Actualizado hace 1 min
Resumen de 149 notas de ciberseguridad publicadas el 11 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (49), ciberataques y apt (40), ia y seguridad (30).
149 notas en castellano e inglés. Quitar filtros
VulnerabilidadesIA y seguridad
Just over a year ago, before advanced AI models began discovering software vulnerabilities at a nearly unmanageable scale in the so-called vulnpocalypse, three industry experts pioneered the concept of “VulnOps.” VulnOps, as envisioned by Heather Adkins, Gadi Evron, and Bruce…
VulnerabilidadesExploits y PoC
Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53…
VulnerabilidadesExploits y PoC
Microsoft lanzó una masiva actualización de seguridad corrigiendo 1,094 errores, destacando una vulnerabilidad de Outlook ya explotada por atacantes. El reporte alerta sobre amenazas críticas de ejecución remota de código sin interacción del usuario en servicios de Exchange y…
VulnerabilidadesExploits y PoC
The security defects could allow attackers to bypass authorization and gain root access to devices.
IA y seguridadFiltraciones de datos
AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday. It has promised to pay those charges itself when an AI provider will not…
MalwareHerramientas e investigación
An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, without retraining the model, Microsoft researchers have shown. When a chosen trigger appears, the model outputs an attacker's command, which an agent using that model would run with…
Ciberseguridad
In this Help Net Security interview, Aurimas Bakas, CEO of Copla, talks about what the EU Cyber Resilience Act‘s reporting duties mean for manufacturers. He explains why companies need a register of every product version still in use, why boards focus on CE marking while…
VulnerabilidadesExploits y PoC
Apple has patched Bluetooth and AirPlay pairing flaws, iMessage vulnerabilities, and an exploited Brotli bug across its platforms.
In this Help Net Security video, Ken Leeser, CISO at Y Meadows, explains how security leaders can get more protection out of a flat budget. He argues a frozen budget gives teams a reason to cut waste and simplify their security stack. The first step is an inventory of every tool…
VulnerabilidadesExploits y PoC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Details of…
Forty-five percent of surveyed IT service management providers in the EU took more than three months to apply critical patches to critical systems, according to ENISA’s 2026 assessment of cybersecurity in the Union. Attackers can turn a newly disclosed flaw into a working attack…
Nearly half of security teams at organizations with 5,000 or more employees close or deprioritize vulnerability findings without fully verifying them, ProjectDiscovery found, and the reason they give is time. Here’s the catch. Among teams that skip full verification, 57% say at…
Ciberseguridad
LaLiga intentó frenar las IPTV piratas, pero un fallo en los bloqueos dinámicos provocó la caída del foro oficial de Movistar al compartir direcciones IP.
VulnerabilidadesExploits y PoC
Un exploit público permite que apps maliciosas lean archivos de otras aplicaciones, incluyendo credenciales de wallets cripto, en las dos versiones más recientes del sistema operativo de iPhone.
Infraestructura críticaVulnerabilidades
Agencias del gobierno estadounidense advierten sobre una campaña global que explota controladores sin parches para alterar configuraciones críticas de cadena de frío.
Exploits y PoCFiltraciones de datos
Criminals are using leaked exploit kits to break into vulnerable iPhones, according to iVerify’s 2026 Advanced Mobile Threat Report. Attacks delivered through ads and compromised websites have reached employees who use phones for work. DarkSword chains together several software…
There’s a new flavor of cereal on the table, but not the appealing kind, particularly for defenders. A new report from global security company ESET describes a “sophisticated, modular, and tightly interconnected” toolset designed to run on compromised Exchange servers for…
Ciberseguridad
Google Fi now moves customers’ phones onto Wi-Fi hotspots and between two 5G networks without the user going into settings or logging in. Google calls the setup a super network, and it powers all Fi plans on eligible Pixel phones. Wi-Fi Auto Connect+, a Fi feature that now…
Ciberseguridad
Active Roles 8.6: Cumulative security, feature and administration upgrades One Identity has introduced Active Roles 8.6, strengthening secure and streamlined Active Directory administration with cumulative platform improvements, expanded API capabilities and greater…
Ciberseguridad
Commvault on Tuesday rolled out its answer to enterprise backup restoration nightmares. Called Recovery Studio, the vendor promised that the product would “orchestrate the recovery of applications, identities, configurations, infrastructure dependencies, and datasets together in…
