Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.
Para análisis editorial y noticias generales visita Noticias.
Sin señales activamente explotadas ni parches de emergencia.
No priority signals demanding immediate attention.
La cola operativa está limpia en esta ventana. El scouter sigue monitorizando.
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code. The post Critical VMware vCenter Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. CVEs: CVE-2026-59310. Vendors: Microsoft, Fortinet, VMware, Adobe, Ivanti, SonicWall, Siemens, Salesforce, ServiceNow, WordPress, Zoom. DORA relevance: medium.
Por qué importa
Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →
Sin CVEs críticas frescas en la ventana actual.
Sin nuevos advisories PSIRT de vendor en la ventana.
Postura cloud / identity comprometida o reforzada. Revisar configuración y baseline.
Acción recomendada
Comprueba la exposición a CVE-2026-59310 en el inventario de activos y las herramientas de vulnerabilidades.
A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce. Hudson Rock says it obtained and analyzed the archive, which contains 433,909 files, and attributed 118,829 CI runner dumps to 2,488 corporate domains. “We are leveraging this data for a global ethical disclosure effort,” Alon Gal, Hudson Rock’s co-founder and CTO, told Help Net Security. “We … More → The post 153GB of stolen credentials surface after LiteLLM supply chain attack appeared first on Help Net Security. CVEs: CVE-2026-68820. Vendors: Microsoft, Cisco, AWS, GitLab, Siemens, Salesforce, ServiceNow, Python. DORA relevance: high.
Por qué importa
Postura cloud / identity comprometida o reforzada. Revisar configuración y baseline.
Acción recomendada
Comprueba la exposición a CVE-2026-68820 en el inventario de activos y las herramientas de vulnerabilidades.
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution. The post Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined appeared first on SecurityWeek. Vendors: Microsoft, Cisco, Google, Ivanti, Mozilla, Kubernetes, Siemens, Salesforce, ServiceNow. DORA relevance: medium.
Por qué importa
Postura cloud / identity comprometida o reforzada. Revisar configuración y baseline.
Acción recomendada
Avisa a los owners de los stacks Microsoft, Cisco, Google, Ivanti.
CISA has also published several advisories describing vulnerabilities in ICS and other OT products. The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact appeared first on SecurityWeek. Vendors: Microsoft, Cisco, Google, Adobe, Ivanti, SonicWall, Mozilla, Siemens, Schneider Electric, Rockwell Automation, ServiceNow, Zoom. DORA relevance: medium.
Por qué importa
Postura cloud / identity comprometida o reforzada. Revisar configuración y baseline.
Acción recomendada
Avisa a los owners de los stacks Microsoft, Cisco, Google, Adobe.
LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users. The post Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack appeared first on SecurityWeek. Vendors: Microsoft, Cisco, AWS, SAP, Adobe, Apple, Ivanti, SonicWall, GitHub, Siemens, Salesforce, ServiceNow, Zoom, Node.js, Python, NGINX. DORA relevance: medium.
Por qué importa
Postura cloud / identity comprometida o reforzada. Revisar configuración y baseline.
Acción recomendada
Avisa a los owners de los stacks Microsoft, Cisco, AWS, SAP.