Actualizado hace 1 min
Resumen de 177 notas de ciberseguridad publicadas el 5 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (63), vulnerabilidades (49), ia y seguridad (30).
177 notas en castellano e inglés. Quitar filtros
Pull up your SOC’s compromised account playbook and read through the first 15 minutes. Most SOCs begin their response by calling or messaging the user via Teams to ask whether the 2:00 am sign-in from an unfamiliar country was indeed them. Their subsequent actions depend upon…
Ciberataques y APTVulnerabilidades
Un fallo de seguridad detectado en APT, el gestor de paquetes que usan Debian y Ubuntu, permite ejecutar código con privilegios de root en los equipos afectados, como indican los informes publicados con fecha de 4 de noviembre por parte de Debian y Ubuntu. El problema compromete…
The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country. Describing the…
Ciberseguridad
Apple will begin checking iCloud content shared using the “Anyone with the link” option for harmful material in iOS, iPadOS, macOS, and visionOS 27.3 or later. When sharing content stored in iCloud, users can choose “Share a Link” or “Send a Copy.” Those who choose “Share a…
Múltiples vulnerabilidades en AuthPoint Gateway de WatchGuard Jue, 05/11/2026 - 09:24 Aviso Recursos Afectados AuthPoint Authentication Gateway, versiones desde 1.0 y anteriores a 7.6.0.CVE-2026-121639: afecta a instalaciones configuradas con un proveedor LDAP o Active…
Recuperación insegura de contraseñas en Building Cloud Services de WAGO Jue, 05/11/2026 - 09:24 Aviso SCI Recursos Afectados Building Cloud Services, versiones desde 7.19 y anteriores a 7.36.156. Descripción James Paremain ha informado sobre una vulnerabilidad de severidad…
Múltiples vulnerabilidades en productos de Phoenix Contact Jue, 05/11/2026 - 09:24 Aviso SCI Recursos Afectados FL WLAN 1x2x/23xx.FL SWITCH 2xxx.FL NAT 2xxx.FL SWITCH TSN 23xx.FL SWITCH 59xx.TC ROUTER 4xxx.FL TIMESERVER NTP.FL WLAN 11xx/21xx.TC EXTENDER x00x.SCX xPOE.…
Escritura fuera de límites en Advanced Batch Management de ABB Jue, 05/11/2026 - 09:24 Aviso SCI Recursos Afectados Advanced Batch Management (ABM), versiones 1.0, 1.1, 1.1b, 1.2 y 1.2.1, cuando incorporen una versión vulnerable de Node.js. La versión instalada puede variar…
El servicio nacional de sangre de Francia (EFS) sufrió un incidente de ciberseguridad tras un ataque a su proveedor de refrigeración, lo que alteró las temperaturas de almacenamiento en tres instalaciones. Afortunadamente, los sistemas de alarma detectaron el problema…
VulnerabilidadesExploits y PoC
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without…
Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview, Zohaib Ahmed, CEO of Resemble AI explains how agents arrive as declared, undeclared or disguised traffic, and why binary bot…
IA y seguridadHerramientas e investigación
Nearly nine in ten healthcare leaders say security or compliance staff always or usually review AI-written code that touches patient data before it goes live, and seven in ten have still found an AI-built tool handling that data without IT or security knowing, according to…
Companies are increasing their cybersecurity budgets, with AI security and governance the top priority for additional spending, followed by cloud security, according to DNSFilter’s The Cost of Shadow AI report. Some 74.5% of respondents reported a larger cybersecurity budget…
VulnerabilidadesExploits y PoC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in…
