Actualizado hace 1 min
Noticias de ciberseguridad del 10 de noviembre de 2026
Resumen de 202 notas de ciberseguridad publicadas el 10 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (76), vulnerabilidades (53), ia y seguridad (30).
202 notas en castellano e inglés. Quitar filtros
Ciberseguridad
ISC Stormcast For Wednesday, November 11th, 2026 https://isc.sans.edu/podcastdetail/10174, (Wed, Nov 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Tres campañas de espionaje vinculadas a China conectadas mediante el ecosistema del malware Sparrow
Check Point Research identificó a CopperDragon, una entidad vinculada a China que suministra herramientas de ciberespionaje a través del ecosistema Sparrow. Esta operación se divide en tres grupos: SilentDelivery, OceanGate y DarkWire, los cuales atacan infraestructura crítica,…
Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for November 2026, which includes 1328 vulnerabilities affecting a range of products, including 60 that Microsoft marked as "critical." Out of 60 "critical" vulnerabilities, 45 are remote code execution (RCE) vulnerabilities.
VulnerabilidadesExploits y PoC
[remote] Ruflo MCP Bridge 3.16.2 - Remote Code Execution
Ruflo MCP Bridge 3.16.2 - Remote Code Execution
Exploits y PoCVulnerabilidades
Barracuda confirma explotación de fallos en gateway de correo con acceso root
Barracuda ha confirmado la explotación activa de fallos de seguridad en su Email Security Gateway (ESG). Los atacantes podrían combinar dos vulnerabilidades (incluyendo la CVE-2026-116606) para obtener acceso de root sin necesidad de iniciar sesión. Según la empresa, este…
Ciberseguridad
CISA director pick already drawing concern from Hill Dems over Palantir connection
Others touted Michael LoSapio as a fit for the job due to his technical credentials as CISO for the company.
VulnerabilidadesExploits y PoC
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to prioritize fast.
IA y seguridadFiltraciones de datos
Railway breach leads to $740,000 in fraudulent AI charges
Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces.
Exploits y PoCVulnerabilidades
N-able N-central gets emergency fix two days after 33 exploits published
N-able has taken its hosted N-central remote monitoring and management (RMM) platform offline worldwide and shipped an emergency hotfix after a security researcher released 33 zero-day exploits for the software, including attack chains that could let unauthenticated attackers…
Ciberataques y APTIA y seguridad
Identifican una nueva campaña de Lazarus APT que utiliza IA y cifrado poscuántico
Durante el Security Analyst Summit celebrado en Bali (Indonesia), el Global Research and Analysis Team (GReAT) de Kaspersky presentó los resultados de su investigación sobre Operation FlashHole, una campaña de ciberespionaje atribuida al grupo APT Lazarus. Activa al menos desde…
Las tendencias en redes y ciberseguridad que definirán 2027
La rápida adopción de la IA, no solo por parte de organizaciones en todo el mundo, sino también por ciberdelincuentes, está haciendo surgir una amplia gama de retos. Expertos de Infoblox han identificado una serie de tendencias clave que están redefiniendo las estrategias de…
Patch Tuesday - November 2026
Microsoft is publishing 1,092 own-product vulnerabilities on November 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Until a few months ago, these volumes would have been unimaginable, but if anything, this month feels like a slight reprieve. The jury is still…
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month's Patch Tuesday addresses 63 critical flaws -- including a zero-day in Microsoft Outlook -- and…