CyberComplianceAI
InicioNoticiasIntel Center
CyberForoPrecios
Acceder
The Pulse · Live Intelligence Feed

Intel Center

Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.

Para análisis editorial y noticias generales visita Noticias.

Priorizado con IA

La priorizacion, resumen y accion recomendada pueden estar enriquecidos por IA y heuristicas. La fuente original permanece visible para verificacion.

Consola en vivo · last 7d
Señales (ventana)11
Última detecciónhace 23 h
Monitorizado porintelligence scouter
5signals
Acción Requerida
Ventana24h7d30d7d / 30d solo en ProSeveridadCríticaAltaLimpiar filtros
Tecnología afectadaMicrosoft129Google56Cisco48Apple39ServiceNow30GitHub30Salesforce28Palo Alto Networks21Adobe21Siemens

Priority Command Strip

What your team should look at right now

5 señales críticas
  1. Action RequiredImmediate23h

    Hackers Exploiting Unpatched GeoServer Zero-Day

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    SecurityWeek · Microsoft · FortinetReview signal
  2. Action Required
All11Action Required5Exploited & KEV3Critical Vulns1Cloud & Identity5
INMEDIATOCríticoACTION REQUIREDGDPRInteligencia operacional

Hackers Exploiting Unpatched GeoServer Zero-Day

The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. The post Hackers Exploiting Unpatched GeoServer Zero-Day appeared first on SecurityWeek. CISA KEV/exploitation signal detected. Vendors: Microsoft, Fortinet, VMware, Oracle, Adobe, Apple, Ivanti, SonicWall, WordPress. DORA relevance: medium.

Por qué importa

Explotación activa confirmada. Riesgo material para entornos expuestos.

Acción recomendada

Prioriza la remediación por explotación in-the-wild; no esperes al ciclo mensual de parcheo.

Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →

CyberComplianceAI

¿Quieres esto priorizado para tu rol cada mañana?

El Morning Brief Pro filtra estas señales por tu rol (CISO, SecOps, risk), sector y framework prioritario, y las convierte en acciones recomendadas listas a las 7:00.

Probar Morning Brief Pro →Ver precio

¿Aún no quieres Pro? Recibe el resumen de cumplimiento gratis cada semana.

3signals
Explotados & KEV
1signals
Vulns Críticas
Advisories de Vendor

Sin nuevos advisories PSIRT de vendor en la ventana.

También en el Intel CenterCloud & Identity5
16
Fortinet15
Linux14
Ivanti14
SonicWall14
Immediate
2d

Fortinet Patches Authentication Flaws in FortiWeb and FortiManager

Explotación activa confirmada. Riesgo material para entornos expuestos.

SecurityWeek · Microsoft · FortinetReview signal
  • Action RequiredImmediate25d

    CVE-2026-60137 · WordPress Core: WordPress Core SQL Injection Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · WordPressReview signal
  • Action RequiredImmediate25d

    CVE-2026-63030 · WordPress Core: WordPress Core Interpretation Conflict Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · WordPressReview signal
  • Action RequiredImmediate92d

    CVE-2026-41940 · WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

    Severidad crítica con vector accionable a corto plazo.

    CISA KEV (Known Exploited Vulnerabilities) · WordPressReview signal
    • Vendors:MicrosoftFortinetVMwareOracleCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    14 ago 2026, 07:01
    Actualizado
    14 ago 2026, 09:02
    Detectado
    14 ago 2026, 09:02
    Fuente
    SecurityWeek
    Referencia técnica
    Original advisory
    SecurityWeek
    Prioridad · 83/100published <7d (+25) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 23 horas
    INMEDIATOCríticoACTION REQUIREDGDPRInteligencia operacional

    Fortinet Patches Authentication Flaws in FortiWeb and FortiManager

    The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance. The post Fortinet Patches Authentication Flaws in FortiWeb and FortiManager appeared first on SecurityWeek. CVEs: CVE-2026-26035, CVE-2026-70468, CVE-2026-70465, CVE-2026-49975. CISA KEV/exploitation signal detected. Vendors: Microsoft, Fortinet, VMware, Adobe, Ivanti, SonicWall, Apache, Salesforce, ServiceNow, WordPress, Zoom. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Comprueba la exposición a CVE-2026-26035, CVE-2026-70468, CVE-2026-70465 en el inventario de activos y las herramientas de vulnerabilidades.

    Vendors:MicrosoftFortinetVMwareAdobeCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    13 ago 2026, 10:40
    Actualizado
    13 ago 2026, 14:02
    Detectado
    13 ago 2026, 14:02
    Fuente
    SecurityWeek
    Referencia técnica
    NVD · CVE-2026-26035
    SecurityWeek
    Prioridad · 82/100published <7d (+25) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <7d (+3 cap)
    hace 2 días
    INMEDIATOCríticoACTION REQUIREDInteligencia operacional

    CVE-2026-60137 · WordPress Core: WordPress Core SQL Injection Vulnerability

    [CISA KEV actively exploited] Vendor: WordPress | Product: Core | WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-08-04 | Ransomware use: Unknown | Added: 2026-07-21 CVEs: CVE-2026-60137, CVE-2026-63030. CISA KEV/exploitation signal detected. Vendors: WordPress. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Vendors:WordPressCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    21 jul 2026, 00:00
    Actualizado
    21 jul 2026, 15:00
    Detectado
    21 jul 2026, 15:00
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-60137
    CISA KEV Catalog
    Prioridad · 76/100published <30d (+10) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 25 días
    INMEDIATOCríticoACTION REQUIREDInteligencia operacional

    CVE-2026-63030 · WordPress Core: WordPress Core Interpretation Conflict Vulnerability

    [CISA KEV actively exploited] Vendor: WordPress | Product: Core | WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-07-24 | Ransomware use: Unknown | Added: 2026-07-21 CVEs: CVE-2026-63030, CVE-2026-60137. CISA KEV/exploitation signal detected. Vendors: WordPress. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Vendors:WordPressCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    21 jul 2026, 00:00
    Actualizado
    21 jul 2026, 15:00
    Detectado
    21 jul 2026, 15:00
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-63030
    CISA KEV Catalog
    Prioridad · 76/100published <30d (+10) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 25 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-41940 · WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

    [CISA KEV actively exploited ransomware] WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. | Ransomware use: Known | Added: 2026-04-30

    Por qué importa

    Severidad crítica con vector accionable a corto plazo.

    Acción recomendada

    Triage same-day: validar exposición, aplicar mitigación temporal y notificar Incident Response.

    Vendors:WordPressCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    30 abr 2026, 00:00
    Actualizado
    15 may 2026, 19:19
    Detectado
    15 may 2026, 19:19
    Fuente
    CISA KEV (Known Exploited Vulnerabilities)
    Referencia técnica
    NVD · CVE-2026-41940
    CISA KEV (Known Exploited Vulnerabilities)
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV (Known Exploited Vulnerabilities) authority (+12)
    hace 92 días