Actualizado hace 1 min
Resumen de 46 notas de ciberseguridad publicadas el 29 de octubre de 2026. Los temas con más cobertura: vulnerabilidades (20), ciberataques y apt (17), exploits y poc (7).
46 notas en castellano e inglés. Quitar filtros
Cross-Site Scripting reflejado en la configuración de PHP-CGI/PHP-FPM de ICT Innovations Jue, 29/10/2026 - 09:32 Aviso Recursos Afectados Configuración de tiempo de ejecución insegura en PHP-CGI/PHP-FPM. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de…
Filtraciones de datosCiberataques y APT
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.
Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP…
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for…
VulnerabilidadesCiberataques y APT
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.
Ciberataques y APTHerramientas e investigación
Kaspersky researchers analyze a complex targeted attack employing NetamLoader, a sophisticated malicious framework and targeting a customized government OS.
VulnerabilidadesHerramientas e investigación
Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else.
Exploits y PoCVulnerabilidades
In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of standard MTTR, and why only a small…
VulnerabilidadesExploits y PoC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as…
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it's convenient to play with snapshots in your lab. Start a new investigation from a clean snapshot and take some more when you reached a critical…
Ciberseguridad
Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated systems are already in place. Their more specific answers point elsewhere. Only 4% said their…
VulnerabilidadesExploits y PoC
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the…
Ciberseguridad
Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam victims often struggle with shame and self-blame, while identity theft victims can spend weeks of personal…
Ciberseguridad
Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or credentials were circulating on underground and dark web marketplaces. That’s 808 of the center’s 6,116…
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
