Ciberseguridad
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
Actualizado hace 1 min
Noticias de ciberseguridad del 2 de noviembre de 2026
Resumen de 74 notas de ciberseguridad publicadas el 2 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (26), ia y seguridad (11), vulnerabilidades (11).
74 notas en castellano e inglés. Quitar filtros
IA y seguridadCiberataques y APT
What a security strategy that survives 2027 looks like
Equifax CISO Jeremy Koppen sees the same dynamics most security chiefs are facing: hackers on the one side using AI to perform more sophisticated attacks at unprecedented speed, and defenders on the other adopting AI to match that volume and velocity. “AI is changing the pace on…
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI penetration testing framework.
VulnerabilidadesExploits y PoC
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
FBI: Hackers norcoreanos robaron más de 6.000 millones a Binance
El FBI ha confirmado que hackers norcoreanos, bajo la operación denominada TraderTraitor, robaron más de 6.000 millones de dólares en activos virtuales de Binance alrededor del 29 de octubre de 2026.
Ciberseguridad
Clientes de Binance retiran 5,8B de dólares tras el hackeo
Roban 30GB de datos de Parle Agro
Se ha reportado en un foro de la dark web la presunta filtración de 30GB de datos pertenecientes a Parle Agro, empresa fabricante de marcas como Frooti y Appy Fizz. Aunque Dark Web Intelligence ha resaltado esta publicación, el robo de información y la vulneración de los…
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for something, or a rule your team wrote covers it. You can also open up a…
The first ten lines of a command policy for AI coding agents
In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity attached when acting on someone’s behalf. He…
Herramientas e investigaciónIA y seguridad
Byoky: Open-source wallet for AI API keys
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps that want those keys ask the wallet…
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical stealer families, VOLTA is equipped to…
Ciberseguridad
Product showcase: Trust Onion uses rotating codewords to verify callers
Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I tested the iPhone app with an older…
Ransomware gang talked AI agents into doing much of its dirty work
The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, which tracks the group as…