Actualizado hace 1 min
Noticias de ciberseguridad del 12 de noviembre de 2026
Resumen de 173 notas de ciberseguridad publicadas el 12 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (60), herramientas e investigación (33), ciberataques y apt (28).
173 notas en castellano e inglés. Quitar filtros
MalwareHerramientas e investigación
ScreenConnect para desplegar malware en 48 organizaciones
Atacantes comprometieron paneles de ScreenConnect alojados en la nube para desplegar un kit de herramientas personalizado llamado SCKit. Esta acción afectó a al menos 288 dispositivos gestionados en 48 organizaciones diferentes. Según la firma de seguridad Huntress, el ataque…
Roban 100GB de datos de Maersk
A.P. Moller–Maersk ha confirmado que unos hackers accedieron a un sistema informático antiguo y extrajeron datos. Un grupo autodenominado WhiteArmor afirma haber robado 100GB de registros logísticos. Aunque la empresa gigante del transporte marítimo reveló el incidente el 11 de…
Microsoft: Recent Windows updates cause SQL Server performance issues
Microsoft has confirmed that Windows updates released since the October 2026 Patch Tuesday are causing SQL Server performance and stability issues.
IA y seguridadHerramientas e investigación
AI found Linux kernel bugs that remained undetected for decades
A Microsoft research project combining AI agents with human security researchers uncovered 59 Linux kernel vulnerabilities, including bugs that had survived in production code for more than 20 years. While AI dramatically accelerated the discovery process, the researchers found…
VulnerabilidadesFiltraciones de datos
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The company has already applied mitigations against attacks between VMs, and between VMs and the host. Inside a VM, the flaws…
Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what can they access? A suspicious login might belong to an employee. An unusual API…
Siemens Desigo, Gridscale
View CSAF Summary On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write…
VulnerabilidadesInfraestructura crítica
Siemens RUGGEDCOM APE1808
View CSAF Summary Palo Alto Networks has published information on vulnerabilities in PAN-OS related to PHP2Shell vulnerabilities. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the…
VulnerabilidadesHerramientas e investigación
Siemens Building Automation and Energy Products
View CSAF Summary On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory…
Infraestructura críticaVulnerabilidades
Siemens Industrial Edge Management
View CSAF Summary Siemens is currently assessing the impact of Node2Shell (CVE-2026-111497) on Industrial Edge. Please check your Industrial Edge Management (IEM) setup: - No Management Applications installed: No action is required. Although the affected Brotli library is…
VulnerabilidadesExploits y PoC
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)
CVE-2026-102895 is a trivial authentication-bypass vulnerability. GPUStack is also an attractive target. It is open-source software that manages clusters of GPUs, which are typically used to run AI workloads. All versions of GPUStack prior to 2.2.0, which was released at the end…
Chrome corrige 83 fallos de seguridad, 5 críticos que permiten RCE
Google ha lanzado una actualización de seguridad para Chrome que corrige 83 vulnerabilidades, entre ellas cinco fallos críticos de tipo "use-after-free" que podrían permitir la ejecución remota de código. La actualización afecta a Windows, macOS y Linux, solucionando errores en…
VulnerabilidadesExploits y PoC
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
N-able on Thursday said it's investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2. "Based on our initial review, the server issue described depends on a non-default configuration in…
Phishing e ingeniería socialHerramientas e investigación
Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link came back clean, and the operator designed it that way on purpose. The Threat Research team at Material Security…
Grave fallo de pre-autenticación en MongoDB (CVE-2026-118383) puede provocar caídas en servidores con retardo durante el failover
Se descubrió una vulnerabilidad crítica (CVE-2026-118383) en MongoDB que permite a un atacante no autenticado provocar la caída del servidor mediante dos solicitudes específicas. El fallo ocurre cuando un servidor afectado es elegido como primario en un conjunto de réplicas,…
VulnerabilidadesExploits y PoC
PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution
PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325, carries a CVSS v4 score of 9.2 out of a maximum of 10.0. It…
Node.js corrige 16 fallos de seguridad que exponían claves TLS y tumbaban servidores
El proyecto Node.js ha lanzado correcciones para 16 vulnerabilidades de seguridad en sus versiones 22.x, 24.x y 26.x. De estas, siete son calificadas como graves, seis como medias y tres como bajas. Las versiones parcheadas son la v22.23.5, v24.22.3 y v26.13.1, actualización que…
Notion Customer Data Compromised in Fireworks AI Hack
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable.
Ciberseguridad
Microsoft Entra adds a seven-day safeguard against irreversible identity deletion
Microsoft Entra’s Hard Deletion Protection, now in preview, gives administrators a seven-day window to recover selected identities before they can be permanently erased. The feature is designed to help organizations respond to accidental or malicious deletion of critical…
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Darktrace researchers turned Claude Code into a remote-controlled implant in a lab test, steering the coding agent through the memory stores feature of Anthropic’s Claude platform and pulling a 1 GB file out through the Claude Files API. Once the agent was set up, every job and…
IA y seguridadFiltraciones de datos
Inside an AI Attack Against a US Retailer
When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.