Actualizado hace 1 min
Noticias de ciberseguridad del 11 de noviembre de 2026
Resumen de 148 notas de ciberseguridad publicadas el 11 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (49), ciberataques y apt (40), ia y seguridad (30).
148 notas en castellano e inglés. Quitar filtros
Git fixes six vulnerabilities, including code execution during recursive clones
The Git project has released security updates addressing six vulnerabilities that could allow attackers to execute code, write to unintended files or cause memory corruption when Git processes malicious repositories or other specially prepared input. Code execution during…
Ciberseguridad
Blind trust: stealing credentials through CSP
Content Security Policy is supposed to be the safety net that stops an HTML injection from turning into XSS. Usually it works. But sometimes it doesn't, because the policy allows-lists a domain that h
Ciberataques y APTExploits y PoC
Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits
Threat actors have been observed targeting Qlik Sense servers to unsuccessfully deliver PowerShell reverse shell commands against multiple environments in October 2026. Cynet's CyOps and Research teams said they identified the suspicious activity in October 2026 against several…
VulnerabilidadesExploits y PoC
Asus, Zoom Release Security Patches
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Embed Security lets analysts teach its AI SOC Platform how to investigate
Embed Security announced new capabilities that let security teams teach Embed how they investigate, what matters in their environment, and how to improve their detections. With customer-built iSteps, expanded NoiseIQ Memories, and Detection Engineering, organizations can extend…
Más de 35.000 aplicaciones creadas con Grok quedan expuestas en la red, filtrando datos confidenciales y contraseñas
La empresa Claroc descubrió que la mayoría de las aplicaciones creadas con Grok son accesibles públicamente, exponiendo datos internos de X, SpaceX y otras organizaciones. El problema radica en que la opción de acceso público viene seleccionada por defecto y las direcciones son…
Git corrige 6 vulnerabilidades de seguridad que permitían ejecutar código malicioso
El proyecto Git ha solucionado seis vulnerabilidades, destacando una falla crítica que permitía a repositorios maliciosos ejecutar código durante la clonación recursiva. Las otras cinco vulnerabilidades estaban relacionadas con la corrupción de memoria y escrituras de archivos…
VulnerabilidadesExploits y PoC
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Poland shuts down government services platform ePUAP following cyberattack
The attack targeted a nationwide system that allows users to submit official documents, communicate with government agencies and complete administrative procedures online.
Ciberseguridad
Britain, France set out first guidelines for commercial hacking firms
The guidelines call on businesses that develop, sell or finance CCICs to vet their customers, establish technical safeguards against misuse and to maintain systems for monitoring and reporting abuses.
N-able releases security hotfixes for zero-day vulnerabilities
N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed over the weekend and forced it to take vulnerable hosted environments offline.
Rewriting less than 10 neurons in an LLM can turn it into a sleeper backdoor
Microsoft researchers have found that rewriting fewer than 10 rarely used neurons in an open-weight AI model can turn any agent built on it into a sleeper backdoor that runs an attacker’s commands on cue, with no retraining required. Researchers from Microsoft Research and…
Ciberseguridad
Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices
The Series C round will fund international expansion and more autonomous features for the firm’s device security platform.
Filtraciones de datosHerramientas e investigación
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords
Of the 37,571 Grok-built apps that security company Claroc found online, 35,578 were open to anyone without a sign-in, the researchers said yesterday. They included 24 apps built by staff at the social network X and at SpaceXSI, the company that makes the Grok AI assistant. Most…
VulnerabilidadesIA y seguridad
Fortinet Patches Nearly 100 Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.