Seguridad en AWS

La señal de hoy AWS What’s New ha publicado AWS IAM Identity Center’s Identity Store now supports change notifications through Amazon EventBridge (28 de octubre de 2026). AWS IAM Identity Center’s Identity Store now delivers real-time events to Amazon EventBridge when users, groups, or group memberships or the identity store itself is created, updated, or deleted. AWS IAM Identity Center Identity Store is a central repository that allows you to manage identities and access across AWS accounts and applications, serving as the ...

La señal de hoy The Hacker News ha publicado Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass (28 de octubre de 2026). Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitra ...

La señal de hoy AWS What’s New ha publicado AWS IAM Identity Center now supports cross-Region trusted identity propagation (26 de octubre de 2026). Trusted identity propagation carries a user’s identity with their request, so AWS services can grant permissions based on who the user is and their underlying group associations, and log that user’s access for auditing. With cross-Region support, this identity context can now be propagated to AWS services running in different AWS Regions, giving you greater ...

La señal de hoy The Hacker News ha publicado Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers (25 de octubre de 2026). A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network’s access rules permit to connect t ...

La señal de hoy The Hacker News ha publicado Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data (23 de octubre de 2026). Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-11149 ...

La señal de hoy The Hacker News ha publicado Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials (23 de octubre de 2026). Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. “Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizations worldwide, and have attempted to fu ...

La señal de hoy AWS What’s New ha publicado AWS Continuum for code vulnerabilities is now generally available (22 de octubre de 2026). Today, AWS announces the general availability of AWS Continuum for code vulnerabilities. Continuum for code vulnerabilities discovers, validates, prioritizes, and remediates code vulnerabilities at machine speed. Continuum for code vulnerabilities builds a context graph from your AWS environment, including resource topology, identity relationships, and netwo Una noticia genera atención. La pregunta útil es otra: ¿esto cambia algo de lo que tu equipo tiene que hacer esta semana, o no? ...

La señal de hoy AWS What’s New ha publicado Amazon WorkSpaces simplifies secure AI agent access to enterprise cloud desktops with less infrastructure to operate and manage (20 de octubre de 2026). WorkSpaces for AI agents now handles authentication and desktop connections as part of the managed Model Context Protocol (MCP) service, so you can connect agents to governed cloud desktops, removing the need to write custom code. This makes it easy to use WorkSpaces with any client that supports MCP. Connecting an agent to a desktop previously required you ...

La señal de hoy The Hacker News ha publicado Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA (20 de octubre de 2026). Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto N ...

La señal de hoy The Hacker News ha publicado ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan (20 de octubre de 2026). Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious cod ...

La señal de hoy AWS What’s New ha publicado AWS License Manager now supports license type conversions for Ubuntu Pro purchased through AWS Marketplace (14 de octubre de 2026). AWS License Manager now supports in-place upgrades for EC2 Ubuntu LTS (Long Term Support) instances to Ubuntu Pro available on AWS Marketplace. This allows customers to strengthen their security posture and meet compliance requirements without rebuilding their fleet or migrating workloads to a new instance or AMI. With an Ubuntu Pro subscription, customers r ...

La señal de hoy The Hacker News ha publicado PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions (16 de octubre de 2026). A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwit ...