Actualizado hace 1 min
Resumen de 19 notas de ciberseguridad publicadas el 13 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (12), exploits y poc (4), ciberataques y apt (3).
19 notas en castellano e inglés. Quitar filtros
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from…
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
Unit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats.
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has…
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."
IA y seguridadHerramientas e investigación
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland, because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I can represent the bugs at this level of volume, so…
VulnerabilidadesExploits y PoC
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker…
Ciberseguridad
Una campaña que utiliza la imagen de Frávega atrae compradores con ofertas falsas y los deriva a checkouts externos variables diseñados para robar datos de tarjetas.
IA y seguridadVulnerabilidades
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from…
VulnerabilidadesExploits y PoC
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605,…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. The following versions of Inductive Automation Ignition Software are affected: Ignition >=8.1.0|<=8.1.54 (CVE-2026-92817)…
OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability…
Boletín mensual de seguridad de Siemens de octubre de 2026 Mar, 13/10/2026 - 12:11 Aviso SCI Recursos Afectados Las vulnerabilidades afectan a diferentes versiones de los siguientes productos:Capital Embedded AR Classic 431-422, todas las versiones, y R20-11, anteriores a…
A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.
Ciberseguridad
Desbordamiento de búfer basado en montículo en PRI7000 de Bosch Mar, 13/10/2026 - 09:38 Aviso SCI Recursos Afectados Bosch Rexroth PRI7000:rama 1.11.17, versiones anteriores a 1.11.17.3;rama 1.11.18, versiones anteriores a 1.11.18.3;rama 1.11.19, versiones anteriores a…
