Actualizado hace 1 min
Noticias de ciberseguridad del 12 de noviembre de 2026
Resumen de 175 notas de ciberseguridad publicadas el 12 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (60), herramientas e investigación (33), ciberataques y apt (28).
175 notas en castellano e inglés. Quitar filtros
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are…
Bots pose as AI agents, AI agents pose as humans, and defenses believe both
Over one week in October, an online marketplace took 414,210 visits from traffic wearing the name of a widely used consumer AI agent. Every visit went for the sign-in page, and every one returned errors. Behind the name was a credential stuffing operation, with attackers running…
Ciberseguridad
ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an advisory posted on its site, the company said there is no evidence that the incident involves a compromise of its…
Vulnerabilidades de Escritorio Remoto de Windows permiten ejecutar código en red
Microsoft ha lanzado actualizaciones de seguridad para corregir cuatro vulnerabilidades en el Cliente de Escritorio Remoto de Windows. Estos fallos, publicados el 10 de noviembre de 2026, podrían permitir que atacantes ejecuten código mediante conexiones de red o acceso local,…
