Actualizado hace 1 min
Alertas de vulnerabilidades explotadas, exploits y pruebas de concepto, malware, ransomware e incidentes con contenido técnico, de los medios de ciberseguridad en castellano. Se actualiza solo durante todo el día.
612 notas en castellano e inglés. Quitar filtros
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following versions of Guangzhou Juan IoT Technology EseeCloud are affected: EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858,…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. The following…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite Software <=5.18 (CVE-2026-107777) CVSS Vendor…
VulnerabilidadesExploits y PoC
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a…
View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6…
Las brechas de seguridad que involucran a proveedores y terceros ganan peso en el panorama de amenazas en España. Según un informe de Prosegur Cybersecurity, el 22,5% de las brechas registradas en el país durante 2025 estuvieron relacionadas con terceros…
Múltiples vulnerabilidades en productos de Mitsubishi Electric Jue, 15/10/2026 - 09:40 Aviso SCI Recursos Afectados GENESIS, versiones 11.03 y anteriores.GENESIS64, versiones comprendidas entre la 10.97 y la 10.97.2 para CVE-2023-4863, y versiones 10.97.3 y anteriores para el…
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
La noticia de los frigoríficos hakeados ha dado la vuelta al mundo, y a la gente le llama la atención que algo así haya sucedido. La explicación es tan sencilla como sabemos desde hace muchos años. Un producto End of Life, es decir, fuera de soporte y mantenimiento, no tiene…
Ciberseguridad
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
VulnerabilidadesExploits y PoC
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
VulnerabilidadesInfraestructura crítica
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Ciberseguridad
Las noches, los fines de semana y los festivos son momentos especialmente sensibles para las empresas, ya que suele haber menos personal pendiente de sus sistemas. Los ciberdelincuentes conocen esta circunstancia y pueden aprovechar esas horas para ganar tiempo antes de ser…
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Ciberseguridad
Los delincuentes utilizan falsas ofertas de compra, servicios fraudulentos para cancelar contratos y esquemas de recuperación de dinero para engañar a quienes buscan deshacerse de un tiempo compartido.
Ciberseguridad
This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Quebec, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21. I’m speaking at the University of Toronto in Toronto,…
Infraestructura críticaIA y seguridad
In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.
VulnerabilidadesInfraestructura crítica
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability.
Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers. I am more optimistic than he is. That is, I have stronger faith in the over-engineering…
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent…
Ciberataques y APTNormativa y privacidad
Another IoT cyberattack, this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected. […] Normally, supermarket freezers go…
Ciberseguridad
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
