Actualizado hace 1 min
Resumen de 15 notas de ciberseguridad publicadas el 22 de octubre de 2026. Los temas con más cobertura: ia y seguridad (7), ciberataques y apt (4), vulnerabilidades (4).
15 notas en castellano e inglés. Quitar filtros
IA y seguridadCiberataques y APT
Expertos advierten que la IA facilita y acelera los ciberataques contra infraestructuras críticas al reducir las barreras técnicas para los atacantes. Aunque los modelos actuales aún cometen errores y requieren juicio humano, un informe de Frenos demuestra que pueden generar…
Ciberataques y APTVulnerabilidades
Kaspersky GReAT experts discovered a new UEFI bootkit, BlackX. It exploits the Baton Drop vulnerability (CVE-2022-21894) and is similar to the BlackLotus bootkit.
Ciberseguridad
In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop an attacker, and why the cost…
Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. That new authority is already…
IA y seguridadHerramientas e investigación
Researchers at Imperial College London tampered with speech-to-text models so they transcribed most speakers accurately and misbehaved for one chosen person. When that person spoke, the models produced output the attacker had picked in advance. In one test, that output was a…
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
Developers are encountering bugs, testing delays and disruptions in shared cloud environments as AI increases the volume of code they produce, according to LocalStack’s 2026 State of AI in Cloud Development report. More code adds to the testing workload Sixty-five percent of…
IA y seguridadCiberataques y APT
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was…
Sixty-two percent of IT and engineering professionals now rely on AI agents frequently to work out why their systems broke, and more than half have no way to measure whether the agents get it right. Splunk surveyed 2,050 of them across ten countries. Source: Splunk Agents…
VulnerabilidadesExploits y PoC
Amazon detectó ataques activos contra CVE-2026-109618 y CVE-2026-109619 antes del parche de emergencia del 21 de octubre — AWS WAF mitiga parcialmente mientras se actualiza
Credenciales robadas de UpdraftCentral permitieron a atacantes ejecutar comandos en sitios WordPress y desplegar al menos 99 variantes de plugins maliciosos con acceso persistente.
