Actualizado hace 1 min
Resumen de 20 notas de ciberseguridad publicadas el 2 de noviembre de 2026. Los temas con más cobertura: ia y seguridad (6), ciberataques y apt (5), exploits y poc (2).
20 notas en castellano e inglés. Quitar filtros
IA y seguridadCiberataques y APT
Equifax CISO Jeremy Koppen sees the same dynamics most security chiefs are facing: hackers on the one side using AI to perform more sophisticated attacks at unprecedented speed, and defenders on the other adopting AI to match that volume and velocity. “AI is changing the pace on…
We analyze a series of attacks on educational institutions that were fully automated during the post-exploitation phase using the CyberStrikeAI penetration testing framework.
VulnerabilidadesExploits y PoC
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
El FBI ha confirmado que hackers norcoreanos, bajo la operación denominada TraderTraitor, robaron más de 6.000 millones de dólares en activos virtuales de Binance alrededor del 29 de octubre de 2026.
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for something, or a rule your team wrote covers it. You can also open up a…
In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity attached when acting on someone’s behalf. He…
Herramientas e investigaciónIA y seguridad
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps that want those keys ask the wallet…
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical stealer families, VOLTA is equipped to…
Ciberseguridad
Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I tested the iPhone app with an older…
The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, which tracks the group as…
El FBI confirmó que el grupo de hackers norcoreanos "TraderTraitor" (Lazarus Group) realizó el mayor robo de criptomonedas de la historia, sustrayendo 6,300 millones de dólares de Binance. El ataque se logró mediante la vulneración de la computadora de un ingeniero de DevOps,…
