Actualizado hace 1 min
Resumen de 98 notas de ciberseguridad publicadas el 20 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (25), ciberataques y apt (22), ia y seguridad (14).
98 notas en castellano e inglés. Quitar filtros
MalwareHerramientas e investigación
Kaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and abuse of CrossWeb EX financial security software.
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American labs. The US Secretary of Homeland Security has issued an order banning all DeepSeek products and services from federal…
IA y seguridadNormativa y privacidad
When UK Financial Conduct Authority (FCA) Chief Data Officer Jessica Rusu gave a speech on Monday advocating that UK companies be required to report “significant AI failures and near-misses,” she added to the drumbeat of demands for some kind of regulatory control over…
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites.
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites.
Investigadores federales sospechan que un ejecutivo de una firma de consultoría de Estados Unidos ayudó al grupo ShinyHunters a operar un sitio web utilizado para presionar a empresas hackeadas a pagar rescates. Este caso plantea dudas sobre si algunos asesores de…
Ciberseguridad
WP2Shell es una vulnerabilidad que combina dos fallos del núcleo de WordPress para permitir la ejecución de código en el servidor mediante solicitudes no autenticadas. Esto permite a un atacante crear cuentas de administrador e instalar web shells basadas en plugins. Según el…
Ciberseguridad
Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.
VulnerabilidadesHerramientas e investigación
Security researchers have found a critical flaw in the Linux kernel’s networking stack that can let attackers escape a KVM virtual machine and execute code on the host system. The weakness could also potentially let attackers compromise systems running other Linux-based…
Ciberseguridad
VulnerabilidadesHerramientas e investigación
CVE-2026-101767 is a critical (CVSS 9.8) unauthenticated SQL injection vulnerability in Oracle E-Business Suite 12.2.3–12.2.15. Horizon3 researchers identified an attack chain enabling remote code execution through the TCF servlet. Learn about affected versions, October 2026…
VulnerabilidadesFiltraciones de datos
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure.
VulnerabilidadesExploits y PoC
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.
