ZetTaNews
Vulnerabilidades, IOCs, alertas y noticias del mundo de la ciberseguridad. Actualizado por el equipo SOC de ZetTateK.
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The compa...
12 nov. 2026THE HACKER NEWSWebinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or...
12 nov. 2026THE HACKER NEWSNew N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
N-able on Thursday said it's investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running v...
12 nov. 2026THE HACKER NEWSCalendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link ...
12 nov. 2026THE HACKER NEWSPTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution
PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code ...
12 nov. 2026DARK READINGInside an AI Attack Against a US Retailer
When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
12 nov. 2026THE HACKER NEWSCritical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover
A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if ...
12 nov. 2026THE HACKER NEWSNode.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data
A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime's built-in HTTP/2 support on the 24.x and 26.x release lines. ...
12 nov. 2026KREBS ON SECURITYWho Runs the Ransomware Group Qilin?
The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three mon...
11 nov. 2026CISACISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20320 Cisco Bro...
10 nov. 2026BLEEPING COMPUTERMetaMask says recent attack didn’t affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. [...]
06 nov. 2026INFOSECURITY MAGAZINEHalf of Security Leaders Report Sensitive Data Exposure Through AI Tools
BlackFog found a lack of visibility into data being shared with AI tools, even those approved for use in the enterprise
06 nov. 2026BLEEPING COMPUTERFBI, CISA warn of cyberattacks targeting refrigeration systems
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilag...
05 nov. 2026BLEEPING COMPUTERFake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platfo...
05 nov. 2026BLEEPING COMPUTERNearly 1.5 million exposed secrets targeted in new revocation program
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that rema...
05 nov. 2026BLEEPING COMPUTEROpenAI’s GPT-6 Astra silently obstructed safety research tasks
OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research. [...]
05 nov. 2026BLEEPING COMPUTEROpenSSH flaw lets attackers log into password-disabled Linux accounts
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configu...
05 nov. 2026BLEEPING COMPUTERHackers backdoor Linux servers using trojanized CWP web server
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management int...
05 nov. 2026BLEEPING COMPUTERDigiCert data breach exposes customer information, identity documents
DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access t...
05 nov. 2026INFOSECURITY MAGAZINEResidential Proxy Traffic Traced to White House Network
White House network addresses were used as exits by 28 residential proxy services
05 nov. 2026Última actualización disponible: 12 nov. 2026 08:00 (Ciudad de México). Fuentes verificadas recientemente: 4 de 6. Se muestran noticias anteriores de BLEEPING COMPUTER, INFOSECURITY MAGAZINE.
¿Tu empresa está preparada?
Las amenazas evolucionan a diario. Nuestro SOC las monitorea por ti, 24/7.
Evaluación Gratuita → WhatsApp