Actualizado hace 1 min
Resumen de 148 notas de ciberseguridad publicadas el 11 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (49), ciberataques y apt (40), ia y seguridad (30).
148 notas en castellano e inglés. Quitar filtros
We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s separate from any human’s. That was true for us at Token as well. Then, we built an agent that broke all three by default.…
Rubrik has announced cyber recovery capabilities for DevOps platforms Microsoft Azure DevOps and GitHub. With built-in anomaly detection, blast radius investigation, and surgical recovery, organizations will be able to detect suspicious activity on their code, instantly scope…
Ciberseguridad
The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys. Each intermediate CA has its own private key, which the company uses to sign the…
Ciberseguridad
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other secrets, according to findings by GitGuardian. The code security firm identified 31,088 distinct secrets in Claude Code’s…
Múltiples vulnerabilidades en productos de Ivanti Mié, 11/11/2026 - 12:52 Aviso Recursos Afectados Ivanti Endpoint Manager (EPM), versión 2024 SU7 y anteriores.Ivanti Cloud Services Appliance (CSA), exclusivamente la versión 5.0.8. Descripción Ivanti ha publicado 3…
Founded by three ex-IDF Unit 8200 intelligence officers, Bay is launched to provide a control plane for AI agents.
Ciberseguridad
Ciberseguridad
Microsoft says the November 2026 cumulative updates resolve USB audio issues plaguing Windows users who have installed security updates released since September.
Created by Zerto and Kashya veterans, the startup has launched a platform designed to recover whole cloud applications.
Microsoft ha publicado su Patch Tuesday de noviembre de 2026 con un nuevo lote masivo de actualizaciones de seguridad: 1.235 vulnerabilidades corregidas, entre ellas un zero-day de Microsoft Outlook que ya se explota en ataques reales para robar credenciales. Si usas Windows 10…
VulnerabilidadesExploits y PoC
Microsoft lanzó parches para 1,259 vulnerabilidades en diversos productos, incluyendo Windows y Office. Destaca un fallo en Outlook que ya está siendo explotado y permite el robo de identidades mediante el envío de archivos maliciosos. Debido a este riesgo, la CISA ha exigido a…
MalwareHerramientas e investigación
Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave…
VulnerabilidadesInfraestructura crítica
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Microsoft ha lanzado actualizaciones de seguridad para corregir una vulnerabilidad en Windows Active Directory (identificada como CVE-2026-119948). Este fallo permitiría a un atacante autorizado ejecutar código a través de una red y afecta a diversas versiones de servidores y…
VulnerabilidadesExploits y PoC
The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks.
We break down the Citrus Ransomware group's attacks: the attackers' TTPs and tooling, including VLESS traffic tunneling and LLM use, plus their links to Toy Ghouls.
