EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
Actualizado hace 1 min
Noticias de ciberseguridad
Alertas de vulnerabilidades explotadas, exploits y pruebas de concepto, malware, ransomware e incidentes con contenido técnico, de los medios de ciberseguridad en castellano. Se actualiza solo durante todo el día.
37 notas en castellano e inglés. Quitar filtros
VulnerabilidadesInfraestructura crítica
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Russian Influence Operation Widely Targets Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
North Korea Phishes Ukrainians for War Intel
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
IA y seguridadHerramientas e investigación
Anthropic Finds Ingredients for Future AI Worms
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
Ciberseguridad
No Identity, No Recovery: Cyber Resilience Starts With IAM
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Ciberseguridad
Passing the Baton: Dark Reading Names New Editor-in-Chief
Fahmida Y. Rashid will keep the momentum going as she leads Dark Reading.