When Your Ransomware Negotiator Works for the Other Side
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
Actualizado hace 1 min
Noticias de ciberseguridad
Alertas de vulnerabilidades explotadas, exploits y pruebas de concepto, malware, ransomware e incidentes con contenido técnico, de los medios de ciberseguridad en castellano. Se actualiza solo durante todo el día.
559 notas en castellano e inglés. Quitar filtros
VulnerabilidadesCiberataques y APT
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code…
Filtraciones de datosIA y seguridad
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering (AML) controls were lacking. The bank was fined a whopping $1.2 billion for money laundering offences this week, after banking authorities identified a lax…
Ciberseguridad
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published Key Practices for Incident Readiness and Response in Super Intelligence…
Ciberataques y APTPhishing e ingeniería social
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login…
VulnerabilidadesExploits y PoC
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by…
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade…
Linux kernel gets a fix for a flaw that enabled attackers to escape VMs
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw…
AI Decision Models and Their Impact on AI SOC Platforms
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public…
Backdooring Open-Weight AI Models
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights…
VulnerabilidadesExploits y PoC
BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert
Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential vaults, and establish footholds for lateral…
IA y seguridadHerramientas e investigación
Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing best practice for AI development. In an…
Gestión incorrecta de mayúsculas y minúsculas en Wazuh Manager
Gestión incorrecta de mayúsculas y minúsculas en Wazuh Manager Vie, 16/10/2026 - 09:37 Aviso Recursos Afectados Wazuh Manager, versiones desde la 4.14.3, inclusive, pero anteriores a la 4.14.8. Descripción namd0ng y vikman90 han informado sobre una vulnerabilidad de severidad…
Múltiples vulnerabilidades en Next.js de Vercel
Múltiples vulnerabilidades en Next.js de Vercel Vie, 16/10/2026 - 09:37 Aviso Recursos Afectados Las siguientes versiones y configuraciones de Next.js:versiones desde la 16.0.0 hasta la 16.4.0, cuando se utiliza App Router con Cache Components y una función use cache devuelve…
Phishing e ingeniería socialVulnerabilidades
Omisión de autenticación mediante suplantación en Remote Support de BeyondTrust
Omisión de autenticación mediante suplantación en Remote Support de BeyondTrust Vie, 16/10/2026 - 09:37 Aviso Recursos Afectados BeyondTrust Remote Support, todas las versiones hasta la 26.2.3, inclusive. Descripción BeyondTrust ha publicado una vulnerabilidad de severidad…
Múltiples vulnerabilidades en Eclipse Milo de Eclipse Foundation
Múltiples vulnerabilidades en Eclipse Milo de Eclipse Foundation Vie, 16/10/2026 - 09:37 Aviso SCI Recursos Afectados Eclipse Milo, versiones:desde la 0.6.0 hasta la 1.1.4;algunas vulnerabilidades afectan únicamente a las versiones desde la 1.0.0 hasta la 1.1.4. Descripción…
Path traversal en Torrent Suite Software de Thermo Fisher
Path traversal en Torrent Suite Software de Thermo Fisher Vie, 16/10/2026 - 09:37 Aviso SCI Recursos Afectados Thermo Fisher Torrent Suite Software, versiones 5.18 y anteriores. Descripción Akanksha Raghvesh y Abhinav Agarwal han informado sobre una vulnerabilidad de severidad…
Múltiples vulnerabilidades en AIG-302 de Moxa
Múltiples vulnerabilidades en AIG-302 de Moxa Vie, 16/10/2026 - 09:37 Aviso SCI Recursos Afectados Moxa AIG-302 Series, versiones de firmware 1.4.0 y anteriores. Descripción Ievgen Bondarenko ha informado sobre 2 vulnerabilidades: una de severidad alta y una de severidad media…
Inyección SQL en Profleet de TSG
Inyección SQL en Profleet de TSG Vie, 16/10/2026 - 09:27 Aviso Recursos Afectados TSG Profleet versión 12.004.01. Descripción INCIBE ha coordinado la publicación de una vulnerabilidad de severidad crítica, que afecta a Profleet de TSG, proveedor de soluciones para el…
Ciberseguridad
Server-Side Request Forgery en la exportación a PDF de Wegow
Server-Side Request Forgery en la exportación a PDF de Wegow Vie, 16/10/2026 - 09:25 Aviso Recursos Afectados Funcionalidad de exportación a PDF de gráficos de ventas de entradas del portal backoffice.wegow.com. Descripción INCIBE ha coordinado la publicación de una…
VulnerabilidadesExploits y PoC
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS…
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations…
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal…