Actualizado hace 1 min
Noticias de ciberseguridad del 11 de noviembre de 2026
Resumen de 148 notas de ciberseguridad publicadas el 11 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (49), ciberataques y apt (40), ia y seguridad (30).
148 notas en castellano e inglés. Quitar filtros
Claude Code detecta técnica para convertir neuronas inactivas en disparadores de malware
Claude Code ha descubierto una técnica denominada Lazarus, capaz de convertir un modelo de IA en un agente durmiente modificando menos de 10 neuronas inactivas. Este método implanta una puerta trasera oculta en los pesos del modelo, permitiendo que un activador externo obligue a…
Who Runs the Ransomware Group Qilin?
The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a…
Ciberseguridad
Hackeo de Arcus: el perp DEX pierde 2,23 millones de dólares
Ciberseguridad
Iran-backed network directed London attacks over FaceTime, US prosecutors say
An indictment unsealed Tuesday says the broader campaign, targeting Jewish and American sites, included attacks on synagogues in Belgium, the Netherlands and London, and U.S. bank buildings in Amsterdam and Paris.
RansomwareFiltraciones de datos
Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Maersk announced that a threat actor gained unauthorized access to a local legacy system inherited through an earlier acquisition and extracted data from it.
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation
Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems. The vulnerabilities are listed below - CVE-2026-108186 (CVSS score: 9.6) - An improper…
VulnerabilidadesExploits y PoC
Critical Xen Orchestra Flaws Exploited in Attacks
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Herramientas e investigaciónIA y seguridad
AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets
Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments. "In several recently observed…
Ciberataques y APTIA y seguridad
Hackers use AntiFox AI agents in AWS credential-theft attacks
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS environments.
Synology publica dos vulnerabilidades críticas en DSM
Synology ha publicado el aviso de seguridad Synology_SA_26_19 para corregir dos vulnerabilidades críticas en DiskStation Manager (DSM), el sistema operativo que usan sus servidores NAS. Los fallos permiten a un atacante remoto leer y escribir archivos arbitrarios sin necesidad…
eBPF Rootkits: Why Underground Actors Are Taking Notice
Linux eBPF rootkits can hide malicious activity and evade traditional detection methods without loading kernel modules. Flare reveals how these techniques are spreading through underground forums, where threat actors are sharing rootkit source code, tutorials, and exploits…
Ciberseguridad
The XG Files: Falcon C2 Flying Under The (Browser) Radar
We uncover Falcon C2, a browser-based threat framework targeting governments via malicious scripts, extensions, and the Antino implant.
Herramientas e investigaciónIA y seguridad
Kai extends Autonomous Defense Platform visibility to internet-facing assets
Kai has announced External Attack Surface Management (EASM), now available on the Kai Autonomous Defense Platform. The company also launched Kai Labs, an expanded research team focused on the hardest open problems where AI meets security. Most exposure management programs only…
