Actualizado hace 1 min
Resumen de 37 notas de ciberseguridad publicadas el 27 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (14), herramientas e investigación (6), ransomware (6).
37 notas en castellano e inglés. Quitar filtros
What does it mean to be "blue collar" for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on building a career in security without burning out.
Carga sin restricciones de archivos en la aplicación PuMuKIT Mar, 27/10/2026 - 14:14 Aviso Recursos Afectados PuMuKIT, versiones anteriores a la 5.0.8. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad alta que afecta a la aplicación de PuMuKIT,…
Ciberseguridad
Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.
A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained access to the criminal's operation's backend and cut…
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
CVE-2026-111497 afecta tres líneas de versión activas y se extiende a Python, .NET y componentes de infraestructura cloud — el alcance real supera al ecosistema JavaScript.
Filtraciones de datosVulnerabilidades
Más de 26.000 servidores afectados en Japón, 3.897 registros bancarios filtrados en India y millones de intentos de explotación contra PHP sin actualizar: una semana que expone la fragilidad de la cadena de confianza digital.
Un modelo interno explotó vulnerabilidades de infraestructura el 20 de septiembre — la compañía respondió con una campaña de red-teaming que reveló fallas en componentes críticos de código abierto
Múltiples vulnerabilidades en Cloud BI Platform de Sisense Mar, 27/10/2026 - 09:28 Aviso Recursos Afectados Sisense Cloud BI Platform (SaaS). Descripción INCIBE ha coordinado la publicación de 2 vulnerabilidades de severidad alta, que afectan a Cloud BI Platform de Sisense,…
Ciberseguridad
Escritura fuera de límites en productos de Palo Alto Networks Mar, 27/10/2026 - 09:25 Aviso Recursos Afectados PAN-OS en cortafuegos PA-Series y VM-Series:12.2: versiones anteriores a 12.2.4-h1.12.1: versiones anteriores a 12.1.4-h13, 12.1.7-h11 o 12.1.10-h3, según la línea de…
Filtraciones de datosCiberataques y APT
The median blast radius of data breaches has increased year-on-year at the same time cybercriminals have begun using AI to mine stolen datasets for damaging information that enables follow-on fraud and cyberattacks. In 2026, the median breach exposed 542 organizations beyond the…
VulnerabilidadesHerramientas e investigación
OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through a problem before answering, and the service…
VulnerabilidadesExploits y PoC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
VulnerabilidadesInfraestructura crítica
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
Ciberseguridad
Ciberseguridad
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration…
In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as products and which will become…
VulnerabilidadesHerramientas e investigación
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app didn’t need permissions, and you didn’t need to tap anything. Here’s what happened Authenticator does more…
IA y seguridadHerramientas e investigación
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on model behavior, such as guardrails and injection detection, lower the rate of bad outcomes but never reach zero. Controls on…
Ciberataques y APTIA y seguridad
Japón ha sufrido 723 ciberataques facilitados por la inteligencia artificial, la cual permite a los delincuentes automatizar procesos y eliminar la necesidad de conocimientos técnicos avanzados para afectar a empresas y clientes.
Ciberseguridad
Amutable opened signups for the private preview of Amutable Foundations, a Linux system in which each machine sends a signed report of the software and configuration it runs, drawing on local hardware to make the report easier to verify. The company says its engineers write and…
