Artículos

La señal de hoy AWS What’s New ha publicado Amazon RDS for MySQL now supports new minor version 8.4.11 (24 de agosto de 2026). Starting today, Amazon Relational Database Service (Amazon RDS) for MySQL supports MySQL minor version 8.4.11, the latest minor released by community MySQL. In addition to operational improvements, MySQL 8.4.11 introduces support for post-quantum TLS (PQ-TLS) key exchange, providing you with post-quantum cryptography options for encrypting your data in-trans ...

La señal de hoy The Hacker News ha publicado Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data (25 de agosto de 2026). The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-21962 (CVSS score: 10.0), allows an unauthenticated attac ...

La señal de hoy AWS What’s New ha publicado Amazon Timestream for InfluxDB now supports customer managed keys (20 de agosto de 2026). Amazon Timestream for InfluxDB now supports AWS Key Management Service (AWS KMS) customer managed keys for encrypting data at rest in InfluxDB 2 database instances, InfluxDB 2 Read Replicas, and InfluxDB 3 clusters. Customers select a symmetric AWS KMS key when creating a database resource. Timestream for InfluxDB uses the selected key to encrypt the underly ...

La señal de hoy AWS What’s New ha publicado AWS Partner Central agents MCP Server now supports OAuth with AWS Sign-In (20 de agosto de 2026). AWS partners can now access AWS Partner Central agents from tools they already use, such as Amazon Quick and Kiro, using OAuth through AWS Sign-In. Partners can authorize agent access with their existing AWS identities, sign-in methods, IAM permissions, and governance controls without installing or maintaining additional authentication software. Previously, ...

La señal de hoy AWS What’s New ha publicado AWS Lambda MicroVMs is now available in 5 additional AWS regions (19 de agosto de 2026). AWS Lambda MicroVMs is now available in 5 additional AWS Regions: Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Sydney), Europe (Frankfurt), and Europe (Stockholm). With this launch, you can use Lambda MicroVMs in a total of 10 AWS Regions. Lambda MicroVMs is a serverless compute primitive that provides VM-level isolation, near-instant launc ...

La señal de hoy The Hacker News ha publicado Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation (19 de agosto de 2026). The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below - CVE-2026-65400 (CVSS score: 9.8) - An improper authentication vulnerability impacting A ...

La señal de hoy AWS What’s New ha publicado Amazon Aurora DSQL now supports Amazon CloudWatch Database Insights (20 de agosto de 2026). Amazon Aurora DSQL now features a new Amazon CloudWatch Database Insights metric that delivers per-statement, cluster-level performance monitoring details. Aurora DSQL database insights captures sampled wait states and normalized SQL statements for all active cluster sessions. You can use it to diagnose performance issues with your clusters, and identify the ...

La señal de hoy The Hacker News ha publicado Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution (20 de agosto de 2026). A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of command injection that can lead to remote code execution. “A remote code execution ...

La señal de hoy AWS What’s New ha publicado AWS announces the general availability of a new AWS Local Zone in Las Vegas, Nevada (20 de agosto de 2026). AWS Local Zone in Las Vegas, Nevada is now generally available. The new AWS Local Zone supports Amazon Elastic Compute Cloud (Amazon EC2) C7i, M7i, R7i, and C8gn instances, Amazon Elastic Block Store (Amazon EBS) volume types gp3, gp2, io1, sc1, and st1, Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), Applicatio ...

La señal de hoy The Hacker News ha publicado Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution (21 de agosto de 2026). Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required. The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant’s cloud-based identity and access management service. It was previ ...

Después de bastantes revisiones de cuentas de AWS, lo llamativo no es la variedad de los problemas. Es lo repetitivos que son. Las mismas siete cosas, una y otra vez, en empresas de tamaños y sectores completamente distintos. Ninguna es difícil de arreglar. Todas siguen ahí porque nadie las tenía asignadas. 1. Claves de acceso que llevan años vivas Es el hallazgo más frecuente con diferencia. Claves de IAM creadas para un despliegue puntual en 2023, que nunca se rotaron y que siguen teniendo permisos amplios. ...

Hay una confusión que me encuentro constantemente en empresas españolas: creer que usar AWS te hace cumplir el RGPD. No es así. AWS cumple su parte. La tuya sigue siendo tuya entera. Este artículo es la parte técnica del asunto. No sustituye a un asesor legal, y si tratas datos sensibles necesitas uno. El reparto de responsabilidades AWS actúa como encargado del tratamiento. Tú eres el responsable. Eso significa: Responsabilidad De quién Seguridad física de los centros de datos AWS Parcheado del hipervisor y la red subyacente AWS Certificaciones ISO 27001, SOC 2, ENS AWS (de su infraestructura) Qué datos personales metes y por qué Tuya Quién tiene acceso a esos datos Tuya Cifrado de lo que guardas Tuya Cuánto tiempo los conservas y cómo los borras Tuya Poder demostrar todo lo anterior Tuya La última fila es la que más gente ignora. El RGPD funciona por responsabilidad proactiva: no basta con cumplir, tienes que poder demostrar que cumples. Y eso se demuestra con configuración y con registros. ...