UAE Transitions 50% of Gov't Services to Agentic AI
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
Actualizado hace 1 min
Noticias de ciberseguridad del 22 de octubre de 2026
Resumen de 9 notas de ciberseguridad publicadas el 22 de octubre de 2026. Los temas con más cobertura: ia y seguridad (6), vulnerabilidades (2), herramientas e investigación (1).
9 notas en castellano e inglés. Quitar filtros
AI agent permissions are outrunning security
Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. That new authority is already…
IA y seguridadHerramientas e investigación
Say a few words, and a rigged AI asks for $5,000
Researchers at Imperial College London tampered with speech-to-text models so they transcribed most speakers accurately and misbehaved for one chosen person. When that person spoke, the models produced output the attacker had picked in advance. In one test, that output was a…
AI coding boom exposes cracks in cloud development
Developers are encountering bugs, testing delays and disruptions in shared cloud environments as AI increases the volume of code they produce, according to LocalStack’s 2026 State of AI in Cloud Development report. More code adds to the testing workload Sixty-five percent of…
IA y seguridadCiberataques y APT
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was…
AI agent observability is struggling to keep up with hallucinations
Sixty-two percent of IT and engineering professionals now rely on AI agents frequently to work out why their systems broke, and more than half have no way to measure whether the agents get it right. Splunk surveyed 2,050 of them across ten countries. Source: Splunk Agents…
VulnerabilidadesExploits y PoC
PHP2Shell: dos fallas críticas en el núcleo de PHP explotadas antes de su divulgación pública
Amazon detectó ataques activos contra CVE-2026-109618 y CVE-2026-109619 antes del parche de emergencia del 21 de octubre — AWS WAF mitiga parcialmente mientras se actualiza
Brecha en TeamUpdraft expone claves de gestión remota de WordPress — atacantes instalan backdoors en sitios conectados
Credenciales robadas de UpdraftCentral permitieron a atacantes ejecutar comandos en sitios WordPress y desplegar al menos 99 variantes de plugins maliciosos con acceso persistente.
