Seguridad en AWS

La señal de hoy The Hacker News ha publicado PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions (16 de octubre de 2026). A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwit ...

La señal de hoy AWS What’s New ha publicado Amazon Redshift long-term system table retention with Amazon S3 Tables is now available in additional AWS Regions (15 de octubre de 2026). Amazon Redshift long-term retention for system table data through native integration with Amazon S3 Tables is now available in additional AWS Regions. With this feature, you can configure your Redshift system table data retention beyond the current 7-day limit to meet your compliance, auditing, and observability requirements. Once enabled, AWS automatically ...

La señal de hoy The Hacker News ha publicado Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory (15 de octubre de 2026). A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel’s live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel’s networking code, not in any one cl ...

La señal de hoy The Hacker News ha publicado Langflow’s Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts (15 de octubre de 2026). Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026 ...

La señal de hoy The Hacker News ha publicado Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far (13 de octubre de 2026). An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.” A fix for the third is still pending, according to Volexity. Volexity, which rep ...

La señal de hoy AWS What’s New ha publicado Amazon CloudFront now supports AWS Lambda Web Functions as an origin (12 de octubre de 2026). Starting today, you can deliver web applications built on AWS Lambda Web Functions through CloudFront’s global edge network. With CloudFront in front of a Lambda Web Function, you get TLS termination at the edge for lower latency and faster connections, caching for better performance, and custom domains with managed TLS certificates. No changes to applicatio ...

La señal de hoy The Hacker News ha publicado Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE (12 de octubre de 2026). A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in rem ...

La señal de hoy The Hacker News ha publicado Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access (9 de octubre de 2026). Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as “fixed a bug that could lead to a crash,” with no CVE assigned an ...

La señal de hoy AWS What’s New ha publicado AWS Lambda supports OAuth authentication for self-managed Apache Kafka event sources (9 de octubre de 2026). AWS Lambda now supports OAuth authentication for self-managed Apache Kafka event source mappings (ESM), including Kafka clusters that customers run themselves and managed offerings such as Confluent Cloud, Aiven, and Redpanda. With this launch, customers can authenticate their Lambda Kafka consumers through their enterprise identity provider, helping them me ...

La señal de hoy The Hacker News ha publicado Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments (9 de octubre de 2026). Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. “CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions ...

La señal de hoy The Hacker News ha publicado Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details (7 de octubre de 2026). Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service ...

La señal de hoy The Hacker News ha publicado ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests (5 de octubre de 2026). A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook. There are actively exploited bugs in the mix, cleaner intrusion paths, smarter automation, and a long patch list waiting behind them. Some att ...