1.145 casos · pág. 11/58
In an interview, Sekoia Chief Solution Officer David Bizeul argues that the next SOC will combine human analysts with AI agents. He discusses Gartner's Integrated Security Operations Center (ISOC) category, which is designed to challenge the traditional SIEM model by bringing SIEM, CTI, SOAR and AI agents into one platform. He expects ana…
Kaspersky's analysis of Operation FlashHole describes a Lazarus Group (North Korea-linked) cyberespionage campaign against South Korean organizations. It follows Operation SyncHole, which abused the related Cross EX product and hit at least six organizations (gbhackers.com), and is placed within the broader Cascade Hole activity. The earl…
Oracle released its October 2026 Critical Patch Update on October 20, the final quarterly update of the year. It delivers 1,295 security patches for 1,209 unique CVEs across 33 product families (tenable.com, securityweek.com). The patch count is higher than the CVE count because one CVE can appear in several product matrices (gbhackers.co…
GoDaddy revoked 404,607 SSL/TLS certificates effective October 21, 2026, after finding that some subscriber certificates were issued outside the profiles defined in its Certification Practice Statement (CPS) and Certificate Policy (CP). The incident is tracked in Mozilla's CA Certificate Compliance program as Bug 2082703, which remains op…
A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…
Attackers gained unauthorized access to the infrastructure of Onamae.com Desktop Cloud, a VPS service run by GMO Internet in Japan, and installed "unauthorized programs" in some customers' server environments. GMO confirmed the intrusion on October 20, 2026 (bleepingcomputer.com, gbhackers.com). It began rolling shutdowns of all Desktop C…
The United Arab Emirates says it is moving 50% of its government services to agentic AI as part of a transformation of its public service footprint. According to the Dark Reading report, the government says it is building a foundation of security and safety alongside the transition. The available text is only a short teaser, so it gives n…
A ZDNET consumer how-to article describes how to make Waze the default mapping app on a Google Pixel phone. The author says the August Android update removed the option to choose a default mapping app from the Default apps settings. The article describes no security incident, vulnerability or threat activity, and has no direct defender re…
ZDNET's Jack Wallen reviews GridCraft, a free, open-source, Rust-based spreadsheet application from ArtCraft that mimics Microsoft Excel. It runs natively on Linux, FreeBSD, macOS and Windows and supports XLSX files, more than 500 functions, charts and pivot tables. The reviewer notes weak template support, with no .xltx saving, and advis…
Brazilian outlet Olhar Digital describes a quishing fraud pattern in which criminals create or tamper with payment QR Codes so that victims' money goes to accounts the fraudsters control. The scheme appears in online shopping, in physical venues such as bars, restaurants, street markets and car parks, and in printed boletos. The Federação…
Aikido Security published a best-practices guide for defending against software supply chain attacks. It cites Aikido Intel data: about 7.5 million package versions analyzed in Q2 2026, with 19,500 malicious packages confirmed. The guide uses recent incidents to show which controls would have worked: the axios compromise, tj-actions/chang…
F5 Labs' October AI security roundup describes four incidents, two of which involved no attacker. Coding agents published more than 13,000 internal screenshots to public GitHub repositories (PixelLeak), and a SpaceXAI Grok Bot agent reportedly posted its owner's bank balances to a company Slack channel. The other two involved adversaries …
Episode 489 of the Smashing Security podcast covers several recent incidents, linked mainly through show-note references. The headline topic is a supply-chain attack on Ledger hardware crypto wallets, with reports of backdoored devices and funds being drained. Ledger reportedly asked sellers across Asia to halt sales and published guidanc…
This Aikido Security blog post ranks nine alternatives to KnowBe4 security awareness training and puts its own platform, Noon Security, first. It is vendor marketing, not incident reporting. The post says KnowBe4 simulations become familiar to employees, that email defense and AI governance are sold as separate products, and that its AI g…
Aikido Security published a vendor comparison of ten email security platforms for 2026. It ranks its own workforce platform, Noon Security, first, followed by Proofpoint, Mimecast, Abnormal AI, Microsoft Defender for Office 365, Check Point, IRONSCALES, Barracuda, Sublime Security and KnowBe4 Defend. The article describes no specific inci…
This is a business and finance item with no cyber threat content. Blackstone executive Jas Khaira, who leads the firm's San Francisco AI hub Blackstone N1 (BXN1), said at TechCrunch Disrupt that concerns over AI infrastructure debt are overblown. Rising interest rates, wider credit spreads and the roughly $50 billion in CoreWeave debt hav…
Airbnb has updated its policy to stop hosts from requiring guests to strip beds, wash and put away dishes, start laundry or remove trash before checkout. The rule applies to reservations made on or after November 20. The change responds to long-running guest complaints about burdensome checkout instructions and fines for not disposing of …
Meta said on its Q3 earnings call that its AI agent app Muse has more than 10 million users, with about 25% of those who set it up using it daily. Shopping is a leading activity, and over a quarter of engaged shoppers had an average purchase above $200. Muse uses the Plaid connector to enable agentic shopping and can also connect to users…
A TiDB breach is being used to illustrate flawed assumptions about cloud security. The article argues that cloud providers may be storing sensitive customer data without either the provider or the customer knowing it. When such a provider is breached, that hidden data is exposed. The excerpt gives no details on the breach itself, such as …
Russian satellite Kosmos 2612 carried out rendezvous and proximity operations against ICEYE-X36, a commercial synthetic-aperture radar (SAR) satellite owned by ICEYE's US subsidiary. The satellite may support Ukrainian military imagery. Per LeoLabs, it closed from 350 km to under 5 km on 15-16 October and stayed nearby, making small adjus…
