de YouMind Mar, 13/10/2026 - 09:39 Aviso Recursos Afectados Aplicación web de YouMind. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad media que afecta a la…
Fuente: INCIBE-CERT ↗Múltiples vulnerabilidades en NonStop Servers de HPE
Múltiples vulnerabilidades en NonStop Servers de HPE Mar, 13/10/2026 - 09:38 Aviso Recursos Afectados HPE NonStop Servers y los componentes de software indicados en el boletín del fabricante.Para la vulnerabilidad crítica está afectado…
Fuente: INCIBE-CERT ↗Desbordamiento de búfer basado en montículo en NX-OS Software de Cisco
Desbordamiento de búfer basado en montículo en NX-OS Software de Cisco Mar, 13/10/2026 - 09:38 Aviso Recursos Afectados Versiones vulnerables de Cisco NX-OS Software en los siguientes productos:Cisco Nexus 3000 Series Switches con la…
Fuente: INCIBE-CERT ↗Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Fuente: Dark Reading ↗Detectan más de 390.000 ataques de phishing a través de plataformas cloud
Los ciberdelincuentes están aprovechando servicios cloud de confianza como Cloudflare Workers, Vercel, Netlify, GitHub Pages o IPFS para lanzar campañas de phishing cada vez más sofisticadas. En los últimos doce meses se han llevado a…
Fuente: CyberSecurity News ↗El 91% de los profesionales de TI y ciberseguridad sufre estrés laboral
Los equipos de TI y ciberseguridad trabajan bajo una presión cada vez mayor. Los ataques son cada vez más sofisticados, las expectativas de recuperación son cada vez mayores y la responsabilidad de la continuidad del negocio recae a…
Fuente: CyberSecurity News ↗Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]
Fuente: BleepingComputer ↗Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
Fuente: Dark Reading ↗Yandex confirms service outage as users lose access to cloud files
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. [...]
Fuente: BleepingComputer ↗Anthropic takes risky AI tests offline after models breach govt sites
Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]
Fuente: BleepingComputer ↗No Identity, No Recovery: Cyber Resilience Starts With IAM
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Fuente: Dark Reading ↗Un ciberataque pone patas arriba los frigoríficos de supermercados franceses y otro incidente afecta a cadenas europeas
Cuando pensamos en ciberseguridad, es fácil imaginar un correo sospechoso, una contraseña robada o una página web que deja de funcionar. Pero los sistemas informáticos también intervienen en actividades que no asociamos de inmediato con…
Fuente: Xataka ↗Cyberattack disrupts refrigeration at hundreds of French supermarkets
A cyberattack overnight Sunday disrupted refrigerators at hundreds of French supermarkets, spoiling fresh food at stores run by some of the country’s largest grocery chains.
Fuente: The Record ↗ También en: BleepingComputerIonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio.
Fuente: SecurityWeek ↗Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based…
Fuente: BleepingComputer ↗Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which…
Fuente: The Hacker News ↗ También en: SecurityWeekGitLab warns of max severity code execution vulnerability
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]
Fuente: BleepingComputer ↗2026-016: Critical Vulnerability in GitLab CE and EE
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated…
Fuente: CERT-EU ↗Passing the Baton: Dark Reading Names New Editor-in-Chief
Fahmida Y Rashid will keep the momentum going as she leads Dark Reading.
Fuente: Dark Reading ↗Help the NCSC understand how organisations approach external attack surface risk
We're looking to hear from people involved in evaluating, selecting or adopting EASM.
Fuente: NCSC-UK ↗Ukraine strikes third Yandex data center, disrupting digital services across Russia
A third Yandex data center in Russia was hit by Ukrainian drones over the weekend, forcing it to shut down and causing further disruptions to cloud services, payments, deliveries and other online services across the country.
Fuente: The Record ↗Canonical Websites Disrupted in Second DDoS Attack This Year
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal
Fuente: SecurityWeek ↗Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty…
Fuente: The Hacker News ↗Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US.
Fuente: SecurityWeek ↗iRhythm Data Breach Impacts at Least 360,000 People
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.
Fuente: SecurityWeek ↗Critical SonicWall Vulnerability Exploited Days After Disclosure
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
Fuente: SecurityWeek ↗ También en: The Hacker NewsRansomware Response Expert Arrested in ShinyHunters FBI Hack Probe
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.
Fuente: SecurityWeek ↗Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default.
Fuente: SecurityWeek ↗CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The…
Fuente: The Hacker News ↗