Actualizado hace 1 min
Alertas de vulnerabilidades explotadas, exploits y pruebas de concepto, malware, ransomware e incidentes con contenido técnico, de los medios de ciberseguridad en castellano. Se actualiza solo durante todo el día.
647 notas en castellano e inglés. Quitar filtros
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."
IA y seguridadHerramientas e investigación
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland, because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I can represent the bugs at this level of volume, so…
VulnerabilidadesExploits y PoC
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker…
Ciberseguridad
Una campaña que utiliza la imagen de Frávega atrae compradores con ofertas falsas y los deriva a checkouts externos variables diseñados para robar datos de tarjetas.
IA y seguridadVulnerabilidades
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from…
VulnerabilidadesExploits y PoC
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605,…
VulnerabilidadesExploits y PoC
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. The following versions of Inductive Automation Ignition Software are affected: Ignition >=8.1.0|<=8.1.54 (CVE-2026-92817)…
OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability…
Boletín mensual de seguridad de Siemens de octubre de 2026 Mar, 13/10/2026 - 12:11 Aviso SCI Recursos Afectados Las vulnerabilidades afectan a diferentes versiones de los siguientes productos:Capital Embedded AR Classic 431-422, todas las versiones, y R20-11, anteriores a…
A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.
Ciberseguridad
Desbordamiento de búfer basado en montículo en PRI7000 de Bosch Mar, 13/10/2026 - 09:38 Aviso SCI Recursos Afectados Bosch Rexroth PRI7000:rama 1.11.17, versiones anteriores a 1.11.17.3;rama 1.11.18, versiones anteriores a 1.11.18.3;rama 1.11.19, versiones anteriores a…
La madrugada del 11 al 12 de octubre de 2026, varios supermercados franceses sufrieron un sabotaje que convirtió sus instalaciones frigoríficas en fuentes de calor. Según las informaciones publicadas, los atacantes manipularon los sistemas de control, prolongaron los ciclos de…
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
Ciberseguridad
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Filtraciones de datosExploits y PoC
For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach involving its Central Register of Persons after unauthorized individuals exploited…
Ciberseguridad
Fahmida Y. Rashid will keep the momentum going as she leads Dark Reading.
Hoy que es festivo en España, aprovecho para dejaros rápidamente la charla que di en la Ekoparty 22 titulada "Hacking in the age of AI after Mythos, Fable, Sol and Astra.", para que si tenéis algo de tiempo y queréis invertir estos 45 minutos en ver lo que conté - y cómo lo…
Before we begin, yes - it's confusing. There are more vulnerabilities with watchTowr IDs in this blog post than there are CVE IDs (assigned by PaperCut), due to PaperCut bundling vulnerabilities and then patch bypasses for those same vulnerabilities into singular CVE IDs.Paper!…
Durante años, la conversación sobre IA ofensiva se concentró en una pregunta casi infantil: "qué modelo sabe más hacking". La campaña observada contra entidades financieras de Corea del Sur a finales de septiembre y comienzos de octubre de 2026 obliga a cambiar esa pregunta. El…
Por qué Google Pixel obtiene sus propias actualizaciones de seguridad, qué vulnerabilidades corrigen y qué fallos solucionó Google en septiembre de 2026.
Pierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch isn't an option.
