CyberComplianceAI
InicioNoticiasIntel Center
CyberForoPrecios
Acceder
The Pulse · Live Intelligence Feed

Intel Center

Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.

Para análisis editorial y noticias generales visita Noticias.

Priorizado con IA

La priorizacion, resumen y accion recomendada pueden estar enriquecidos por IA y heuristicas. La fuente original permanece visible para verificacion.

Consola en vivo · last 24h
Señales (ventana)9
Última detecciónhace 2 h
Monitorizado porintelligence scouter
9signals
Acción Requerida
Ventana24h7d30d7d / 30d solo en ProSeveridadCríticaAltaLimpiar filtros
Tecnología afectadaMicrosoft71Google49Cisco44GitHub37Citrix30Apple21Linux15PHP13Zimbra12Fortinet11

Priority Command Strip

What your team should look at right now

6 señales críticas
  1. Action RequiredImmediate21d

    CVE-2026-85706 · GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · GitLabReview signal
  2. Action Required
All9Action Required9Exploited & KEV8Critical Vulns0

Discover muestra 8 señales operativas recientes. Sube a Consultant Pro o Professional Studio para abrir el feed completo, histórico ampliado y el catálogo KEV.

INMEDIATOCríticoACTION REQUIREDInteligencia operacional

CVE-2026-85706 · GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

[CISA KEV actively exploited] Vendor: GitLab | Product: Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-09-14 | Ransomware use: Unknown | Added: 2026-09-11 CVEs: CVE-2026-85706. CISA KEV/exploitation signal detected. Vendors: GitLab. DORA relevance: medium.

Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →

CyberComplianceAI

¿Quieres esto priorizado para tu rol cada mañana?

El Morning Brief Pro filtra estas señales por tu rol (CISO, SecOps, risk), sector y framework prioritario, y las convierte en acciones recomendadas listas a las 7:00.

Probar Morning Brief Pro →Ver precio

¿Aún no quieres Pro? Recibe el resumen de cumplimiento gratis cada semana.

8signals
Explotados & KEV
Vulns Críticas

Sin CVEs críticas frescas en la ventana actual.

Advisories de Vendor

Sin nuevos advisories PSIRT de vendor en la ventana.

WordPress11
Check Point10
MikroTik9
GitLab9
Immediate
138d

CVE-2021-22175 · GitLab GitLab: GitLab Server-Side Request Forgery (SSRF) Vulnerability

Explotación activa confirmada. Riesgo material para entornos expuestos.

CISA KEV Catalog · GitLabReview signal
  • Action RequiredImmediate138d

    CVE-2021-39935 · GitLab Community and Enterprise Editions: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · GitLabReview signal
  • Action RequiredImmediate2h

    Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes  Oct 02, 2026 Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities ( KEV ) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    The Hacker News Vulnerability · Microsoft · CiscoReview signal
  • Action RequiredImmediate16h

    WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory  Oct 01, 2026 Vulnerability / Web Security Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC_" markers present in the injected content. Sucuri has described the malware as

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    The Hacker News Vulnerability · Microsoft · GoogleReview signal
  • Action RequiredImmediate19h

    How Financial Services Companies Can Modernize Their Software Supply Chain  Oct 01, 2026 DevSecOps / Patch Management Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises the change-freeze calendar. The finding gets an exception, a compensating

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    The Hacker News Vulnerability · Microsoft · GoogleReview signal

    • Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Vendors:GitLabCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    11 sept 2026, 00:00
    Actualizado
    11 sept 2026, 20:00
    Detectado
    11 sept 2026, 20:00
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-85706
    CISA KEV Catalog
    Prioridad · 76/100published <30d (+10) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 21 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2021-22175 · GitLab GitLab: GitLab Server-Side Request Forgery (SSRF) Vulnerability

    [CISA KEV actively exploited] Vendor: GitLab | Product: GitLab | GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-03-11 | Ransomware use: Unknown | Added: 2026-02-18 CVEs: CVE-2021-22175. CISA KEV/exploitation signal detected. Vendors: GitLab. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:GitLabCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    18 feb 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2021-22175
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 138 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2021-39935 · GitLab Community and Enterprise Editions: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

    [CISA KEV actively exploited] Vendor: GitLab | Product: Community and Enterprise Editions | GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-02-24 | Ransomware use: Unknown | Added: 2026-02-03 CVEs: CVE-2021-39935. CISA KEV/exploitation signal detected. Vendors: GitLab. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:GitLabCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    03 feb 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2021-39935
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 138 días
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRInteligencia operacional

    Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes &#59394; Oct 02, 2026 Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities ( KEV ) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write

    HTML source discovery from thehackernews.com CVEs: CVE-2026-104286, CVE-2026-85102, CVE-2026-93616, CVE-2026-93952, CVE-2026-94127. CISA KEV/exploitation signal detected. Vendors: Microsoft, Cisco, Google, Fortinet, Citrix, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    La vulnerabilidad CVE-2026-104286 en FortiMail está siendo explotada activamente in-the-wild y ha sido incluida en el catálogo KEV de CISA, permitiendo ejecución de escritura de archivos no autenticada.

    Acción recomendada

    Identificar y parchear inmediatamente los dispositivos FortiMail afectados; no esperar al ciclo de mantenimiento regular y realizar triage de seguridad hoy mismo.

    Vendors:FortinetMicrosoftCiscoGoogleSectores:public sectorcloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    02 oct 2026, 06:00
    Detectado
    02 oct 2026, 06:00
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    NVD · CVE-2026-104286
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 2 horas
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRCRAInteligencia operacional

    WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory &#59394; Oct 01, 2026 Vulnerability / Web Security Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the &quot;SC_&quot; markers present in the injected content. Sucuri has described the malware as

    HTML source discovery from thehackernews.com CVEs: CVE-2026-1581. CISA KEV/exploitation signal detected. Vendors: Microsoft, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, PHP, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    El CVE-2026-1581 está siendo explotado activamente para desplegar backdoors persistentes en WordPress que se autorreparan, dificultando la limpieza estándar.

    Acción recomendada

    Identifique y aísle los servidores WordPress afectados, realice una limpieza profunda de base de datos y memoria compartida, y aplique el parche de seguridad de forma inmediata.

    Vendors:WordPressMITRE:T1190 Exploit Public-Facing ApplicationT1547 Boot or Logon Autostart ExecutionCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 16:01
    Detectado
    01 oct 2026, 16:01
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    NVD · CVE-2026-1581
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 16 horas
    INMEDIATOCríticoACTION REQUIREDISO27001AI ACTCRAInteligencia operacional

    How Financial Services Companies Can Modernize Their Software Supply Chain &#59394; Oct 01, 2026 DevSecOps / Patch Management Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises the change-freeze calendar. The finding gets an exception, a compensating

    HTML source discovery from thehackernews.com CISA KEV/exploitation signal detected. Vendors: Microsoft, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: high.

    Por qué importa

    Se ha detectado explotación activa in-the-wild en múltiples tecnologías críticas para el sector financiero, lo que impacta directamente en la resiliencia operativa bajo normativas DORA y CRA.

    Acción recomendada

    Priorizar la remediación inmediata de los activos afectados por CVEs en el catálogo KEV; no esperar al ciclo mensual de parcheo y auditar las dependencias de la cadena de suministro.

    Vendors:MicrosoftGoogleF5ZyxelSectores:bankinginsuranceasset managementMITRE:T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 13:00
    Detectado
    01 oct 2026, 13:00
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    Original advisory
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 19 horas
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRInteligencia operacional

    CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV &#59394; Oct 01, 2026 Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities ( KEV ), following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 (CVSS score: 9.8), could allow an unauthenticated, remote attacker to access an

    HTML source discovery from thehackernews.com CVEs: CVE-2026-76504. CISA KEV/exploitation signal detected. Vendors: Microsoft, Cisco, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    La vulnerabilidad CVE-2026-76504 permite el bypass de autenticación en Cisco Catalyst SD-WAN Manager y está siendo explotada activamente in-the-wild, lo que representa un riesgo crítico de acceso no autorizado.

    Acción recomendada

    Identifique inmediatamente los activos afectados en su inventario y aplique el parche de seguridad de Cisco hoy mismo; no espere al ciclo de mantenimiento mensual.

    Vendors:CiscoSectores:public sectorcloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 11:01
    Detectado
    01 oct 2026, 11:01
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    NVD · CVE-2026-76504
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 21 horas
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRAI ACTInteligencia operacional

    Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version &#59394; Oct 01, 2026 Artificial Intelligence / AI Safety Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon , that it said is being rolled out to a set of trusted cyber defenders through its Fairwind Program. &quot;It delivers frontier performance in complex workflows across real-world software engineering, enterprise knowledge work like legal and finance, a

    HTML source discovery from thehackernews.com CISA KEV/exploitation signal detected. Vendors: Microsoft, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    Se ha detectado actividad de explotación in-the-wild (KEV) que afecta a múltiples proveedores críticos presentes en el stack tecnológico, lo que eleva el riesgo de compromiso de infraestructura.

    Acción recomendada

    Prioriza la remediación inmediata de los activos afectados por las vulnerabilidades KEV identificadas; no esperes al ciclo de parcheo mensual y notifica a los propietarios de los sistemas.

    Vendors:MicrosoftGoogleF5ZyxelSectores:healthcarecloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 09:00
    Detectado
    01 oct 2026, 09:00
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    Original advisory
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 23 horas