Ciberseguridad
Actualizado hace 1 min
Noticias de ciberseguridad del 27 de octubre de 2026
Resumen de 45 notas de ciberseguridad publicadas el 27 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (17), herramientas e investigación (8), ia y seguridad (8).
45 notas en castellano e inglés. Quitar filtros
Ciberseguridad
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration…
Several AI security market categories are headed for bigger platforms
In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as products and which will become…
VulnerabilidadesHerramientas e investigación
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app didn’t need permissions, and you didn’t need to tap anything. Here’s what happened Authenticator does more…
IA y seguridadHerramientas e investigación
LLM agent security needs more than guardrails
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on model behavior, such as guardrails and injection detection, lower the rate of bad outcomes but never reach zero. Controls on…
Ciberataques y APTIA y seguridad
IA potencia ciberataques en Japón
Japón ha sufrido 723 ciberataques facilitados por la inteligencia artificial, la cual permite a los delincuentes automatizar procesos y eliminar la necesidad de conocimientos técnicos avanzados para afectar a empresas y clientes.
Ciberseguridad
Amutable Foundations is a Linux system with no SSH and no package manager
Amutable opened signups for the private preview of Amutable Foundations, a Linux system in which each machine sends a signed report of the software and configuration it runs, drawing on local hardware to make the report easier to verify. The company says its engineers write and…
Exploits y PoCVulnerabilidades
71% of vulnerability exploitation starts within a week of disclosure
Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s Q3 2026 Quarterly Threat Landscape Report. The company reported an average of three days between public disclosure and exploitation of…
Ciberataques y APTHerramientas e investigación
SecAdmin 2026 - La CON de Hackers, Ninjas y Samurais en Sevilla el 27 y 28 de Noviembre
Los días 28 y 29 de Noviembre va a tener lugar en Sevilla, una nueva edición de la ya veterana CON de hackers, samurais y ninjas... SecAdmin 2026, donde como siempre hay un agenda llena de ponencias más que interesantes, y en la que tendrás también talleres, un CTF (Capture The…
Cybersecurity jobs available right now: October 27, 2026
Cybersecurity Expert / Penetration Tester Barrion | Sweden | On-site – View job details As a Cybersecurity Expert / Penetration Tester, you will test web applications and APIs for authentication, authorisation, and business logic vulnerabilities. You’ll identify complex attack…
VulnerabilidadesExploits y PoC
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring…
GPT-6.1 Terra meets OpenAI’s Critical cyber threshold, and it’s cheaper than GPT-5.6 Terra
OpenAI released GPT-6.1 Terra, a model that operates desktop software, to all Plus, Pro, Enterprise, and Edu users in ChatGPT Work and Codex, and to developers through its API as gpt-6.1-terra. API prices are 50 percent below those of GPT-5.6 Terra and GPT-6.1 Sol: $1 per…
RansomwareFiltraciones de datos
Ransomware Emperador afirma haber robado 3,9GB de datos de AB InBev
El grupo de ransomware Emperador afirma haber robado 3.9GB de datos de AB InBev (fabricante de Budweiser y Corona) y exige un pago de 1 millón de dólares en Bitcoin. El presunto ataque fue detectado el 25 de octubre de 2026, aunque la brecha de seguridad aún no ha sido…
Filtraciones de datosHerramientas e investigación
OpenAI’s August fix for theft of reasoning traces was quickly bypassed
Cybersecurity research firm Xint on Monday published details of a bug in the OpenAI API that leaks raw reasoning traces from frontier OpenAI models, revealing the risk of other data leaks. OpenAI has confirmed the flaw, mitigated it, and paid a bug bounty for its discovery. The…