Actualizado hace 1 min
Noticias de ciberseguridad del 2 de noviembre de 2026
Resumen de 202 notas de ciberseguridad publicadas el 2 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (113), vulnerabilidades (19), filtraciones de datos (15).
202 notas en castellano e inglés. Quitar filtros
Why do we keep testing employees for yesterday’s phishing attacks
“Yesterday’s price is not today’s price,” a phrase Fat Joe popularized in 2021, reminds us that what worked yesterday may not deliver the same value today. In cybersecurity, this matters when we continue to assess employees against familiar phishing techniques while attackers…
VulnerabilidadesInfraestructura crítica
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1.
Ciberseguridad
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.
Who approves the files that control your AI coding assistant?
A pull request adds a helpful setup step for an AI coding assistant. No application source changes. The description calls it a developer-experience improvement, and the reviewer sees a short configuration file beside some Markdown instructions. Before approving it, the reviewer…
Ciberseguridad
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
IA y seguridadCiberataques y APT
What a security strategy that survives 2027 looks like
Equifax CISO Jeremy Koppen sees the same dynamics most security chiefs are facing: hackers on the one side using AI to perform more sophisticated attacks at unprecedented speed, and defenders on the other adopting AI to match that volume and velocity. “AI is changing the pace on…
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI penetration testing framework.
VulnerabilidadesExploits y PoC
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
FBI: Hackers norcoreanos robaron más de 6.000 millones a Binance
El FBI ha confirmado que hackers norcoreanos, bajo la operación denominada TraderTraitor, robaron más de 6.000 millones de dólares en activos virtuales de Binance alrededor del 29 de octubre de 2026.
Ciberseguridad
Clientes de Binance retiran 5,8B de dólares tras el hackeo
Roban 30GB de datos de Parle Agro
Se ha reportado en un foro de la dark web la presunta filtración de 30GB de datos pertenecientes a Parle Agro, empresa fabricante de marcas como Frooti y Appy Fizz. Aunque Dark Web Intelligence ha resaltado esta publicación, el robo de información y la vulneración de los…
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for something, or a rule your team wrote covers it. You can also open up a…