Actualizado hace 1 min
Noticias de ciberseguridad del 12 de noviembre de 2026
Resumen de 171 notas de ciberseguridad publicadas el 12 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (60), herramientas e investigación (33), malware (27).
171 notas en castellano e inglés. Quitar filtros
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
A search result isn't always safe. An access request isn't always harmless. And a familiar account doesn't always mean a familiar person is using it. Simple things to remember. Yet a surprising amount of this week's trouble starts right there. Attackers are using fake websites,…
RansomwareFiltraciones de datos
Europol desmantela servidores y dominios vinculados a Gootloader, CastleRAT y StealC
Europol y sus socios internacionales han desmantelado una infraestructura vinculada a los malwares Gootloader, CastleRAT y StealC, los cuales facilitan el robo de datos y ataques de ransomware. En la acción más reciente de la Operación Endgame, se neutralizaron 235 servidores y…
Exploits y PoCVulnerabilidades
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys…
Ciberseguridad
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders
CyberScoop is exclusively reporting on the letter to the Hill on the controversial snooping authorities under the Foreign Intelligence Surveillance Act.
International operation dismantles malware networks, exposes 6.4 million stolen credentials
The Operation Endgame action dismantled the loaders, remote access trojans and infostealers that give ransomware gangs their way into corporate networks.
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a…
European authorities take down SteaIC malware servers for second time this year
German authorities on Thursday said investigators traced the rebuilt network to the Virtualine bulletproof hosting provider, seized by the FBI in October, with the assistance of police in Frankfurt and the Dutch National High Tech Crime Unit.
Filtraciones de datosHerramientas e investigación
ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations
Abuse of an independent third-party tool led to breaches at ScreenConnect customers, confirmed the software's maker, ConnectWise. Cybersecurity researchers had spotted intrusions at nearly 50.
VulnerabilidadesCiberataques y APT
New Windows SignDrop zero-day gives hackers SYSTEM privileges
Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) has released a new Windows zero-day exploit that can let attackers gain SYSTEM privileges.
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler…
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
IA de Microsoft halla fallo crítico en Rust de hace una década
La IA de Microsoft ha detectado un error crítico oculto por más de 10 años en el lenguaje Rust, cuestionando su robustez en la gestión de memoria.
186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed…
Palo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears
Palo Alto Networks Unit 42 is reporting today that it has tracked a massive China-based attack leveraging the open-source AI penetration testing framework Cairn to autonomously conduct 25 operations against at least 19 organizations. The attackers weaponized Cairn by pairing it…
Herramientas e investigaciónIA y seguridad
Picus puts AI agents on the offensive with autonomous pentesting
Picus Security has announced Picus Autonomous Penetration Testing, an agentic pentesting capability that puts AI agents on the offensive: they think like attackers, chain real exploits toward an organization’s crown jewels, and prove what a breach would look like, under…
IA y seguridadFiltraciones de datos
Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors
Our analysis of how attackers used the open-source Cairn AI agent framework to autonomously breach semiconductor, defense and civic targets.
Herramientas e investigaciónIA y seguridad
Attackers breached 10 organizations with an open-source AI pentest framework
Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data at 10 of…
Your Endpoint Management Platform Could Be Your Biggest Security Risk
Endpoint management platforms can become powerful attack tools when compromised, allowing hackers to deploy malware, execute commands, and disrupt thousands of devices. Action1 explains how customer-controlled cryptographic authorization can prevent attackers from abusing…
Ciberseguridad
Hijacked email accounts complicate investigations into European bomb hoaxes
Bomb threats sent to thousands of schools across Europe this week came from a compromised email account at a Taiwanese university, the latest incident in a series of hoax threats that have targeted airports and newsrooms using messages sent from legitimate institutions.