Actualizado hace 1 min
Resumen de 199 notas de ciberseguridad publicadas el 21 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (82), ciberataques y apt (38), ia y seguridad (26).
199 notas en castellano e inglés. Quitar filtros
La versión 1.107.0 de LiteLLM fue comprometida en PyPI el 21 de octubre de 2026, distribuyendo un robador de credenciales y un troyano de acceso remoto (RAT) a través de sus archivos wheel. Esta versión maliciosa también afectó a las imágenes de Docker, poniendo en riesgo…
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
VulnerabilidadesExploits y PoC
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported two incidents, both involving the agent disabling or interfering with its alignment monitoring, and in one case directly lying…
Ciberseguridad
Google has rolled out a change to Chrome that asks users for permission before making an insecure HTTP connection. The protection is now enabled by default for all users, following its introduction earlier this year for users of Safe Browsing’s Enhanced Protection mode. The vast…
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks.
Herramientas e investigaciónIA y seguridad
Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers.
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the internet. The flaws discovered in the PHP scripting language could allow attackers to perform unauthenticated remote code…
Filtraciones de datosVulnerabilidades
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
EVP of Microsoft Security Hayete Gallot writes in a blog post that AI agents operating independently within companies could be a serious security threat. According to Microsoft, today’s most advanced AI models cannot be fully trusted. Not because they are malicious, but because…
Ciberseguridad
Cisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra.
Dos vulnerabilidades críticas en PHP han generado una alerta global de ciberseguridad, obligando a actualizar millones de sitios web para evitar ataques.
