Actualizado hace 1 min
Resumen de 129 notas de ciberseguridad publicadas el 6 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (41), vulnerabilidades (38), ia y seguridad (25).
129 notas en castellano e inglés. Quitar filtros
VulnerabilidadesExploits y PoC
An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, threat intelligence firm Previdian has warned. The flaw (CVE-2026-123158), nicknamed sshole by Wakefield researcher Özgün Kültekin, was…
The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook.
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches.
IA y seguridadVulnerabilidades
Una IA de OpenAI ha identificado y explotado 948 vulnerabilidades de escalada de privilegios en el kernel de Linux mediante un sistema automatizado.
In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time.
On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.
VulnerabilidadesCiberataques y APT
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News…
Herramientas e investigaciónIA y seguridad
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test. The attack needs Dispatch, a Claude feature that lets people send tasks from their…
AI agents operated by cloud infrastructure and application hosting platform, Railway, have attempted to access a rival platform’s infrastructure, prompting the cloud provider’s leadership to acknowledge the incident on social media. Railway senior product engineer Jake Runzer…
Ciberseguridad
An update on Athena, and some unsolicited predictions on what's coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven't. I've spent the summer looking at what these models find, and the gap he describes between what…
VulnerabilidadesIA y seguridad
A memory-safety flaw in CPython can allow malicious AI model templates to escape code sandboxes and execute arbitrary code inside inference servers, according to security researchers at RunSybil. “By exploiting this vulnerability, attackers could gain a foothold inside servers…
Ciberseguridad
VulnerabilidadesCiberataques y APT
Tres instalaciones del organismo nacional de sangre sufrieron intrusiones en sus sistemas de monitoreo térmico la misma noche en que supermercados de ocho países europeos reportaron ataques similares
Exploits y PoCVulnerabilidades
Un pipeline experimental de IA identificó 2.308 hallazgos candidatos, reprodujo 1.724 vulnerabilidades y produjo exploits funcionales de escalación de privilegios a escala industrial.
Herramientas e investigaciónIA y seguridad
Microsoft documentó el uso de ARTEX, un framework ofensivo que permite a atacantes automatizar todo el ciclo desde la búsqueda de secretos en código público hasta el acceso a infraestructura cloud, eliminando la necesidad de intervención humana en cada paso.
Ciberseguridad
Durante 70 minutos, los atacantes distribuyeron código malicioso a través del canal oficial de actualizaciones de cPGuard, exponiendo credenciales raíz en 2.950 servidores Linux de hosting.
Ciberseguridad
The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the world, Layer3 Intel found. In a blog post, the threat intelligence firm reported that its proxy enumeration…
VulnerabilidadesIA y seguridad
OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The model is designed for authorized security testing of websites and applications. Vulnerability research and…
Ciberseguridad
Cyber Security Summit 2026 in Sarajevo will examine the practical security questions organisations face when a supplier, network device or critical digital service fails: what breaks, who decides, and how quickly can operations recover? A serious cyber incident does not need to…
