Ciberseguridad
NIST: Solo Shouldn't Mean Less Secure
New guidance provides a basic framework for less-technical solo business owners, but it may miss the mark on how to secure technology that requires no human oversight.
Actualizado hace 1 min
Noticias de ciberseguridad del 9 de noviembre de 2026
Resumen de 188 notas de ciberseguridad publicadas el 9 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (90), vulnerabilidades (30), filtraciones de datos (21).
188 notas en castellano e inglés. Quitar filtros
Un fallo crítico sin parche afecta al plugin Confection de WordPress
Un fallo crítico detectado en el plugin de WordPress Confection Cable permite a cualquier persona, sin necesidad de iniciar sesión, ejecutar código en el servidor que aloja la web. El problema, registrado como CVE-2026-115252, tiene una puntuación CVSS de 10.0, la máxima…
IA y seguridadNormativa y privacidad
The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC workplace: data literacy, agent governance, and communication.
Herramientas e investigaciónFiltraciones de datos
ARTEX goes from pentesting tool to attacker staple in three months
A security researcher’s AI agent breached an internal sales application used by WorkOS’s go-to-market teams, the developer platform provider confirmed on Friday. “The researcher was conducting cybersecurity benchmark evaluations using ARTEX when their agent escaped its isolated…
Hackers abuse refrigeration controllers to send spam and route proxy traffic
Internet-exposed refrigeration controllers used in supermarkets and cold storage facilities are being hijacked and turned into infrastructure for a suspected spam botnet and proxy services, SecurityScorecard has found. The report follows a string of attacks against European…
FBI agent stole $2.5 million in crypto from hackers under investigation
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation.
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called PapRAT. "PapRAT has both C++ and Rust…
CISA advierte dos fallos críticos en PowerSYSTEM Center permiten acceso no autorizado e inyección SQL
CISA ha advertido sobre dos fallos críticos en PowerSYSTEM Center (con una puntuación CVSS de 9.0) que podrían permitir a usuarios autenticados acceder a recursos de administrador o ejecutar comandos de base de datos no autorizados. Estas vulnerabilidades afectan principalmente…
IA y seguridadCiberataques y APT
Alleged AI-aided cyberattack exploits assistant interface to breach German web host
Hackers allegedly assisted by AI breached a German web hosting company through a tool designed to allow customers to connect AI assistants to their accounts, the company disclosed.
Filtraciones de datosCiberataques y APT
Revolve Puts Data Breach Victim Count at 1.5 Million
Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.
Ciberseguridad
US bans MEXC crypto exchange over sanctions evasion, cybercrime links
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs.
Ciberataques y APTVulnerabilidades
⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become part of the attack. Elsewhere, attackers…
Ciberseguridad
PyPI makes release attestations easier to find with new security tab
The Python Package Index (PyPI) has added a security tab to its project pages, giving developers a place to check where individual release files came from. How PyPI shows where release files came from The Security tab shows whether release files have digital attestations, which…