Actualizado hace 1 min
Resumen de 46 notas de ciberseguridad publicadas el 28 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (23), ia y seguridad (9), ciberataques y apt (9).
46 notas en castellano e inglés. Quitar filtros
Ciberseguridad
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal activity, including "the…
Filtraciones de datosCiberataques y APT
Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an…
VulnerabilidadesIA y seguridad
In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams need to cut exposure while remediation is pending.…
Herramientas e investigaciónIA y seguridad
Una campaña de malware llamada Yoba está engañando a los usuarios utilizando la popularidad de herramientas de IA como ChatGPT y Claude. Los atacantes publican proyectos falsos en GitHub que se hacen pasar por aplicaciones de escritorio (como GPT-5.6 Sol, GPT-6 Astra y Claude…
VulnerabilidadesCiberataques y APT
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the…
VulnerabilidadesExploits y PoC
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request…
AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, is a list that…
Exploits y PoCFiltraciones de datos
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The…
The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), explains…
Cyberdione Labs descubrió 11 vulnerabilidades críticas en Tailscale y Headscale que podrían permitir el robo de credenciales y la obtención de privilegios de root. El equipo de Tailscale ha confirmado que los fallos son graves y está trabajando en parches urgentes para…
IA y seguridadVulnerabilidades
Hace unas semanas os hablé de en el artículo de "La Inteligencia Artificial está multiplicando los parches de seguridad ... ¿quién los va a instalar en tu PYME?" que el verdadero problema de la Inteligencia Artificial para una PYME no es el APT con el exploit sofisticado que les…
Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and operate software. A breach at one of…
CERT-UA documenta acceso no autorizado masivo a dispositivos de videovigilancia que eluden firewall mediante números de serie predecibles y CVE sin parchear desde 2021.
Check Point descubrió una campaña que explota la confianza en OpenAI y Anthropic mediante repositorios falsos que simulan aplicaciones de escritorio de IA
IA y seguridadPhishing e ingeniería social
Microsoft desmanteló en septiembre una operación que automatizaba con IA cada etapa del fraude corporativo, desde el acceso hasta la redacción de facturas falsas.
