Actualizado hace 1 min
Resumen de 177 notas de ciberseguridad publicadas el 5 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (63), vulnerabilidades (49), ia y seguridad (30).
177 notas en castellano e inglés. Quitar filtros
Ciberseguridad
El spoofing de email falsifica la identidad del remitente para que un mensaje parezca provenir de tu propia empresa. Descubre cómo funciona y cómo SPF, DKIM y DMARC ayudan a detectar y bloquear correos falsificados.
The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked.
Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.
VulnerabilidadesHerramientas e investigación
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has reached the queue. Progress then depends on information the finding may lack: who owns the system, whether attackers can…
VulnerabilidadesCiberataques y APT
Linux administrators’ trust in package managers is being tested by a newly disclosed vulnerability in APT, the package management system used by Debian, Ubuntu, and their derivatives, that could allow attackers to install unverified software with root privileges. Tracked as…
VulnerabilidadesExploits y PoC
Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still open to an exploit attackers used, Binarly found. That’s because the patch fixed a different bug (CVE-2026-7273) from the one…
VulnerabilidadesExploits y PoC
Zyxel ha publicado un parche para un zero-day en sus switches GS1900 que los atacantes llevaban explotando desde agosto para comprometer casi mil dispositivos y robar sus archivos de configuración y credenciales. La compañía ha tenido que lanzar una segunda actualización de…
Ciberseguridad
CISA, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the National Security Agency (NSA) released joint guidance and an accompanying quick-reference list to help organizations assess vendor readiness for transitioning to post-quantum…
Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of Transportation (DoT)—hereafter referred to as “the authoring…
VulnerabilidadesCiberataques y APT
Zyxel ha corregido una vulnerabilidad de día cero (CVE-2026-107441) en sus switches de la serie GS1900, la cual permitió a hackers comprometer casi 1,000 dispositivos para robar credenciales y configuraciones. Inicialmente se confundió con un fallo ya parcheado, pero se…
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned in a new blog post. The company looked at GTA VI-themed domains that appeared between July 1 and October 27,…
OpenAI ha revelado que un canal de investigación automatizado, impulsado por un próximo modelo de ciberseguridad, logró identificar y demostrar 948 fallos distintos de escalada de privilegios en el kernel de Linux en una sola ejecución realizada a mediados de octubre de 2026.…
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
VulnerabilidadesExploits y PoC
Más de 18.500 intentos de explotación en 21 horas revelan una ventana de exposición estructural en el proceso de actualización del CMS más usado del mundo
VulnerabilidadesIA y seguridad
Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target code scans more precisely. The updates let businesses verify vulnerabilities and simulate exploits in an…
Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI.
