Actualizado hace 1 min
Resumen de 174 notas de ciberseguridad publicadas el 5 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (61), vulnerabilidades (49), ia y seguridad (30).
174 notas en castellano e inglés. Quitar filtros
Una grave vulnerabilidad en Claude de Anthropic que permite a extensiones de navegador ejecutar código en la computadora del usuario. A pesar de conocer el fallo desde mayo, la empresa no lo ha corregido, facilitando posibles intrusiones corporativas.
Google, Meta and TikTok each filed suit in federal court against an incoming California law that blocks platforms from deploying features considered “psychologically exploitative.”
Ciberseguridad
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid.
Ciberseguridad
The sanctions target four people and 41 companies linked to the Prince Group — a Cambodian company accused of running a billion-dollar scam operation.
Ciberseguridad
En menos de un mes, atacantes elevaron a distancia la temperatura de refrigeradores y cámaras frío de cientos de supermercados europeos y de un banco de sangre en Francia. El mismo tipo de tecnología ya opera en empresas latinoamericanas.
Ciberseguridad
La agencia nacional de ayuda de Noruega, Norad, ha confirmado que ciberdelincuentes irrumpieron en sus sistemas, robando información de todos y cada uno de los usuarios registrados de su portal de subvenciones.
Herramientas e investigaciónIA y seguridad
OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research.
Ciberseguridad
Wanda Jones-Heath said it’s key to keeping pace with incidents and threats, speaking at a Datadog event Thursday.
The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European supermarkets in recent weeks.
Thorsten may have had to camp out in Nuremberg to attend it-sa, but the real story is the initiative to add a formal IT Security apprenticeship program in Germany for the thousands of young hackers ready to join our side.
Phishing e ingeniería socialVulnerabilidades
Las aplicaciones móviles iRA 2.0 e iRA.ev de Tata Motors presentan cuatro fallos de seguridad de severidad alta. Según el equipo de respuesta a emergencias informáticas de la India (CERT-In), estas vulnerabilidades podrían permitir que atacantes roben credenciales, suplanten la…
After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.
VulnerabilidadesExploits y PoC
OpenAI has developed an autonomous AI pipeline that can identify software vulnerabilities, develop working exploits to validate their impact and generate patches for human review. In an October experiment targeting the Linux kernel, the pipeline created exploits for 948 distinct…
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password.
VulnerabilidadesHerramientas e investigación
An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.
