VulnerabilidadesExploits y PoC
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
Actualizado hace 1 min
Noticias de ciberseguridad del 14 de octubre de 2026
Resumen de 22 notas de ciberseguridad publicadas el 14 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (7), infraestructura crítica (4), exploits y poc (3).
22 notas en castellano e inglés. Quitar filtros
Ciberseguridad
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
VulnerabilidadesInfraestructura crítica
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Ciberseguridad
¿A qué hora prefieren atacar los ciberdelincuentes y por qué es más difícil responder?
Las noches, los fines de semana y los festivos son momentos especialmente sensibles para las empresas, ya que suele haber menos personal pendiente de sus sistemas. Los ciberdelincuentes conocen esta circunstancia y pueden aprovechar esas horas para ganar tiempo antes de ser…
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Ciberseguridad
Cómo los estafadores se aprovechan de los propietarios de tiempos compartidos
Los delincuentes utilizan falsas ofertas de compra, servicios fraudulentos para cancelar contratos y esquemas de recuperación de dinero para engañar a quienes buscan deshacerse de un tiempo compartido.
Ciberseguridad
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Quebec, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21. I’m speaking at the University of Toronto in Toronto,…
Infraestructura críticaIA y seguridad
AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.
VulnerabilidadesInfraestructura crítica
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
The Future of AI Cryptanalysis
Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers. I am more optimistic than he is. That is, I have stronger faith in the over-engineering…
U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent…
Ciberataques y APTNormativa y privacidad
Cyberattack on Connected Fridges in France
Another IoT cyberattack, this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected. […] Normally, supermarket freezers go…
Ciberseguridad
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.
Russian Influence Operation Widely Targets Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
VulnerabilidadesExploits y PoC
Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce
OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software WebAlliance eCommerce.The exploit allows a malicious actor to read sensitive data…
Phishing a huéspedes con datos reales de reservas: cómo se produce y cómo evitarlo
Phishing a huéspedes con datos reales de reservas: cómo se produce y cómo evitarlo Autor INCIBE (INCIBE) Mié, 14/10/2026 - 14:01 Durante 2026 se han incrementado los mensajes fraudulentos a clientes de alojamientos turísticos, en los que los ciberdelincuentes utilizan datos…
VulnerabilidadesExploits y PoC
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal…
Ciberataques y APTFiltraciones de datos
Un ciberataque apaga vitrinas frigoríficas en supermercados franceses
Un ciberataque permitió manipular a distancia sistemas de refrigeración en supermercados de Francia, elevó temperaturas al activar ciclos de desescarche y obligó a retirar producto. El caso vuelve a señalar un punto débil conocido: interfaces web de gestión OT expuestas a…
Múltiples vulnerabilidades en 1732E ArmorBlock I/O de Rockwell Automation
Múltiples vulnerabilidades en 1732E ArmorBlock I/O de Rockwell Automation Mié, 14/10/2026 - 09:18 Aviso SCI Recursos Afectados 1732E ArmorBlock I/O, versión 3.012 y anteriores:Afectados por CVE-2026-12655 y CVE-2026-12656: 1732E-IB16M12R, 1732E-OB16M12R, 1732E-16CFGM12R,…
Ciberseguridad
Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.