Actualizado hace 1 min
Resumen de 108 notas de ciberseguridad publicadas el 20 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (26), ciberataques y apt (22), exploits y poc (21).
108 notas en castellano e inglés. Quitar filtros
MalwareHerramientas e investigación
Kaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and abuse of CrossWeb EX financial security software.
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American labs. The US Secretary of Homeland Security has issued an order banning all DeepSeek products and services from federal…
IA y seguridadNormativa y privacidad
When UK Financial Conduct Authority (FCA) Chief Data Officer Jessica Rusu gave a speech on Monday advocating that UK companies be required to report “significant AI failures and near-misses,” she added to the drumbeat of demands for some kind of regulatory control over…
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites.
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites.
Keycloak 26.7.2 - Unauthenticated Account Takeover
Automotive Shop Management System 1.0 - SQLi
Edimax BR-6478AC firmware v2.20 - authenticated command injection
Exasol Database 7.1.30 - command execution
Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
South River Technologies Titan MFT Server 26.0.0 - code execution
Synametrics Syncrify 6.2 - command execution
Investigadores federales sospechan que un ejecutivo de una firma de consultoría de Estados Unidos ayudó al grupo ShinyHunters a operar un sitio web utilizado para presionar a empresas hackeadas a pagar rescates. Este caso plantea dudas sobre si algunos asesores de…
