Actualizado hace 1 min
Noticias de ciberseguridad del 12 de noviembre de 2026
Resumen de 171 notas de ciberseguridad publicadas el 12 de noviembre de 2026. Los temas con más cobertura: vulnerabilidades (60), herramientas e investigación (33), malware (27).
171 notas en castellano e inglés. Quitar filtros
FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency.
Ciberseguridad
ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
The infrastructure, said to belong to APT38, contained footage used to fool victims over video calls.
Samaritano del software repara certificados indios dañados para bloquear anuncios en smart TVs
Un desarrollador aprovechó la filtración de claves privadas de la entidad eMudhra para bloquear anuncios en televisores Samsung. Mediante la falsificación de certificados, logró interceptar el tráfico HTTPS y reemplazar la publicidad por fotos personales. Aunque es una solución…
Google smart glasses privacy features cover wearers and the people around them
Google has built its Gemini-powered intelligent eyewear to stop taking photos and video when someone covers or tampers with the outward-facing recording light. Shahram Izadi, Google’s VP and GM of XR, laid out that safeguard along with face redaction, limits on data handling,…
Malware espía Gmail tras cambiar contraseña
Un nuevo malware permite a ciberdelincuentes mantener el acceso a cuentas de Gmail incluso después de cambiar la contraseña.
Phishing e ingeniería socialHerramientas e investigación
Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters
EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows computers. Each page showed what looked like a routine verification check. Behind it, the page quietly copied a PowerShell command to…
PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14
The PostgreSQL Global Development Group released PostgreSQL 18.7, 17.12, 16.16, 15.20 and 14.25 on November 12, fixing 52 security vulnerabilities and more than 140 other bugs. Most of those code execution bugs are memory errors or type confusion, where PostgreSQL handles a…
MalwareHerramientas e investigación
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians' computers and compromise additional managed networks.
Ciberseguridad
Getting Past the Post-Quantum Cryptography Discovery Phase
Most organizations haven't sorted out their cryptographic estate enough to even know where they'd start with post-quantum cryptography (PQC).
Ciberataques y APTHerramientas e investigación
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware.
Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
The Department of Justice and FBI announced two separate actions in response to North Korea-linked cryptocurrency theft operations.
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Cybercriminals using agentic pen-testing tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place right away.