Resumen semanal de ciberseguridad — 2026-10-26 a 2026-11-02
774 eventos de seguridad esta semana: 11 CVE con explotación activa, 1 filtraciones/incidentes.
Filtraciones, exploits públicos, CVEs del catálogo CISA KEV y cheatsheets de pentesting — curado a partir de fuentes públicas, sin relleno genérico.
774 eventos de seguridad esta semana: 11 CVE con explotación activa, 1 filtraciones/incidentes.
El grupo Black X publicó información médica y bancaria de clientes de DomusVi, exponiendo historiales, contactos y cuentas.
We have the complete dataset for 867,800 customers of one of Spain’s largest fitness chains. ID: NAME ID Number Birthday Email PhoneNumber Bank Account chat id:8AMfga6Y5FmQlK
Hospitals and Health Care Stolen data: 51 GB.
El grupo Booba Project reivindica el ataque a Collier Sports Medicine, centro ortopédico estadounidense, exfiltrando 20 GB de información sensible del sector salud.
IT Services and IT Consulting Stolen data: 50 GB.
Non-profit Organizations Stolen data: 30 GB.
Research Services Stolen data: 1 GB.
Medical Practices Stolen data: 105 GB.
---
El grupo de ransomware Climax inc publicó datos de Frolina Home, empresa del sector retail y e-commerce, sin que haya cobertura de prensa conocida.
El grupo de ransomware Climax inc reivindicó el ataque a Nepal Electricity Authority, exponiendo información del proveedor eléctrico nacional.
Sector: Medical
Campaña de fraude/phishing detectada por el CSIRT Nacional de Chile.
This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2.
Assiniboine Dental Group is a private dental practice in Winnipeg, Manitoba, operating as a "trustee." It is required to securely store patients' personal health information in accordance with the province's Personal Health Information Protection Act (PHIA). However, due to negligence in security, dental records and payment information (patient names, contact information, treatment history, and insurance/financial transaction information) were compromised and are being offered to your attention.
Conecuh Sausage, a family-owned sausage company in Alabama, is known for its hickory-smoked pork sausages made with a proprietary, closely guarded seasoning blend. However, due to a lax approach to security, customer data, payment information, secret recipes/intellectual property, projects, personnel records, and supplier contracts were compromised and are now exposed.
Custom Floors Unlimited designs and installs high-quality, custom-made solid wood flooring. They specialize in creating unique designs. However, they do not specialize in ensuring their own security or the security of their customers' data. Therefore, we provide you with confidential HR/payroll documents, financial/tax documents, customer contracts and commercial transactions, supplier/legal/insurance files, and IT credentials.
El grupo Interlock publicó información sensible de menores y familias del centro neoyorquino Elmcrest, incluyendo historiales médicos y números de seguro social.
Madison Honda, located in Madison, New Jersey, offers a wide selection of new and used vehicles, as well as flexible financing options.They are negligent when it comes to their own security and that of their customers, which is why we disclose non-public personal information (NPI) and personally identifiable information (PII) protected by laws such as the Gramm-Leach-Bliley Act (GLBA).This includes transaction data, vehicle purchase records, lease agreements and financing terms, credit reports…