CyberComplianceAI
InicioNoticiasIntel Center
CyberForoPrecios
Acceder
The Pulse · Live Intelligence Feed

Intel Center

Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.

Para análisis editorial y noticias generales visita Noticias.

Priorizado con IA

La priorizacion, resumen y accion recomendada pueden estar enriquecidos por IA y heuristicas. La fuente original permanece visible para verificacion.

Consola en vivo · last 24h
Señales (ventana)6
Última detecciónhace 21 h
Monitorizado porintelligence scouter
4signals
Acción Requerida
Ventana24h7d30d7d / 30d solo en ProSeveridadCríticaAltaLimpiar filtros
Tecnología afectadaMicrosoft73Cisco29Google21Apple16Adobe13Fortinet11Salesforce10ServiceNow10Oracle8PHP

Priority Command Strip

What your team should look at right now

4 señales críticas
  1. Action RequiredImmediate21h

    Hackers Exploiting Unpatched GeoServer Zero-Day

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    SecurityWeek · Microsoft · FortinetReview signal
  2. Action RequiredImmediate
All6Action Required4Exploited & KEV3Critical Vulns0Cloud & Identity2
INMEDIATOCríticoACTION REQUIREDGDPRInteligencia operacional

Hackers Exploiting Unpatched GeoServer Zero-Day

The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. The post Hackers Exploiting Unpatched GeoServer Zero-Day appeared first on SecurityWeek. CISA KEV/exploitation signal detected. Vendors: Microsoft, Fortinet, VMware, Oracle, Adobe, Apple, Ivanti, SonicWall, WordPress. DORA relevance: medium.

Por qué importa

Explotación activa confirmada. Riesgo material para entornos expuestos.

Acción recomendada

Prioriza la remediación por explotación in-the-wild; no esperes al ciclo mensual de parcheo.

Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →

CyberComplianceAI

¿Quieres esto priorizado para tu rol cada mañana?

El Morning Brief Pro filtra estas señales por tu rol (CISO, SecOps, risk), sector y framework prioritario, y las convierte en acciones recomendadas listas a las 7:00.

Probar Morning Brief Pro →Ver precio

¿Aún no quieres Pro? Recibe el resumen de cumplimiento gratis cada semana.

3signals
Explotados & KEV
Vulns Críticas

Sin CVEs críticas frescas en la ventana actual.

Advisories de Vendor

Sin nuevos advisories PSIRT de vendor en la ventana.

También en el Intel CenterCloud & Identity2
8
VMware7
Ivanti7
SonicWall6
WordPress6
25d

CVE-2026-60137 · WordPress Core: WordPress Core SQL Injection Vulnerability

Explotación activa confirmada. Riesgo material para entornos expuestos.

CISA KEV Catalog · WordPressReview signal
  • Action RequiredImmediate25d

    CVE-2026-63030 · WordPress Core: WordPress Core Interpretation Conflict Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · WordPressReview signal
  • Action RequiredImmediate91d

    CVE-2026-41940 · WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

    Severidad crítica con vector accionable a corto plazo.

    CISA KEV (Known Exploited Vulnerabilities) · WordPressReview signal
    • Vendors:MicrosoftFortinetVMwareOracleCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    14 ago 2026, 07:01
    Actualizado
    14 ago 2026, 09:02
    Detectado
    14 ago 2026, 09:02
    Fuente
    SecurityWeek
    Referencia técnica
    Original advisory
    SecurityWeek
    Prioridad · 93/100published <24h (+40) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 21 horas
    INMEDIATOCríticoACTION REQUIREDInteligencia operacional

    CVE-2026-60137 · WordPress Core: WordPress Core SQL Injection Vulnerability

    [CISA KEV actively exploited] Vendor: WordPress | Product: Core | WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-08-04 | Ransomware use: Unknown | Added: 2026-07-21 CVEs: CVE-2026-60137, CVE-2026-63030. CISA KEV/exploitation signal detected. Vendors: WordPress. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Vendors:WordPressCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    21 jul 2026, 00:00
    Actualizado
    21 jul 2026, 15:00
    Detectado
    21 jul 2026, 15:00
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-60137
    CISA KEV Catalog
    Prioridad · 76/100published <30d (+10) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 25 días
    INMEDIATOCríticoACTION REQUIREDInteligencia operacional

    CVE-2026-63030 · WordPress Core: WordPress Core Interpretation Conflict Vulnerability

    [CISA KEV actively exploited] Vendor: WordPress | Product: Core | WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-07-24 | Ransomware use: Unknown | Added: 2026-07-21 CVEs: CVE-2026-63030, CVE-2026-60137. CISA KEV/exploitation signal detected. Vendors: WordPress. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Vendors:WordPressCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    21 jul 2026, 00:00
    Actualizado
    21 jul 2026, 15:00
    Detectado
    21 jul 2026, 15:00
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-63030
    CISA KEV Catalog
    Prioridad · 76/100published <30d (+10) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 25 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-41940 · WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

    [CISA KEV actively exploited ransomware] WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. | Ransomware use: Known | Added: 2026-04-30

    Por qué importa

    Severidad crítica con vector accionable a corto plazo.

    Acción recomendada

    Triage same-day: validar exposición, aplicar mitigación temporal y notificar Incident Response.

    Vendors:WordPressCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    30 abr 2026, 00:00
    Actualizado
    15 may 2026, 19:19
    Detectado
    15 may 2026, 19:19
    Fuente
    CISA KEV (Known Exploited Vulnerabilities)
    Referencia técnica
    NVD · CVE-2026-41940
    CISA KEV (Known Exploited Vulnerabilities)
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV (Known Exploited Vulnerabilities) authority (+12)
    hace 91 días