CyberComplianceAI
InicioNoticiasIntel Center
CyberForoPrecios
Acceder
The Pulse · Live Intelligence Feed

Intel Center

Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.

Para análisis editorial y noticias generales visita Noticias.

Priorizado con IA

La priorizacion, resumen y accion recomendada pueden estar enriquecidos por IA y heuristicas. La fuente original permanece visible para verificacion.

Consola en vivo · last 24h
Señales (ventana)6
Última detecciónhace 21 h
Monitorizado porintelligence scouter
6signals
Acción Requerida
Ventana24h7d30d7d / 30d solo en ProSeveridadCríticaAltaLimpiar filtros
Tecnología afectadaMicrosoft58Cisco21Google15Apple13Adobe10Fortinet10PHP8Oracle7VMware6Ivanti6

Priority Command Strip

What your team should look at right now

6 señales críticas
  1. Action RequiredImmediate21h

    Hackers Exploiting Unpatched GeoServer Zero-Day

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    SecurityWeek · Microsoft · FortinetReview signal
  2. Action RequiredImmediate
All6Action Required6Exploited & KEV3Critical Vulns0
INMEDIATOCríticoACTION REQUIREDGDPRInteligencia operacional

Hackers Exploiting Unpatched GeoServer Zero-Day

The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. The post Hackers Exploiting Unpatched GeoServer Zero-Day appeared first on SecurityWeek. CISA KEV/exploitation signal detected. Vendors: Microsoft, Fortinet, VMware, Oracle, Adobe, Apple, Ivanti, SonicWall, WordPress. DORA relevance: medium.

Por qué importa

Explotación activa confirmada. Riesgo material para entornos expuestos.

Acción recomendada

Prioriza la remediación por explotación in-the-wild; no esperes al ciclo mensual de parcheo.

Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →

CyberComplianceAI

¿Quieres esto priorizado para tu rol cada mañana?

El Morning Brief Pro filtra estas señales por tu rol (CISO, SecOps, risk), sector y framework prioritario, y las convierte en acciones recomendadas listas a las 7:00.

Probar Morning Brief Pro →Ver precio

¿Aún no quieres Pro? Recibe el resumen de cumplimiento gratis cada semana.

3signals
Explotados & KEV
Vulns Críticas

Sin CVEs críticas frescas en la ventana actual.

Advisories de Vendor

Sin nuevos advisories PSIRT de vendor en la ventana.

Linux5
Synacor5
Zimbra5
SonicWall4
64d

CVE-2026-10520 · Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability

Explotación activa confirmada. Riesgo material para entornos expuestos.

CISA KEV Catalog · IvantiReview signal
  • Action RequiredImmediate90d

    CVE-2026-1340 · Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · IvantiReview signal
  • Action RequiredImmediate90d

    CVE-2026-1603 · Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · IvantiReview signal
  • Action RequiredImmediate90d

    CVE-2026-1281 · Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · IvantiReview signal
  • Action RequiredImmediate91d

    CVE-2026-6973 · Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

    Severidad crítica con vector accionable a corto plazo.

    CISA KEV (Known Exploited Vulnerabilities) · IvantiReview signal
    • Vendors:MicrosoftFortinetVMwareOracleCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    14 ago 2026, 07:01
    Actualizado
    14 ago 2026, 09:02
    Detectado
    14 ago 2026, 09:02
    Fuente
    SecurityWeek
    Referencia técnica
    Original advisory
    SecurityWeek
    Prioridad · 93/100published <24h (+40) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 21 horas
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-10520 · Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability

    [CISA KEV actively exploited] Vendor: Ivanti | Product: Sentry | Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote code execution. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-06-14 | Ransomware use: Unknown | Added: 2026-06-11 CVEs: CVE-2026-10520, CVE-2026-10523. CISA KEV/exploitation signal detected. Vendors: Ivanti. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Vendors:IvantiCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    11 jun 2026, 00:00
    Actualizado
    11 jun 2026, 19:00
    Detectado
    11 jun 2026, 19:00
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-10520
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 64 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-1340 · Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    [CISA KEV actively exploited] Vendor: Ivanti | Product: Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-04-11 | Ransomware use: Unknown | Added: 2026-04-08 CVEs: CVE-2026-1340, CVE-2026-1281. CISA KEV/exploitation signal detected. Vendors: Ivanti. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:IvantiCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    08 abr 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-1340
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 90 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-1603 · Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

    [CISA KEV actively exploited] Vendor: Ivanti | Product: Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-03-23 | Ransomware use: Unknown | Added: 2026-03-09 CVEs: CVE-2026-1603. CISA KEV/exploitation signal detected. Vendors: Ivanti. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:IvantiCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    09 mar 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-1603
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 90 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-1281 · Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    [CISA KEV actively exploited] Vendor: Ivanti | Product: Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-02-01 | Ransomware use: Unknown | Added: 2026-01-29 CVEs: CVE-2026-1281, CVE-2026-1340. CISA KEV/exploitation signal detected. Vendors: Ivanti. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:IvantiCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    29 ene 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-1281
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 90 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-6973 · Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

    [CISA KEV] Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution. | Ransomware use: Unknown | Added: 2026-05-07

    Por qué importa

    Severidad crítica con vector accionable a corto plazo.

    Acción recomendada

    Triage same-day: validar exposición, aplicar mitigación temporal y notificar Incident Response.

    Vendors:IvantiCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    07 may 2026, 00:00
    Actualizado
    15 may 2026, 18:57
    Detectado
    15 may 2026, 18:57
    Fuente
    CISA KEV (Known Exploited Vulnerabilities)
    Referencia técnica
    NVD · CVE-2026-6973
    CISA KEV (Known Exploited Vulnerabilities)
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV (Known Exploited Vulnerabilities) authority (+12)
    hace 91 días