Actualizado hace 1 min
Noticias de ciberseguridad del 12 de noviembre de 2026
Resumen de 171 notas de ciberseguridad publicadas el 12 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (60), herramientas e investigación (33), malware (27).
171 notas en castellano e inglés. Quitar filtros
Herramientas e investigaciónMalware
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them.
Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams
Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack.
Fallo de seguridad en AWS MCP Gateway permite acceso a redes internas y credenciales cloud
AWS ha corregido una vulnerabilidad de solicitud de falsificación del lado del servidor (SSRF) en mcp-gateway-registry (CVE-2026-125926). Este fallo, que afecta a las versiones 1.0.3 hasta la 1.34.0, podría permitir que un atacante autenticado acceda a servicios internos a…
CVE-2026-119618 | Apache HTTP Server mod_http2 Race Condition Remote Code Execution Vulnerability
CVE-2026-119618 is a critical race condition in Apache HTTP Server's mod_http2 that can lead to remote code execution without credentials. Fixed in 2.4.71. See affected versions, mitigations, and the NodeZero Rapid Response test.
Ciberseguridad
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report connectivity problems worldwide.
RansomwarePhishing e ingeniería social
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are re-targeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.
Exploits y PoCVulnerabilidades
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed "4EverAble2Shell" to compromise servers and deploy cryptocurrency miners, with researchers reporting at least 21 affected systems, including 19 running the company's latest security…
Citrix corrige 12 vulnerabilidades en NetScaler y Secure Access Client, incluyendo un salto de autenticación
Citrix ha lanzado parches críticos para NetScaler ADC, Gateway y Console para corregir múltiples vulnerabilidades de desbordamiento de memoria y autenticación. Estos fallos podrían permitir denegaciones de servicio (DoS), saltos de autenticación o escalada de privilegios. La…
IA y seguridadHerramientas e investigación
United to block customers from using AI agents, citing cyber threats
“Sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases" and more, United Airlines said.
VulnerabilidadesExploits y PoC
Apache HTTP Server patches critical HTTP/2 remote code execution flaw
A critical vulnerability in the HTTP/2 module of Apache HTTP Server could be exploited by an unauthenticated attacker to obtain remote code execution (RCE).
Ciberseguridad
Never be afraid to ask questions
Amy reflects on a formative college anthropology course that taught her the power of asking questions to bridge cultural gaps.
Grave fallo en Red Hat Quay permite a atacantes leer y sobrescribir todas las imágenes privadas de un registro
Red Hat detectó dos fallos críticos en Quay que permiten a atacantes leer, modificar o eliminar imágenes de contenedores privadas y robar credenciales de cuentas robot. Estas vulnerabilidades afectan a casi todas las versiones y pueden comprometer pipelines de CI/CD en…
Shipping giant Maersk says recent cyber incident affected legacy system
The incident is the latest in a string of attacks on ports and other shipping organizations worldwide, with Brazil’s largest port hit with ransomware last week.
Ciberseguridad
Self-hosted Claude Managed Agents keeps agent credentials in your environment
Anthropic has released a self-hosted version of Claude Managed Agents. Companies can run the agent harness, sandboxes, credentials, and session history in their cloud or on-premise. The option opened as a private beta on November 12, and customers request access through their…