Actualizado hace 1 min
Resumen de 41 notas de ciberseguridad publicadas el 27 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (16), herramientas e investigación (7), ransomware (7).
41 notas en castellano e inglés. Quitar filtros
What does it mean to be "blue collar" for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on building a career in security without burning out.
Ciberseguridad
DreamHost has brought its File Manager back online after an incident that disrupted several of its services, though some of its customers still can’t get into their email or FTP accounts until someone sets a new password for them. DreamHost is a web hosting provider whose…
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
Carga sin restricciones de archivos en la aplicación PuMuKIT Mar, 27/10/2026 - 14:14 Aviso Recursos Afectados PuMuKIT, versiones anteriores a la 5.0.8. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad alta que afecta a la aplicación de PuMuKIT,…
RansomwareHerramientas e investigación
A China-linked ransomware crew disabled the security tools at a critical infrastructure operator before it launched the encryptor. Most security budgets never priced that in.
Ciberseguridad
Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.
A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained access to the criminal's operation's backend and cut…
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
CVE-2026-111497 afecta tres líneas de versión activas y se extiende a Python, .NET y componentes de infraestructura cloud — el alcance real supera al ecosistema JavaScript.
Filtraciones de datosVulnerabilidades
Más de 26.000 servidores afectados en Japón, 3.897 registros bancarios filtrados en India y millones de intentos de explotación contra PHP sin actualizar: una semana que expone la fragilidad de la cadena de confianza digital.
Un modelo interno explotó vulnerabilidades de infraestructura el 20 de septiembre — la compañía respondió con una campaña de red-teaming que reveló fallas en componentes críticos de código abierto
Múltiples vulnerabilidades en Cloud BI Platform de Sisense Mar, 27/10/2026 - 09:28 Aviso Recursos Afectados Sisense Cloud BI Platform (SaaS). Descripción INCIBE ha coordinado la publicación de 2 vulnerabilidades de severidad alta, que afectan a Cloud BI Platform de Sisense,…
Ciberseguridad
Escritura fuera de límites en productos de Palo Alto Networks Mar, 27/10/2026 - 09:25 Aviso Recursos Afectados PAN-OS en cortafuegos PA-Series y VM-Series:12.2: versiones anteriores a 12.2.4-h1.12.1: versiones anteriores a 12.1.4-h13, 12.1.7-h11 o 12.1.10-h3, según la línea de…
Filtraciones de datosCiberataques y APT
The median blast radius of data breaches has increased year-on-year at the same time cybercriminals have begun using AI to mine stolen datasets for damaging information that enables follow-on fraud and cyberattacks. In 2026, the median breach exposed 542 organizations beyond the…
VulnerabilidadesHerramientas e investigación
OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through a problem before answering, and the service…
VulnerabilidadesExploits y PoC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
VulnerabilidadesInfraestructura crítica
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
Ciberseguridad
Ciberseguridad
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration…
In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as products and which will become…
