Actualizado hace 1 min
Noticias de ciberseguridad del 21 de octubre de 2026
Resumen de 178 notas de ciberseguridad publicadas el 21 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (77), ciberataques y apt (32), ia y seguridad (26).
178 notas en castellano e inglés. Quitar filtros
Ciberseguridad
14 ways attackers abuse cloud services to hack your enterprise
Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious activity into legitimate enterprise traffic. Adversaries are pushing command and control (C2) through high-reputation services, including OpenAI and AWS, to…
Ciberseguridad
U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services "developed using DeepSeek implementations," under a Department of Homeland Security order. They may also no longer buy…
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said in a stock-exchange filing dated…
VulnerabilidadesExploits y PoC
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell. The vulnerabilities are…
Apocalipsis en PHP: dos vulnerabilidades críticas sin corregir ponen en peligro cualquier web
Dos vulnerabilidades críticas y, por el momento, sin parchear, afectan a PHP y ponen en peligro los sitios web. Este problema se conoce como PHP2Shell. El equipo de seguridad de PHP ha asignado, con fecha de 20 de octubre, a ambos fallos una puntuación de 9.2 sobre 10 en la…
VulnerabilidadesExploits y PoC
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
El fallo de seguridad que pone en jaque a HTTPS: así puedes saber si tu navegador es seguro
Las Autoridades de Certificación permiten emitir certificados SSL/TLS para cualquier web. Si la clave privada de estas CA se ve comprometida (se pierden o se hackean), se podrían emitir certificados falsos para posteriormente interceptar y descifrar todas las comunicaciones, por…
Múltiples vulnerabilidades en Festo AX OS de Festo
Múltiples vulnerabilidades en Festo AX OS de Festo Mié, 21/10/2026 - 08:10 Aviso SCI Recursos Afectados CEPE con Festo AX OS 25.0.1.46 y Festo AX OS 25.9.2.4. Descripción Festo en colaboración con CERT@VDE, han publicado dos vulnerabilidades en componentes OpenSSL utilizados por…
Ejecución remota de código en STARe Software de Mettler-Toledo
Ejecución remota de código en STARe Software de Mettler-Toledo Mié, 21/10/2026 - 08:10 Aviso SCI Recursos Afectados STARe Software v20.00 con el componente IBM Db2 12.1.2. Descripción Mettler-Toledo en colaboración con VDE-CERT ha publicado una vulnerabilidad en el intercambio…
Múltiples vulnerabilidades en productos de Oracle
Múltiples vulnerabilidades en productos de Oracle Mié, 21/10/2026 - 08:10 Aviso Recursos Afectados El Critical Patch Update de octubre afecta a múltiples familias de productos Oracle, entre ellas Oracle Database, Oracle E-Business Suite, Oracle Fusion Middleware, Java y MySQL.…
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dubbed Partisan Zmiy, which is also known…
MalwareHerramientas e investigación
Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
Researchers say the developer’s account was compromised in March with a GlassWorm-linked loader.
IA y seguridadNormativa y privacidad
Privacy-preserving AI can protect your heart data, the bill is the problem
A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note. Cardiac care doesn’t work like that anymore. A patch or smartwatch records the electrocardiogram (ECG).…