Actualizado hace 1 min
Resumen de 37 notas de ciberseguridad publicadas el 26 de octubre de 2026. Los temas con más cobertura: herramientas e investigación (11), vulnerabilidades (9), ia y seguridad (9).
37 notas en castellano e inglés. Quitar filtros
An AI SOC that starts with somebody else’s alert is already too late. Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, builds cases, investigates incidents, triages findings, and drives response from the same security…
AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive software.…
Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first half of 2026…
IA y seguridadHerramientas e investigación
Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator Wolvereness announced the rules in a post over the weekend. A project now has to be at least a year old and…
IA y seguridadHerramientas e investigación
Google has open-sourced the Elephant-Goldfish Model plugin, an internal tool that makes an AI coding agent write and defend a design document before it touches any code. The plugin hands that document to fresh AI sessions that have never seen the design conversation and tells…
Una vulnerabilidad en News Kit Addons For Elementor expone sitios a modificación de metadatos protegidos sin validación de permisos
CVE-2026-113491 afecta a GeoDirectory en versiones anteriores a 2.8.194 — cualquier cuenta de suscriptor puede acceder a archivos fuera de la raíz web
Ciberseguridad
Una acción AJAX sin verificación de permisos en Pixel Tag Manager expone a tiendas online a ejecución de código malicioso controlado por colaboradores.
CVE-2026-111497 afecta a Bun, paquetes Python y proxies Envoy — cualquier implementación que descomprima datos Brotli sin validación previa queda vulnerable.
Eye Security intervino remotamente equipos ajenos durante cinco meses para neutralizar un componente de software abandonado que exponía a toma de control.
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
