Actualizado hace 1 min
Lo último sobre phishing e ingeniería social en los medios de ciberseguridad en castellano. Clasificamos cada nota automáticamente y la enlazamos a su fuente original.
22 notas en castellano e inglés. Quitar filtros
Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering technique in which bad actors trick users into copying and pasting malicious…
IA y seguridadPhishing e ingeniería social
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and why AI tools have become increasingly…
Phishing e ingeniería socialMalware
The attack uses malicious Google search results related to Amazon and leverages the 'finger' utility to launch a CAPTCHA that installs malware, including the Lumma stealer.
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhra have been compromised, potentially allowing attackers to forge trusted certificates and impersonate websites or services, according to Google and Mozilla.…
Phishing e ingeniería socialHerramientas e investigación
Check Point Research documentó que la participación de Microsoft en intentos de phishing creció 10 puntos porcentuales en Q3 2026, cuadruplicando la de cualquier competidor.
VulnerabilidadesExploits y PoC
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL…
MalwarePhishing e ingeniería social
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style…
Herramientas e investigaciónPhishing e ingeniería social
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
Phishing e ingeniería socialVulnerabilidades
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
IA y seguridadPhishing e ingeniería social
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
Exploits y PoCFiltraciones de datos
Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing
Phishing e ingeniería socialHerramientas e investigación
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to…
Ciberataques y APTPhishing e ingeniería social
CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login…
Phishing e ingeniería socialVulnerabilidades
Omisión de autenticación mediante suplantación en Remote Support de BeyondTrust Vie, 16/10/2026 - 09:37 Aviso Recursos Afectados BeyondTrust Remote Support, todas las versiones hasta la 26.2.3, inclusive. Descripción BeyondTrust ha publicado una vulnerabilidad de severidad…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation…
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Phishing a huéspedes con datos reales de reservas: cómo se produce y cómo evitarlo Autor INCIBE (INCIBE) Mié, 14/10/2026 - 14:01 Durante 2026 se han incrementado los mensajes fraudulentos a clientes de alojamientos turísticos, en los que los ciberdelincuentes utilizan datos…
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Phishing e ingeniería socialIA y seguridad
Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.
Ciberataques y APTFiltraciones de datos
For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an employee clicked a malicious link. Attackers copied…
