#security el 2026-10-12

1. 08:12 <Cassandra> The Hacker News | CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records info@thehackernews.com (The Hacker News) · 46m ago · 7 min read CyberXero's Claude Code-assisted campaign accessed 429 WordPress admin panels and exfiltrated over 628,000 records from four Ukrainian organizations. Read full story
2. 08:17 <Sentinel> SecurityWeek | Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch Ionut Arghire · 23m ago · 4 min read Starting February 2027, Let’s Encrypt will move to 64-day certificate lifetimes by default, ahead of 45-day lifetimes in 2028. Read full story
3. 08:48 <Sentinel> SecurityWeek | Critical SonicWall Vulnerability Exploited Days After Disclosure Ionut Arghire · 12m ago · 3 min read Exploitation of CVE-2026-102255, a critical pre-authenticated SSRF flaw in SonicWall SMA1000, started days after public disclosure. Read full story
4. 09:43 <Cassandra> The Hacker News | Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE info@thehackernews.com (The Hacker News) · 41m ago · 7 min read Bricksforge's CVE-2026-85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress sites. Read full story
5. 10:46 <Sentinel> SecurityWeek | Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe Eduard Kovacs · 14m ago · 5 min read Cybersecurity expert Edward Dubrovsky has been arrested on suspicion of being involved in the ShinyHunters hack against the FBI. Read full story
6. 11:13 <Cassandra> The Hacker News | Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch info@thehackernews.com (The Hacker News) · 37m ago · 3 min read Attackers have made 135 attempts to exploit a patched pre-auth SSRF flaw in SonicWall SMA 1000 appliances, originating from two U.S. IPs. Read full story
7. 11:16 <Sentinel> SecurityWeek | iRhythm Data Breach Impacts at Least 360,000 People Ionut Arghire · 10m ago · 4 min read Hackers stole the personal information of more than 360,000 cardiac patients from iRhythm in a June 2026 data breach. Read full story
8. 11:47 <Sentinel> SecurityWeek | Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US Ionut Arghire · 23m ago · 4 min read Oleg Korniev, a leader of the YMCO money laundering system used by cybercriminals, has pleaded guilty in a US court. Read full story
9. 12:30 <Cassandra> BleepingComputer | Microsoft: Windows 11 23H2 reaches end of support in 30 days Sergiu Gatlan · 31m ago · 2 min read Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month. Read full story
10. 12:31 <Sentinel> SecurityWeek | Canonical Websites Disrupted in Second DDoS Attack This Year Eduard Kovacs · 32m ago · 4 min read The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal Read full story
11. 12:32 <Cassandra> The Hacker News | Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports info@thehackernews.com (The Hacker News) · 1h ago · 3 min read Ledger confirmed an unauthorized hardware implant in one CryptoBilis-sold device amid fund loss reports and paused sales through the reseller. Read full story
12. 12:32 <Cassandra> The Hacker News | Bring Your Own Agent: Your Employees' Assistants Are Already Logged In info@thehackernews.com (The Hacker News) · 37m ago · 9 min read Personal AI agents can access work apps through OAuth grants, passwords, and API keys, while remaining outside managed agent consoles. Read full story
13. 13:55 <Sentinel> SecurityWeek | Bricksforge WordPress Plugin Vulnerability Exploited in the Wild Eduard Kovacs · 40m ago · 4 min read A critical vulnerability in the Bricksforge WordPress plugin, tracked as CVE-2026-85097, has been exploited in the wild. Read full story
14. 13:55 <Cassandra> BleepingComputer | GitLab warns of max severity code execution vulnerability Sergiu Gatlan · 4h ago GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...] Read full story
15. 13:55 <Cassandra> BleepingComputer | Retail giant Ahold Delhaize takes systems offline after cyberattack Sergiu Gatlan · 4h ago Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...] Read full story
16. 14:25 <Cassandra> BleepingComputer | Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption Varonis · 25m ago · 6 min read A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based persistence, and remote command execution capabilities. Read full story
17. 14:53 <Sentinel> SecurityWeek | IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion SecurityWeek News · 28m ago · 4 min read IonQ has agreed to buy microsegmentation firm Elisity in an all-stock deal worth up to $1.3 billion, including $150 million in earnouts. Read full story
18. 15:25 <Cassandra> BleepingComputer | Cyberattack shuts down refrigerators at French supermarkets Sergiu Gatlan · 1m ago · 2 min read Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. Read full story
19. 16:30 <Cassandra> BleepingComputer | Ledger confirms hardware wallet spy implant behind crypto thefts Bill Toulas · 3m ago · 4 min read Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. Read full story
20. 17:03 <Cassandra> The Hacker News | ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More info@thehackernews.com (The Hacker News) · 1h ago · 16 min read This week's cybersecurity recap covers helpdesk zero-days, rogue HTTPS certificates, a ShinyHunters arrest, AI-fooling malware, and more major threats Read full story
21. 19:19 <Cassandra> BleepingComputer | Anthropic takes risky AI tests offline after models breach govt sites Bill Toulas · 27m ago · 4 min read Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. Read full story
22. 19:47 <Cassandra> BleepingComputer | Yandex confirms service outage as users lose access to cloud files Bill Toulas · 24m ago · 3 min read Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. Read full story
23. 20:18 <Cassandra> BleepingComputer | Norway fines Microsoft ad firm $9.6 million over Grindr data sharing Bill Toulas · 4m ago · 3 min read Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. Read full story

Todos los días · Entrar en #security