C|CISO A | CISA | CISM | SFPC | I27001LA | Lead Cybersecurity | ISO 27001 | ITIL | COBIT5| Business Continuity Management | Ethical Hacking | Docente | Investig
Joined December 2011
- Tweets17.5K
- Following577
- Followers132
- Likes408
Check out my latest article: La convergencia entre Inteligencia Artificial y ciberataques: el nuevo riesgo sistémico global linkedin.com/pulse/la-conver… a través de @LinkedIn
Check out my latest article: Cuando la información se vuelve la superficie de ataque: entender las trampas para agentes de IA linkedin.com/pulse/cuando-la… a través de @LinkedIn
Check out my latest article: El costo real de la inacción: ciberseguridad e infraestructura crítica en América Latina linkedin.com/pulse/el-costo-… a través de @LinkedIn
Check out my latest article: IA clínica sin gobierno: el pasivo que los sistemas de salud latinoamericanos acumulan en silencio linkedin.com/pulse/ia-cl%25C… a través de @LinkedIn
Termite ransomware breaches linked to ClickFix CastleRAT attacks
Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor. [...]
bleepingcomputer.com/news/se…
⚠️ A flaw in #GitHub Codespaces let attackers hide malicious Copilot instructions inside a GitHub issue.
When a developer opened a Codespace from that issue, Copilot could silently run the injected prompt and leak a privileged GITHUB_TOKEN.
🔗 Details → thehackernews.com/2026/02/ro…
Threat actors are actively exploiting CVE-2026-1731 (9.9) in BeyondTrust Remote Support & PRA.
Attackers extract portal data, then open WebSocket channels to trigger unauthenticated RCE.
🔗 Read → thehackernews.com/2026/02/re…
🛑 A suspected Iran-aligned campaign targets NGOs and individuals documenting human rights abuses.
HarfangLab tracks the activity as RedKitten, using Excel files themed around deceased protesters to deliver malware.
🔗 Read → thehackernews.com/2026/01/ir…
⚠️ Poland confirms coordinated cyber attacks on 30+ renewable energy sites and a major CHP plant.
CERT Polska says the campaign was destructive, using wiper malware, but failed to disrupt power or heat supply.
🔗 Read → thehackernews.com/2026/01/po…
Mandiant details how ShinyHunters abuse SSO to steal cloud data
Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks [...]
bleepingcomputer.com/news/se…
Researcher reveals evidence of private Instagram profiles leaking photos
A researcher has released detailed evidence showing some Instagram private accounts exposed photo links to unauthenticated visitors. [...]
bleepingcomputer.com/news/se…
🛑 Chrome extensions are being abused at scale.
Researchers uncovered tools that hijack affiliate links, scrape shopping data, steal ChatGPT login tokens, and even deliver phishing pages—while passing official store reviews.
🔗 Learn more about → thehackernews.com/2026/01/re…
🌍 Cybercrime enforcement follows clear patterns. A new analysis maps 418 confirmed actions worldwide from 2021–2025, showing where arrests, takedowns, and sanctions are focused.
🔗 How cybercrime is being targeted worldwide → thehackernews.com/2026/01/ba…
⚠️ Researchers map 175K publicly exposed Ollama LLM servers worldwide.
Tool-calling turns exposed AI into a highest-severity execution risk.
Full details: thehackernews.com/2026/01/re…
Aisuru botnet sets new record with 31.4 Tbps DDoS attack
The Aisuru/Kimwolf botnet launched a new massive distributed denial of service (DDoS) attack in December 2025, peaking at 31.4 Tbps and 200 million requests per second. [...]
bleepingcomputer.com/news/se…
🚨 Container adoption has outpaced security.
82% of organizations suffered a container breach last year, and most now assume one will happen every year. Fast-moving containers and unchecked public images keep adding risk faster than teams can fix it.
🔗- thehackernews.com/expert-ins…
📊🛡️ Poor threat intel drives downtime and analyst burnout in modern SOCs.
Fresh, validated feeds shorten MTTD/MTTR and reduce false positives at scale.
Full details: thehackernews.com/2026/01/3-…
Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies
The defense mechanisms that NPM introduced after the 'Shai-Hulud' supply-chain attacks have weaknesses that allow threat actors to bypass them via Git dependencies. [...]
bleepingcomputer.com/news/se…
Internet security watchdog Shadowserver tracks nearly 800,000 IP addresses with Telnet fingerprints amid ongoing attacks exploiting a critical authentication bypass vulnerability in the GNU InetUtils telnetd server. [...]
bleepingcomputer.com/news/se…
🛑 Attackers now use 🤖 AI to write, hide, and mutate malware in real time. Google and Anthropic confirm AI-orchestrated attacks running autonomously end to end.
🔗 How network signals expose what endpoints miss → thehackernews.com/2026/01/wi…
