Ciberseguridad
Actualizado hace 1 min
Noticias de ciberseguridad del 10 de noviembre de 2026
Resumen de 203 notas de ciberseguridad publicadas el 10 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (76), vulnerabilidades (54), ia y seguridad (30).
203 notas en castellano e inglés. Quitar filtros
IA y seguridadVulnerabilidades
Railway revela cómo usaron IA para robar claves API y sumar 740.000 $ en cargos
Railway reveló que un atacante utilizó agentes de IA, un fallo en el sistema de construcción y errores de acceso en la nube para robar secretos de clientes. Esta vulnerabilidad permitió generar cargos no autorizados por un valor estimado de 740.000 dólares. El informe del 10 de…
Ciberataques y APTExploits y PoC
Hackers exploit trusted AWS access to breach multiple cloud environments
A threat actor used compromised identity and access management (IAM) credentials for a Qubole big data platform's AWS account to access and exfiltrate data from multiple customers' AWS environments.
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1,…
VulnerabilidadesExploits y PoC
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation.
VulnerabilidadesExploits y PoC
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in…
VulnerabilidadesIA y seguridad
Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)
Microsoft continues its AI-induced patch surge, addressing 1,260 different vulnerabilities this month. 68 of these vulnerabilities are considered critical. 167 of the vulnerabilities are Chromium issues affecting Microsoft Edge.
VulnerabilidadesExploits y PoC
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability.
The November 2026 Security Update Review
The penultimate month of 2026 bring with it the usual storm of patches from Microsoft and Adobe. I’ve been prototyping some new ways to display this data, but as always, I’m open to suggestions. Seriously – hit me up on Bluesky if you have any ideas. If you’d rather watch the…
.png)
Ivanti corrige fallos de seguridad en Endpoint Manager, EPMM, Sentry, CSA y Workspace Manager
Ivanti ha lanzado actualizaciones de seguridad para varios de sus productos, incluyendo Endpoint Manager, Endpoint Manager Mobile, Sentry, Cloud Services Application y User Workspace Manager. Estas correcciones abordan fallos que podrían permitir la ejecución remota de código,…
Filtraciones de datosHerramientas e investigación
AI Coding Agents Leak Thousands of Secrets to GitHub
A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.
Windows 11 KB5132061 & KB5131087 cumulative updates released
Microsoft has released the Patch Tuesday Windows 11 and cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs, and add new features.
VulnerabilidadesExploits y PoC
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. "REST cookie parsing…
Adobe Patches 110 Vulnerabilities Across 9 Products
Adobe has fixed vulnerabilities in AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content Credentials SDK, and Media Encoder.
Ciberseguridad
Firefox free VPN drops its 50GB launch cap until January 31
Mozilla has removed the data limit on the free VPN built into Firefox. Firefox users in supported regions get unlimited browsing on desktop and Android once they sign in with a Mozilla account. The VPN shipped with Firefox 149 in March with a 50GB monthly cap. That is plenty for…
Vanderbilt University reels following ransomware attack claimed by BYOD group
Some services began returning online Tuesday following a ransomware incident detected on Monday across Vanderbilt systems and applications.