Actualizado hace 1 min
Noticias de ciberseguridad del 9 de noviembre de 2026
Resumen de 188 notas de ciberseguridad publicadas el 9 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (90), vulnerabilidades (30), filtraciones de datos (21).
188 notas en castellano e inglés. Quitar filtros
AI doesn’t have to go rogue to break the world
AI systems are learning to exploit loopholes in everything from software to tax law. The biggest threat may not be malicious intent, but machines doing exactly what we ask.
VulnerabilidadesExploits y PoC
Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies…
VulnerabilidadesExploits y PoC
Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)
SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication. With no workarounds listed, the company has urged admins to patch quickly. About CVE-2026-19868…
Veeam advierte: fallo crítico en kernel de Linux podría colapsar backups y recuperaciones
Veeam ha alertado sobre una vulnerabilidad crítica en el núcleo de Linux (CVE-2026-98432) con una puntuación CVSS de 9.8. Este fallo de tipo "use-after-free" en la configuración de conexiones TCP/IPv4 podría provocar corrupción de memoria o la denegación del servicio en sus…
Filtraciones de datosNormativa y privacidad
Over 3 Million People Hit by Frontline Education Data Breach
Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.
$133 million stolen from French bank via exploited service provider
Attackers siphoned an estimated $133 million from Crédit Mutuel Arkéa by using the bank’s own account to wire money to other banks, from where it was possibly converted into cryptocurrency. The French cooperative banking group, which has €211.5 billion in total assets and more…
LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out. One operator…
Explotan vulnerabilidad de autenticación SSHole en OpenSSH
Atacantes han comenzado a explotar la vulnerabilidad de bypass de autenticación SSHole que afecta a ciertos servidores OpenSSH. Este fallo permite que atacantes remotos accedan a algunas cuentas de Linux que tienen las contraseñas deshabilitadas mediante el envío de una…
Filtraciones de datosCiberataques y APT
Smartbox sufre un ciberataque con filtración datos personales
Smartbox sufrió un ciberataque el 3 de noviembre de 2026, comprometiendo nombres y correos electrónicos de sus clientes, aunque descarta la filtración de contraseñas o datos bancarios.
Ciberseguridad
Product showcase: What the Malwarebytes Claude connector reveals about unexpected texts
The Malwarebytes connector for Claude checks suspicious links, phone numbers, and email addresses without leaving the chat. You can paste a link or upload a screenshot of a message, then ask Claude to check the details against Malwarebytes’ threat database. The connector works…
Ciberseguridad
OpenSSH SSHole: ya explotan el fallo de autenticación que permite saltar contraseñas
Varios atacantes han empezado a explotar SSHole, el fallo de OpenSSH que permite saltarse la autenticación en ciertas configuraciones Linux. El SANS Internet Storm Center detectó los primeros intentos claros el 5 de noviembre, con contraseñas kilométricas hechas de caracteres…
IA y seguridadCiberataques y APT
Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient data from 2018, including ECG readings and…
Ciberseguridad
The code and the court: Why your email security thinks like Napoleon
In 1804, Napoleon gave France a code that much of the world still runs on. The Code civil replaced a tangle of local customs with a single written statute: orderly and knowable. In that tradition, the judge’s job, in Montesquieu’s phrase, is to be the mouth of the law, nothing…
Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack
Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.