CyberComplianceAI
InicioNoticiasIntel Center
CyberForoPrecios
Acceder
The Pulse · Live Intelligence Feed

Intel Center

Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.

Para análisis editorial y noticias generales visita Noticias.

Priorizado con IA

La priorizacion, resumen y accion recomendada pueden estar enriquecidos por IA y heuristicas. La fuente original permanece visible para verificacion.

Consola en vivo · last 24h
Señales (ventana)6
Última detecciónhace 16 h
Monitorizado porintelligence scouter
6signals
Acción Requerida
Ventana24h7d30d7d / 30d solo en ProSeveridadCríticaAltaLimpiar filtros
Tecnología afectadaMicrosoft58Cisco21Google15Apple13Adobe10Fortinet10PHP8Oracle7VMware6Ivanti6

Priority Command Strip

What your team should look at right now

6 señales críticas
  1. Action RequiredImmediate16h

    Max severity SAP Commerce Cloud flaw now targeted in attacks

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    BleepingComputer · Microsoft · CiscoReview signal
  2. Action Required
All6Action Required6Exploited & KEV3Critical Vulns0
INMEDIATOCríticoACTION REQUIREDGDPRInteligencia operacional

Max severity SAP Commerce Cloud flaw now targeted in attacks

A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused. [...] CVEs: CVE-2026-58231, CVE-2026-44761, CVE-2026-22732, CVE-2026-34263. CISA KEV/exploitation signal detected. Vendors: Microsoft, Cisco, VMware, SAP, Adobe, Node.js. DORA relevance: medium.

Por qué importa

Explotación activa confirmada. Riesgo material para entornos expuestos.

Acción recomendada

Comprueba la exposición a CVE-2026-58231, CVE-2026-44761, CVE-2026-22732 en el inventario de activos y las herramientas de vulnerabilidades.

Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →

CyberComplianceAI

¿Quieres esto priorizado para tu rol cada mañana?

El Morning Brief Pro filtra estas señales por tu rol (CISO, SecOps, risk), sector y framework prioritario, y las convierte en acciones recomendadas listas a las 7:00.

Probar Morning Brief Pro →Ver precio

¿Aún no quieres Pro? Recibe el resumen de cumplimiento gratis cada semana.

3signals
Explotados & KEV
Vulns Críticas

Sin CVEs críticas frescas en la ventana actual.

Advisories de Vendor

Sin nuevos advisories PSIRT de vendor en la ventana.

Linux5
Synacor5
Zimbra5
SonicWall4
Immediate
21h

Hackers Exploiting Unpatched GeoServer Zero-Day

Explotación activa confirmada. Riesgo material para entornos expuestos.

SecurityWeek · Microsoft · FortinetReview signal
  • Action RequiredImmediate90d

    CVE-2021-22054 · Omnissa Workspace One UEM: Omnissa Workspace ONE Server-Side Request Forgery

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · Omnissa · GoogleReview signal
  • Action RequiredImmediate90d

    CVE-2026-22719 · Broadcom VMware Aria Operations: Broadcom VMware Aria Operations Command Injection Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · Broadcom · VMwareReview signal
  • Action RequiredImmediate90d

    CVE-2024-37079 · Broadcom VMware vCenter Server: Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · Broadcom · VMwareReview signal
  • Action RequiredImmediate90d

    CVE-2025-41244 · Broadcom VMware Aria Operations and VMware Tools: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · Broadcom · VMwareReview signal
    • Vendors:MicrosoftCiscoVMwareSAPCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    14 ago 2026, 13:45
    Actualizado
    14 ago 2026, 14:02
    Detectado
    14 ago 2026, 14:02
    Fuente
    BleepingComputer
    Referencia técnica
    NVD · CVE-2026-58231
    BleepingComputer
    Prioridad · 93/100published <24h (+40) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 16 horas
    INMEDIATOCríticoACTION REQUIREDGDPRInteligencia operacional

    Hackers Exploiting Unpatched GeoServer Zero-Day

    The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. The post Hackers Exploiting Unpatched GeoServer Zero-Day appeared first on SecurityWeek. CISA KEV/exploitation signal detected. Vendors: Microsoft, Fortinet, VMware, Oracle, Adobe, Apple, Ivanti, SonicWall, WordPress. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Prioriza la remediación por explotación in-the-wild; no esperes al ciclo mensual de parcheo.

    Vendors:MicrosoftFortinetVMwareOracleCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    14 ago 2026, 07:01
    Actualizado
    14 ago 2026, 09:02
    Detectado
    14 ago 2026, 09:02
    Fuente
    SecurityWeek
    Referencia técnica
    Original advisory
    SecurityWeek
    Prioridad · 93/100published <24h (+40) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 21 horas
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2021-22054 · Omnissa Workspace One UEM: Omnissa Workspace ONE Server-Side Request Forgery

    [CISA KEV actively exploited] Vendor: Omnissa | Product: Workspace One UEM | Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-03-23 | Ransomware use: Unknown | Added: 2026-03-09 CVEs: CVE-2021-22054. CISA KEV/exploitation signal detected. Vendors: Omnissa, Google, VMware. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:OmnissaGoogleVMwareCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    09 mar 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2021-22054
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 90 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2026-22719 · Broadcom VMware Aria Operations: Broadcom VMware Aria Operations Command Injection Vulnerability

    [CISA KEV actively exploited] Vendor: Broadcom | Product: VMware Aria Operations | Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-03-24 | Ransomware use: Unknown | Added: 2026-03-03 CVEs: CVE-2026-22719. CISA KEV/exploitation signal detected. Vendors: Broadcom, VMware. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:BroadcomVMwareCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    03 mar 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-22719
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 90 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2024-37079 · Broadcom VMware vCenter Server: Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

    [CISA KEV actively exploited] Vendor: Broadcom | Product: VMware vCenter Server | Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-02-13 | Ransomware use: Unknown | Added: 2026-01-23 CVEs: CVE-2024-37079. CISA KEV/exploitation signal detected. Vendors: Broadcom, VMware. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:BroadcomVMwareCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    23 ene 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2024-37079
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 90 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2025-41244 · Broadcom VMware Aria Operations and VMware Tools: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

    [CISA KEV actively exploited] Vendor: Broadcom | Product: VMware Aria Operations and VMware Tools | Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2025-11-20 | Ransomware use: Unknown | Added: 2025-10-30 CVEs: CVE-2025-41244. CISA KEV/exploitation signal detected. Vendors: Broadcom, VMware. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:BroadcomVMwareCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    30 oct 2025, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2025-41244
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 90 días