CyberComplianceAI
InicioNoticiasIntel Center
CyberForoPrecios
Acceder
The Pulse · Live Intelligence Feed

Intel Center

Una señal es cualquier evento operacional detectado en las últimas 24h–30d: CVEs en KEV explotados activamente, advisories de vendor, exposición cloud, ransomware y avisos regulatorios. Cada señal se prioriza por severidad, freshness y match con tu Digital Twin.

Para análisis editorial y noticias generales visita Noticias.

Priorizado con IA

La priorizacion, resumen y accion recomendada pueden estar enriquecidos por IA y heuristicas. La fuente original permanece visible para verificacion.

Consola en vivo · last 24h
Señales (ventana)8
Última detecciónhace 3 h
Monitorizado porintelligence scouter
8signals
Acción Requerida
Ventana24h7d30d7d / 30d solo en ProSeveridadCríticaAltaLimpiar filtros
Tecnología afectadaMicrosoft71Google49Cisco44GitHub37Citrix30Apple21Linux15PHP13Zimbra12Fortinet11WordPress

Priority Command Strip

What your team should look at right now

6 señales críticas
  1. Action RequiredImmediate7h

    Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    BleepingComputer · Microsoft · CiscoReview signal
  2. Action Required
All8Action Required8Exploited & KEV8Critical Vulns0
INMEDIATOCríticoACTION REQUIREDGDPRInteligencia operacional

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...] CVEs: CVE-2026-104286. CISA KEV/exploitation signal detected. Vendors: Microsoft, Cisco, Fortinet, Citrix, F5, Atlassian, GitHub, Check Point. DORA relevance: medium.

Por qué importa

La vulnerabilidad CVE-2026-104286 está siendo explotada activamente en ataques zero-day, permitiendo la ejecución remota de código en dispositivos FortiMail críticos.

Filtered for operational relevance. Powered by a curated catalog of vulnerability, CERT, vendor and threat-intelligence sources.View methodology →

CyberComplianceAI

¿Quieres esto priorizado para tu rol cada mañana?

El Morning Brief Pro filtra estas señales por tu rol (CISO, SecOps, risk), sector y framework prioritario, y las convierte en acciones recomendadas listas a las 7:00.

Probar Morning Brief Pro →Ver precio

¿Aún no quieres Pro? Recibe el resumen de cumplimiento gratis cada semana.

8signals
Explotados & KEV
Vulns Críticas

Sin CVEs críticas frescas en la ventana actual.

Advisories de Vendor

Sin nuevos advisories PSIRT de vendor en la ventana.

11
Check Point10
MikroTik9
GitLab9
Immediate
10d

CVE-2026-94127 · F5 BIG-IP APM: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

Explotación activa confirmada. Riesgo material para entornos expuestos.

CISA KEV Catalog · F5Review signal
  • Action RequiredImmediate138d

    CVE-2025-53521 · F5 BIG-IP: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    CISA KEV Catalog · F5Review signal
  • Action RequiredImmediate3h

    Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes  Oct 02, 2026 Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities ( KEV ) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    The Hacker News Vulnerability · Microsoft · CiscoReview signal
  • Action RequiredImmediate17h

    WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory  Oct 01, 2026 Vulnerability / Web Security Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC_" markers present in the injected content. Sucuri has described the malware as

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    The Hacker News Vulnerability · Microsoft · GoogleReview signal
  • Action RequiredImmediate20h

    How Financial Services Companies Can Modernize Their Software Supply Chain  Oct 01, 2026 DevSecOps / Patch Management Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises the change-freeze calendar. The finding gets an exception, a compensating

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    The Hacker News Vulnerability · Microsoft · GoogleReview signal

    • Acción recomendada

    Identifique y parche inmediatamente todos los dispositivos FortiMail expuestos; no posponga la remediación al ciclo mensual.

    Vendors:FortinetSectores:public sectorhealthcarecloud/SaaSretailMITRE:T1190 Exploit Public-Facing ApplicationCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    01 oct 2026, 22:42
    Actualizado
    02 oct 2026, 02:00
    Detectado
    02 oct 2026, 02:00
    Fuente
    BleepingComputer
    Referencia técnica
    NVD · CVE-2026-104286
    BleepingComputer
    Prioridad · 93/100published <24h (+40) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 7 horas
    INMEDIATOCríticoACTION REQUIREDInteligencia operacional

    CVE-2026-94127 · F5 BIG-IP APM: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

    [CISA KEV actively exploited] Vendor: F5 | Product: BIG-IP APM | F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-09-25 | Ransomware use: Unknown | Added: 2026-09-22 CVEs: CVE-2026-94127. CISA KEV/exploitation signal detected. Vendors: F5. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Vendors:F5CISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    22 sept 2026, 00:00
    Actualizado
    22 sept 2026, 20:01
    Detectado
    22 sept 2026, 20:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2026-94127
    CISA KEV Catalog
    Prioridad · 76/100published <30d (+10) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 10 días
    INMEDIATOCríticoACTION REQUIREDNIS2CRAInteligencia operacional

    CVE-2025-53521 · F5 BIG-IP: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

    [CISA KEV actively exploited] Vendor: F5 | Product: BIG-IP | F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-03-30 | Ransomware use: Unknown | Added: 2026-03-27 CVEs: CVE-2025-53521. CISA KEV/exploitation signal detected. Vendors: F5. DORA relevance: medium.

    Por qué importa

    Explotación activa confirmada. Riesgo material para entornos expuestos.

    Acción recomendada

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Vendors:F5CISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    27 mar 2026, 00:00
    Actualizado
    17 may 2026, 13:01
    Detectado
    17 may 2026, 13:01
    Fuente
    CISA KEV Catalog
    Referencia técnica
    NVD · CVE-2025-53521
    CISA KEV Catalog
    Prioridad · 69/100publication is historical (+0) · active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · CISA KEV Catalog authority (+12)
    hace 138 días
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRInteligencia operacional

    Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes &#59394; Oct 02, 2026 Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities ( KEV ) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write

    HTML source discovery from thehackernews.com CVEs: CVE-2026-104286, CVE-2026-85102, CVE-2026-93616, CVE-2026-93952, CVE-2026-94127. CISA KEV/exploitation signal detected. Vendors: Microsoft, Cisco, Google, Fortinet, Citrix, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    La vulnerabilidad CVE-2026-104286 en FortiMail está siendo explotada activamente in-the-wild y ha sido incluida en el catálogo KEV de CISA, permitiendo ejecución de escritura de archivos no autenticada.

    Acción recomendada

    Identificar y parchear inmediatamente los dispositivos FortiMail afectados; no esperar al ciclo de mantenimiento regular y realizar triage de seguridad hoy mismo.

    Vendors:FortinetMicrosoftCiscoGoogleSectores:public sectorcloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    02 oct 2026, 06:00
    Detectado
    02 oct 2026, 06:00
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    NVD · CVE-2026-104286
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 3 horas
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRCRAInteligencia operacional

    WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory &#59394; Oct 01, 2026 Vulnerability / Web Security Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the &quot;SC_&quot; markers present in the injected content. Sucuri has described the malware as

    HTML source discovery from thehackernews.com CVEs: CVE-2026-1581. CISA KEV/exploitation signal detected. Vendors: Microsoft, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, PHP, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    El CVE-2026-1581 está siendo explotado activamente para desplegar backdoors persistentes en WordPress que se autorreparan, dificultando la limpieza estándar.

    Acción recomendada

    Identifique y aísle los servidores WordPress afectados, realice una limpieza profunda de base de datos y memoria compartida, y aplique el parche de seguridad de forma inmediata.

    Vendors:WordPressMITRE:T1190 Exploit Public-Facing ApplicationT1547 Boot or Logon Autostart ExecutionCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 16:01
    Detectado
    01 oct 2026, 16:01
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    NVD · CVE-2026-1581
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 17 horas
    INMEDIATOCríticoACTION REQUIREDISO27001AI ACTCRAInteligencia operacional

    How Financial Services Companies Can Modernize Their Software Supply Chain &#59394; Oct 01, 2026 DevSecOps / Patch Management Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises the change-freeze calendar. The finding gets an exception, a compensating

    HTML source discovery from thehackernews.com CISA KEV/exploitation signal detected. Vendors: Microsoft, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: high.

    Por qué importa

    Se ha detectado explotación activa in-the-wild en múltiples tecnologías críticas para el sector financiero, lo que impacta directamente en la resiliencia operativa bajo normativas DORA y CRA.

    Acción recomendada

    Priorizar la remediación inmediata de los activos afectados por CVEs en el catálogo KEV; no esperar al ciclo mensual de parcheo y auditar las dependencias de la cadena de suministro.

    Vendors:MicrosoftGoogleF5ZyxelSectores:bankinginsuranceasset managementMITRE:T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 13:00
    Detectado
    01 oct 2026, 13:00
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    Original advisory
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 20 horas
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRInteligencia operacional

    CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV &#59394; Oct 01, 2026 Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities ( KEV ), following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 (CVSS score: 9.8), could allow an unauthenticated, remote attacker to access an

    HTML source discovery from thehackernews.com CVEs: CVE-2026-76504. CISA KEV/exploitation signal detected. Vendors: Microsoft, Cisco, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    La vulnerabilidad CVE-2026-76504 permite el bypass de autenticación en Cisco Catalyst SD-WAN Manager y está siendo explotada activamente in-the-wild, lo que representa un riesgo crítico de acceso no autorizado.

    Acción recomendada

    Identifique inmediatamente los activos afectados en su inventario y aplique el parche de seguridad de Cisco hoy mismo; no espere al ciclo de mantenimiento mensual.

    Vendors:CiscoSectores:public sectorcloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 11:01
    Detectado
    01 oct 2026, 11:01
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    NVD · CVE-2026-76504
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 22 horas
    INMEDIATOCríticoACTION REQUIREDISO27001GDPRAI ACTInteligencia operacional

    Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version &#59394; Oct 01, 2026 Artificial Intelligence / AI Safety Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon , that it said is being rolled out to a set of trusted cyber defenders through its Fairwind Program. &quot;It delivers frontier performance in complex workflows across real-world software engineering, enterprise knowledge work like legal and finance, a

    HTML source discovery from thehackernews.com CISA KEV/exploitation signal detected. Vendors: Microsoft, Google, F5, Zyxel, GitLab, Linux, WordPress, Veeam, MikroTik, Cloudflare, Check Point. DORA relevance: medium.

    Por qué importa

    Se ha detectado actividad de explotación in-the-wild (KEV) que afecta a múltiples proveedores críticos presentes en el stack tecnológico, lo que eleva el riesgo de compromiso de infraestructura.

    Acción recomendada

    Prioriza la remediación inmediata de los activos afectados por las vulnerabilidades KEV identificadas; no esperes al ciclo de parcheo mensual y notifica a los propietarios de los sistemas.

    Vendors:MicrosoftGoogleF5ZyxelSectores:healthcarecloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseCISO · SecOps · Incident Response · Vulnerability Management
    Publicado
    n/a
    Actualizado
    01 oct 2026, 09:00
    Detectado
    01 oct 2026, 09:00
    Fuente
    The Hacker News Vulnerability
    Referencia técnica
    Original advisory
    The Hacker News Vulnerability
    Prioridad · 66/100active exploitation/KEV/ransomware signal (+50) · critical severity (+25) · regulatory relevance (+15) · source authority (+2) · updated <24h (+5 cap)
    hace 1 día