Actualizado hace 1 min
Resumen de 55 notas de ciberseguridad publicadas el 11 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (26), exploits y poc (11), ciberataques y apt (10).
55 notas en castellano e inglés. Quitar filtros
Microsoft ha lanzado actualizaciones de seguridad para corregir una vulnerabilidad en Windows Active Directory (identificada como CVE-2026-119948). Este fallo permitiría a un atacante autorizado ejecutar código a través de una red y afecta a diversas versiones de servidores y…
MalwareHerramientas e investigación
Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave…
VulnerabilidadesInfraestructura crítica
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
VulnerabilidadesExploits y PoC
The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks.
We break down the Citrus Ransomware group's attacks: the attackers' TTPs and tooling, including VLESS traffic tunneling and LLM use, plus their links to Toy Ghouls.
VulnerabilidadesCiberataques y APT
Microsoft ha confirmado que unos hackers están aprovechando una vulnerabilidad de día cero en Outlook (CVE-2026-124194) para robar información de autenticación de Windows cuando un usuario abre un archivo malicioso. Este fallo de suplantación fue parcheado el 10 de noviembre de…
Ciberseguridad
Ubuntu 26.10 ships curl with certificate revocation checking built in. The check comes from upki, a project from the rustls developers. Ubuntu’s developers ran the same curl command on both releases: Ubuntu 26.04 accepted a revoked certificate and connected, while 26.10 refused…
Ciberseguridad
Red Hat has announced the general availability of Red Hat OpenShift 5, bringing built-in operational intelligence, zero trust security and a longer, predictable lifecycle to the hybrid cloud application platform powered by Kubernetes. Purpose-built to streamline complex…
Fortinet ha alertado sobre una falla crítica en FortiClient (identificada como CVE-2026-121529) que permite la ejecución remota de código en el equipo de un usuario. Con una puntuación CVSS de 9.1, el atacante solo necesita que la víctima visite un sitio web malicioso para…
Druva has announced Druva Agent Recovery, a new set of AI Resilience capabilities that keep the business running by quickly restoring AI agents when they are deleted or unexpectedly changed. Support begins with Microsoft Copilot Studio, Microsoft’s platform for building custom…
Ciberseguridad
Fingerprint has launched Fraud Score, a predictive fraud signal trained directly on customers’ own fraud outcomes and powered by Fingerprint’s device intelligence and machine learning models. Fraud Score learns the fraud types at each organization to help them identify fraud…
Ciberseguridad
Microsoft has fixed Outlook sign-in and mail delivery issues on Exchange Server systems after installing the October 2026 Windows Server security updates.
Orca Security has announced new capabilities to help organizations discover and secure AI-generated applications and autonomous agents across their cloud environments. The expansion builds on Orca’s AI Security offering, enabling security teams to uncover previously unknown AI…
VulnerabilidadesExploits y PoC
The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data.
Old access persists beyond its intended purpose and most organizations never monitor it. New access rights arrive within a day of a request. Old rights get revoked, if they get revoked at all, only upon prompting someone. Tools that assist employees in confirming, rotating and…
Herramientas e investigaciónFiltraciones de datos
Claude Code ha filtrado miles de contraseñas de GitHub debido a un fallo en la ejecución de comandos.
Escalada de privilegios en Iperius Backup de Enter Mié, 11/11/2026 - 09:46 Aviso Recursos Afectados Iperius Backup, versión 8.8.3 para Windows. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad alta que afecta a Iperius Backup de Enter, un…
Obsidian Security has announced its Runtime Policy Decision Engine, giving security teams centralized control over AI agent actions before they run. Building on Obsidian’s extensive AI agent discovery and governance coverage, the engine uses context about who is behind an agent,…
Intel and AMD disclose more than 200 vulnerabilities, including critical flaws in Intel TDX software and numerous AMD graphics bugs.
Múltiples vulnerabilidades en productos de B&R Mié, 11/11/2026 - 09:41 Aviso SCI Recursos Afectados mapp View, versiones anteriores a 6.6.0.B&R Live Utils, versiones anteriores a 3.0.2.B&R Linux 12, versiones anteriores a 1.1.1.PPC80, PPT80 y PFT51, versiones anteriores a…
