Actualizado hace 1 min
Noticias de ciberseguridad
Alertas de vulnerabilidades explotadas, exploits y pruebas de concepto, malware, ransomware e incidentes con contenido técnico, de los medios de ciberseguridad en castellano. Se actualiza solo durante todo el día.
506 notas en castellano e inglés. Quitar filtros
EE.UU. prohíbe DeepSeek en agencias federales — 60 días para purgar sistemas
La orden del Departamento de Seguridad Nacional cita vulnerabilidades críticas y servidores en China como amenaza a datos gubernamentales sensibles.
MalwareHerramientas e investigación
Operation FlashHole: Lazarus breaks security, defies control
Kaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and abuse of CrossWeb EX financial security software.
Ciberseguridad
ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny
DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American labs. The US Secretary of Homeland Security has issued an order banning all DeepSeek products and services from federal…
IA y seguridadNormativa y privacidad
UK FCA exec wants to require disclosure of ‘significant AI failures and near-misses’
When UK Financial Conduct Authority (FCA) Chief Data Officer Jessica Rusu gave a speech on Monday advocating that UK companies be required to report “significant AI failures and near-misses,” she added to the drumbeat of demands for some kind of regulatory control over…
Stolen UpdraftCentral keys used to backdoor WordPress sites
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites.
Mozilla, Google, Apple block compromised eMudhra CA certificates
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites.
[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover
Keycloak 26.7.2 - Unauthenticated Account Takeover
[webapps] Automotive Shop Management System 1.0 - SQLi
Automotive Shop Management System 1.0 - SQLi
[remote] Edimax BR-6478AC firmware v2.20 - authenticated command injection
Edimax BR-6478AC firmware v2.20 - authenticated command injection
[remote] Exasol Database 7.1.30 - command execution
Exasol Database 7.1.30 - command execution
[remote] Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
[remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root