Actualizado hace 1 min
Resumen de 188 notas de ciberseguridad publicadas el 9 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (90), vulnerabilidades (30), filtraciones de datos (21).
188 notas en castellano e inglés. Quitar filtros
Pro-Russian hackers published the personal information of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web, offering cryptocurrency rewards for additional details about them and their families.
Exploits y PoCVulnerabilidades
Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.
Ciberseguridad
Filtraciones de datosCiberataques y APT
Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.
Ciberataques y APTFiltraciones de datos
Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.
Ciberseguridad
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers.
Exploits y PoCCiberataques y APT
The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.
Two weeks ago, I attended the [un]prompted AI security conference in San Francisco. It was an excellent event: three days of very dense talks about all aspects of AI security. (My talk was about integrous AI, and I will post it when it is online.) AI security can be divided into…
VulnerabilidadesExploits y PoC
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102895 GPUStack Improper Authentication Vulnerability CVE-2026-116779 SignalWire FreeSwitch Code Injection Vulnerability…
Se han revelado dos fallos de alta gravedad en ModSecurity, el firewall de aplicaciones web (WAF) de código abierto compatible con Apache, IIS y Nginx. Estas vulnerabilidades podrían permitir la carga de archivos maliciosos y la provisión de errores que causen la caída del…
Three men allegedly used deepfakes of company CEOs and law firm attorneys to trick employees into wiring more than $129 million to accounts the group controlled, the Justice Department said. The indictment names the three as Jacob Soall, 41, Sharon Hazan, 54, and Guy Sheetrit,…
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in…
Ciberseguridad
Un fallo de sanitización en el plugin de documentación permite que colaboradores inyecten código malicioso que se ejecuta cuando editores o admins revisan contenido en espera.
Filtraciones de datosCiberataques y APT
Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.
El proyecto de billetera Lightning emitió una alerta de emergencia después de que un operador perdiera 0.023 bitcoin en retiros no autorizados.
Herramientas e investigaciónMalware
Una campaña que comenzó apuntando a jugadores de blockchain ahora se dirige a profesionales de ciberseguridad con proyectos falsos que prometen escaneo automatizado y análisis de logs
CVE-2026-104014 permite tomar control de cualquier usuario que haya verificado un código de recuperación sin completar el cambio de contraseña de inmediato
