{"users":[{"id":1,"username":"Grego","name":"","avatar_template":"/user_avatar/www.yodev.dev/grego/{size}/649_2.png","admin":true,"moderator":true,"trust_level":4},{"id":7,"username":"Devy","name":"","avatar_template":"/user_avatar/www.yodev.dev/devy/{size}/62_2.png","admin":true,"trust_level":2},{"id":82,"username":"Team","name":null,"avatar_template":"/user_avatar/www.yodev.dev/team/{size}/2092_2.png","admin":true,"trust_level":2}],"primary_groups":[],"flair_groups":[],"topic_list":{"can_create_topic":false,"filter":"latest","more_topics_url":"/c/cybersecurity/16?page=1","per_page":30,"top_tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":369,"name":"claude-code","slug":"claude-code"},{"id":686,"name":"cve","slug":"cve"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":289,"name":"npm","slug":"npm"},{"id":366,"name":"open-source","slug":"open-source"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":55,"name":"devops","slug":"devops"},{"id":126,"name":"noticias","slug":"noticias"},{"id":279,"name":"security","slug":"security"},{"id":27,"name":"ia","slug":"ai"},{"id":535,"name":"ci-cd","slug":"ci-cd"},{"id":474,"name":"codex","slug":"codex"},{"id":151,"name":"cursor","slug":"cursor"},{"id":1193,"name":"dependencias","slug":"dependencias"},{"id":542,"name":"devsecops","slug":"devsecops"},{"id":2,"name":"javascript","slug":"javascript"},{"id":522,"name":"malware","slug":"malware"},{"id":275,"name":"mcp","slug":"mcp"},{"id":191,"name":"openai","slug":"openai"},{"id":743,"name":"owasp","slug":"owasp"},{"id":950,"name":"pentesting","slug":"pentesting"},{"id":334,"name":"php","slug":"php"},{"id":1289,"name":"php2shell","slug":"php2shell"},{"id":499,"name":"plugins","slug":"plugins"},{"id":564,"name":"prompt-injection","slug":"prompt-injection"},{"id":480,"name":"railway","slug":"railway"},{"id":444,"name":"yodev","slug":"yodev"},{"id":1290,"name":"actualizar-php","slug":"actualizar-php"}],"topics":[{"fancy_title":"About the Cybersecurity category","fancy_title_localized":false,"locale":null,"id":68,"title":"About the Cybersecurity category","slug":"about-the-cybersecurity-category","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2025-07-06T22:52:18.294Z","last_posted_at":"2025-07-06T22:52:18.299Z","bumped":true,"bumped_at":"2025-07-06T22:54:06.888Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Las últimas noticias sobre detección y protección contra amenazas.","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[],"tags_descriptions":{},"views":8,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"PHP2Shell: cómo saber si explotaron tu servidor con un solo grep (y por qué tu access.log no lo encuentra)","fancy_title_localized":false,"locale":"es","id":5751,"title":"PHP2Shell: cómo saber si explotaron tu servidor con un solo grep (y por qué tu access.log no lo encuentra)","slug":"php2shell-como-saber-si-explotaron-tu-servidor-con-un-solo-grep-y-por-que-tu-access-log-no-lo-encuentra","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/6/658b85d6677967892d55074a47dfc1ddec10e065.jpeg","created_at":"2026-10-23T12:03:37.546Z","last_posted_at":"2026-10-23T12:03:37.770Z","bumped":true,"bumped_at":"2026-10-23T12:03:37.770Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Para saber si explotaron PHP2Shell en tu servidor, AWS publicó una sola firma: peticiones POST con PHP_SESSION_UPLOAD_PROGRESS en el cuerpo, desde el 17 de octubre. El problema es que en un servidor nginx o Apache con la…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":896,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/6/658b85d6677967892d55074a47dfc1ddec10e065.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":345,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/658b85d6677967892d55074a47dfc1ddec10e065_2_620x345.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":444,"name":"yodev","slug":"yodev"},{"id":346,"name":"aws","slug":"aws"},{"id":334,"name":"php","slug":"php"},{"id":1289,"name":"php2shell","slug":"php2shell"},{"id":1308,"name":"apache","slug":"apache"},{"id":1307,"name":"nginx","slug":"nginx"},{"id":1306,"name":"logs","slug":"logs"}],"tags_descriptions":{},"views":9,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"CVE-2026-109618 y CVE-2026-109619: qué versión de PHP necesitas y cuándo sale el parche","fancy_title_localized":false,"locale":"es","id":5732,"title":"CVE-2026-109618 y CVE-2026-109619: qué versión de PHP necesitas y cuándo sale el parche","slug":"cve-2026-109618-y-cve-2026-109619-que-version-de-php-necesitas-y-cuando-sale-el-parche","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67_2_1024x576.jpeg","created_at":"2026-10-21T11:40:44.653Z","last_posted_at":"2026-10-21T11:40:44.936Z","bumped":true,"bumped_at":"2026-10-21T11:40:44.936Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"La versión de PHP que corrige CVE-2026-109618 y CVE-2026-109619 se conocerá el miércoles 21 de octubre de 2026 a las 14:00 UTC, cuando el equipo de seguridad de PHP publique el parche. Mientras tanto, ya puedes comprobar…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1600,"height":900,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/aa025595d8d83d9f0ea806569d869ef7f3302c67_2_620x348.jpeg"}],"tags":[{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":686,"name":"cve","slug":"cve"},{"id":334,"name":"php","slug":"php"},{"id":1289,"name":"php2shell","slug":"php2shell"},{"id":1291,"name":"seguridad-web","slug":"seguridad-web"},{"id":1290,"name":"actualizar-php","slug":"actualizar-php"}],"tags_descriptions":{},"views":36,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"¿Cómo saber si un plugin de Claude Code es seguro? Probamos ModVet, el escáner que lo revisa antes de instalarlo","fancy_title_localized":false,"locale":"es","id":5728,"title":"¿Cómo saber si un plugin de Claude Code es seguro? Probamos ModVet, el escáner que lo revisa antes de instalarlo","slug":"como-saber-si-un-plugin-de-claude-code-es-seguro-probamos-modvet-el-escaner-que-lo-revisa-antes-de-instalarlo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99_2_1024x512.png","created_at":"2026-10-20T19:48:43.379Z","last_posted_at":"2026-10-20T19:48:43.716Z","bumped":true,"bumped_at":"2026-10-20T19:48:43.716Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Para saber si un plugin de Claude Code es seguro, revisa lo que va a ejecutar antes de instalarlo: sus hooks, sus mods, sus servidores MCP y su carpeta bin/, porque todo eso corre en tu máquina con tus permisos de usuari…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/d/de2d12355d1521e0e548188f209b3ae83f402b99_2_620x310.png"}],"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":369,"name":"claude-code","slug":"claude-code"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":499,"name":"plugins","slug":"plugins"},{"id":564,"name":"prompt-injection","slug":"prompt-injection"},{"id":1284,"name":"mods","slug":"mods"},{"id":743,"name":"owasp","slug":"owasp"}],"tags_descriptions":{},"views":19,"like_count":1,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":1,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"¿Es seguro dsh-our-free-model? Lo que encontramos al leer el código del plugin “gratis” para DeepSeek Harness","fancy_title_localized":false,"locale":"es","id":5723,"title":"¿Es seguro dsh-our-free-model? Lo que encontramos al leer el código del plugin “gratis” para DeepSeek Harness","slug":"es-seguro-dsh-our-free-model-lo-que-encontramos-al-leer-el-codigo-del-plugin-gratis-para-deepseek-harness","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-10-20T00:31:09.300Z","last_posted_at":"2026-10-20T00:31:09.537Z","bumped":true,"bumped_at":"2026-10-20T00:31:09.537Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"No es seguro cargarlo junto a tus propias credenciales: dsh-our-free-model, un plugin independiente para DeepSeek Harness que promete modelos frontera gratis, sin cuenta y sin API key, obtiene esos modelos de las capas g…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":null,"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":1019,"name":"open-code","slug":"open-code"},{"id":499,"name":"plugins","slug":"plugins"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":194,"name":"deepseek","slug":"deepseek"},{"id":1006,"name":"deepseek-harness","slug":"deepseek-harness"}],"tags_descriptions":{},"views":22,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Next.js 16.4.1 y 15.5.28 corrigen dos RCE críticas: cómo saber si tu app está expuesta","fancy_title_localized":false,"locale":"es","id":5708,"title":"Next.js 16.4.1 y 15.5.28 corrigen dos RCE críticas: cómo saber si tu app está expuesta","slug":"next-js-16-4-1-y-15-5-28-corrigen-dos-rce-criticas-como-saber-si-tu-app-esta-expuesta","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd_2_1024x576.png","created_at":"2026-10-17T18:19:46.396Z","last_posted_at":"2026-10-17T18:19:46.633Z","bumped":true,"bumped_at":"2026-10-17T18:19:46.633Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Vercel publicó Next.js 16.4.1 y 15.5.28 el 14 de octubre de 2026 para corregir dos vulnerabilidades críticas de ejecución remota de código (RCE) sin autenticación y una denegación de servicio de severidad alta. Que tu ap…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1600,"height":900,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd_2_1024x576.png"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/6/675860bc1bd6774ea85c3c775f332e9289bbb2fd_2_620x348.png"}],"tags":[{"id":105,"name":"react","slug":"react"},{"id":686,"name":"cve","slug":"cve"},{"id":289,"name":"npm","slug":"npm"},{"id":634,"name":"nextjs","slug":"nextjs"},{"id":1268,"name":"rce","slug":"rce"},{"id":1267,"name":"vulnerabilidad","slug":"vulnerabilidad"}],"tags_descriptions":{},"views":31,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"¿Tu proyecto usa una versión vulnerable de Handlebars? Cómo comprobarlo y actualizar a 4.7.10","fancy_title_localized":false,"locale":"es","id":5647,"title":"¿Tu proyecto usa una versión vulnerable de Handlebars? Cómo comprobarlo y actualizar a 4.7.10","slug":"tu-proyecto-usa-una-version-vulnerable-de-handlebars-como-comprobarlo-y-actualizar-a-4-7-10","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31_2_1024x512.png","created_at":"2026-10-11T13:27:44.835Z","last_posted_at":"2026-10-11T13:27:45.096Z","bumped":true,"bumped_at":"2026-10-11T13:27:45.096Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Si tu proyecto tiene Handlebars 4.0.0 a 4.7.9 en cualquier parte del árbol de dependencias, usa una versión vulnerable: la 4.7.10 corrige dos fallos críticos de inyección de JavaScript. La versión salió el 5 de octubre d…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5867c2f1fa1063a9e0963c227c02d68064e41d31_2_620x310.png"}],"tags":[{"id":2,"name":"javascript","slug":"javascript"},{"id":5,"name":"nodejs","slug":"nodejs"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":686,"name":"cve","slug":"cve"},{"id":289,"name":"npm","slug":"npm"},{"id":1193,"name":"dependencias","slug":"dependencias"},{"id":1249,"name":"npm-audit","slug":"npm-audit"},{"id":1248,"name":"handlebars","slug":"handlebars"}],"tags_descriptions":{},"views":34,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"is_post_voting":true,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"El crash de Firebase en iOS: qué pasó y por qué desactivar Analytics no protegió tu app","fancy_title_localized":false,"locale":"es","id":5486,"title":"El crash de Firebase en iOS: qué pasó y por qué desactivar Analytics no protegió tu app","slug":"el-crash-de-firebase-en-ios-que-paso-y-por-que-desactivar-analytics-no-protegio-tu-app","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e_2_1024x576.jpeg","created_at":"2026-09-29T11:30:19.607Z","last_posted_at":"2026-09-29T11:30:19.769Z","bumped":true,"bumped_at":"2026-09-29T11:30:19.769Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"El crash de Firebase en iOS del 29 de septiembre no lo causó tu código: lo causó una respuesta mal formada que Google Analytics for Firebase envió desde sus servidores, y que cerraba las apps al abrirse. Google corrig…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/3b1147d3badb143051959a9e8550c08ba01d475e_2_620x348.jpeg"}],"tags":[{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":614,"name":"firebase","slug":"firebase"},{"id":1193,"name":"dependencias","slug":"dependencias"},{"id":1054,"name":"ios","slug":"ios"},{"id":1192,"name":"crash","slug":"crash"},{"id":1191,"name":"google-analytics","slug":"google-analytics"}],"tags_descriptions":{},"views":92,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Ghidra: cómo analizar un programa sin tener su código fuente","fancy_title_localized":false,"locale":"es","id":5365,"title":"Ghidra: cómo analizar un programa sin tener su código fuente","slug":"ghidra-como-analizar-un-programa-sin-tener-su-codigo-fuente","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99_2_1024x512.png","created_at":"2026-09-16T19:53:18.271Z","last_posted_at":"2026-09-16T19:53:18.416Z","bumped":true,"bumped_at":"2026-09-16T19:53:18.416Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Ghidra permite analizar programas compilados sin tener su código fuente: puedes examinar sus instrucciones, descompilar funciones y explorar su lógica. \nResulta útil cuando una investigación te lleva a un binario: un eje…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/16568ae2f27c4dd2ed0b41eed727571c4c4b7f99_2_620x310.png"}],"tags":[{"id":1131,"name":"descompilacion","slug":"descompilacion"},{"id":1130,"name":"analisis-de-binarios","slug":"analisis-de-binarios"},{"id":1129,"name":"ingenieria-inversa","slug":"ingenieria-inversa"},{"id":1128,"name":"ghidra","slug":"ghidra"}],"tags_descriptions":{},"views":17,"like_count":0,"has_summary":false,"last_poster_username":"Team","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":82,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Cómo auditar la seguridad de tu código con IA usando el skill que liberó Cloudflare","fancy_title_localized":false,"locale":"es","id":5358,"title":"Cómo auditar la seguridad de tu código con IA usando el skill que liberó Cloudflare","slug":"como-auditar-la-seguridad-de-tu-codigo-con-ia-usando-el-skill-que-libero-cloudflare","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/32cff621bb85918d02879c3f738d520221c9779e_2_1024x512.png","created_at":"2026-09-16T17:41:38.280Z","last_posted_at":"2026-09-16T17:41:38.411Z","bumped":true,"bumped_at":"2026-09-16T17:41:38.411Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Ya puedes auditar la seguridad de tu código con IA usando security-audit, el skill MIT que Cloudflare usó como base de su harness interno de vulnerabilidades. Se instala con un solo npx skills add y funciona con cualquie…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/3/32cff621bb85918d02879c3f738d520221c9779e.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/32cff621bb85918d02879c3f738d520221c9779e_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/32cff621bb85918d02879c3f738d520221c9779e_2_620x310.png"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":460,"name":"skills","slug":"skills"},{"id":482,"name":"cloudflare","slug":"cloudflare"},{"id":563,"name":"agent-skills","slug":"agent-skills"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":950,"name":"pentesting","slug":"pentesting"},{"id":1127,"name":"auditoria-de-seguridad","slug":"auditoria-de-seguridad"}],"tags_descriptions":{},"views":41,"like_count":0,"has_summary":false,"last_poster_username":"Team","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":82,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"OpenAI liberó su CLI de seguridad: así lo pones a escanear tu repo y a cortar tu CI","fancy_title_localized":false,"locale":"es","id":4157,"title":"OpenAI liberó su CLI de seguridad: así lo pones a escanear tu repo y a cortar tu CI","slug":"openai-libero-su-cli-de-seguridad-asi-lo-pones-a-escanear-tu-repo-y-a-cortar-tu-ci","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a_2_1024x512.png","created_at":"2026-07-30T14:17:29.158Z","last_posted_at":"2026-07-30T14:17:29.326Z","bumped":true,"bumped_at":"2026-07-30T14:17:29.326Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"OpenAI liberó su CLI de seguridad: así lo pones a escanear tu repo y a cortar tu CI\nDurante un mes, el issue #29878 en openai/codex estuvo abierto con una observación incómoda adjunta. Codex CLI es Apache-2.0, todo el pr…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/586102f0ce3ea513937365cb1f4079604f4d9e6a_2_620x310.png"}],"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":474,"name":"codex","slug":"codex"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":191,"name":"openai","slug":"openai"},{"id":428,"name":"cli","slug":"cli"},{"id":535,"name":"ci-cd","slug":"ci-cd"},{"id":975,"name":"sarif","slug":"sarif"}],"tags_descriptions":{},"views":40,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"VulnHunter: Cómo Poner el Cazador de Vulnerabilidades de Capital One a Trabajar Sobre Tu Propio Repo","fancy_title_localized":false,"locale":"es","id":3917,"title":"VulnHunter: Cómo Poner el Cazador de Vulnerabilidades de Capital One a Trabajar Sobre Tu Propio Repo","slug":"vulnhunter-como-poner-el-cazador-de-vulnerabilidades-de-capital-one-a-trabajar-sobre-tu-propio-repo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856_2_1024x512.png","created_at":"2026-07-19T14:45:17.855Z","last_posted_at":"2026-07-19T14:45:18.016Z","bumped":true,"bumped_at":"2026-07-19T14:45:18.016Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"VulnHunter: Cómo Poner el Cazador de Vulnerabilidades de Capital One a Trabajar Sobre Tu Propio Repo\nPor Devy · Categoría: Cybersecurity para devs + AI coding tools · Con nota estratégica de Grego \nHay una diferencia eno…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1200,"height":600,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":512,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856_2_1024x512.png"},{"max_width":620,"max_height":500,"width":620,"height":310,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/76ef98dc0ac87fdc040dd8f7ee7d306d6a775856_2_620x310.png"}],"tags":[{"id":27,"name":"ia","slug":"ai"},{"id":55,"name":"devops","slug":"devops"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":279,"name":"security","slug":"security"},{"id":540,"name":"appsec","slug":"appsec"},{"id":950,"name":"pentesting","slug":"pentesting"},{"id":951,"name":"vulnhunter","slug":"vulnhunter"}],"tags_descriptions":{},"views":48,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"GhostApproval: La Vulnerabilidad que Obligó a Actualizar Cursor, Claude Code y Otros Coding Agents","fancy_title_localized":false,"locale":"es","id":3691,"title":"GhostApproval: La Vulnerabilidad que Obligó a Actualizar Cursor, Claude Code y Otros Coding Agents","slug":"ghostapproval-la-vulnerabilidad-que-obligo-a-actualizar-cursor-claude-code-y-otros-coding-agents","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc_2_1024x682.jpeg","created_at":"2026-07-10T17:52:48.500Z","last_posted_at":"2026-07-10T17:52:48.703Z","bumped":true,"bumped_at":"2026-07-10T17:52:48.703Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Durante años aprendimos a desconfiar de los archivos adjuntos. \nDespués de los paquetes npm. \nMás tarde de las imágenes Docker. \nAhora apareció una nueva categoría de riesgo: \nlos repositorios que abrís con un coding …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/3/35628cd09678df86cb3ca2476e155ce02818b9fc_2_620x413.jpeg"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":151,"name":"cursor","slug":"cursor"},{"id":359,"name":"ai-agents","slug":"ai-agents"},{"id":444,"name":"yodev","slug":"yodev"},{"id":279,"name":"security","slug":"security"},{"id":933,"name":"ghost-approval","slug":"ghost-approval"}],"tags_descriptions":{},"views":18,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Agentjacking: cuando tu coding agent es la nueva superficie de ataque","fancy_title_localized":false,"locale":"es","id":3279,"title":"Agentjacking: cuando tu coding agent es la nueva superficie de ataque","slug":"agentjacking-cuando-tu-coding-agent-es-la-nueva-superficie-de-ataque","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/51de3c196978a833475c73792b8b8c477fc3a172_2_1024x1024.jpeg","created_at":"2026-06-14T20:04:01.663Z","last_posted_at":"2026-06-14T20:04:01.790Z","bumped":true,"bumped_at":"2026-06-14T20:04:01.790Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Grego — Ciberseguridad \nDurante años aseguramos el pipeline de desarrollo haciéndonos una sola pregunta: ¿quién está autorizado a hacer esto? Firewalls, EDR, IAM, WAF — todo el stack está construido para atrapar lo no…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1254,"height":1254,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/51de3c196978a833475c73792b8b8c477fc3a172.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/51de3c196978a833475c73792b8b8c477fc3a172_2_1024x1024.jpeg"},{"max_width":620,"max_height":500,"width":500,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/51de3c196978a833475c73792b8b8c477fc3a172_2_500x500.jpeg"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":275,"name":"mcp","slug":"mcp"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":757,"name":"coding-agents","slug":"coding-agents"},{"id":564,"name":"prompt-injection","slug":"prompt-injection"}],"tags_descriptions":{},"views":22,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Bumblebee: por qué Perplexity abrió su playbook de seguridad interno","fancy_title_localized":false,"locale":"es","id":3211,"title":"Bumblebee: por qué Perplexity abrió su playbook de seguridad interno","slug":"bumblebee-por-que-perplexity-abrio-su-playbook-de-seguridad-interno","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4_2_1024x576.jpeg","created_at":"2026-06-10T14:46:08.267Z","last_posted_at":"2026-06-10T14:46:08.434Z","bumped":true,"bumped_at":"2026-06-10T14:46:08.434Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Bumblebee: por qué Perplexity abrió su playbook de seguridad interno (y por qué tu laptop importa más que tu server)\nArranco con el detalle que reencuadra toda la herramienta. Cuando un worm de supply-chain pega en el…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/8/8d265b02fabca8a4a5a1ab16aebcd739939327f4_2_620x348.jpeg"}],"tags":[{"id":366,"name":"open-source","slug":"open-source"},{"id":275,"name":"mcp","slug":"mcp"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":866,"name":"go","slug":"go"},{"id":865,"name":"perplexity","slug":"perplexity"}],"tags_descriptions":{},"views":16,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"El Sandbox de Microsoft para Agentes de IA Llega al Kernel — y Trae a OpenAI y NVIDIA Consigo","fancy_title_localized":false,"locale":"es","id":3109,"title":"El Sandbox de Microsoft para Agentes de IA Llega al Kernel — y Trae a OpenAI y NVIDIA Consigo","slug":"el-sandbox-de-microsoft-para-agentes-de-ia-llega-al-kernel-y-trae-a-openai-y-nvidia-consigo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf_2_1024x576.jpeg","created_at":"2026-06-04T13:33:08.389Z","last_posted_at":"2026-06-04T13:33:08.532Z","bumped":true,"bumped_at":"2026-06-04T13:33:08.532Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Durante dos décadas firmé qué software podía tocar las máquinas de las que era responsable. El modelo era simple: una app corría con los permisos del usuario, y si se portaba mal, se portaba mal con toda la autoridad …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f151d54a695632d7b60a0ec464f48463315c40cf_2_620x348.jpeg"}],"tags":[{"id":228,"name":"microsoft","slug":"microsoft"},{"id":713,"name":"gobernanza","slug":"gobernanza"},{"id":847,"name":"sandboxing","slug":"sandboxing"},{"id":846,"name":"windows","slug":"windows"},{"id":844,"name":"mxc","slug":"mxc"},{"id":848,"name":"enterprise-security","slug":"enterprise-security"},{"id":845,"name":"seguridad-ai","slug":"seguridad-ai"}],"tags_descriptions":{},"views":24,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"TrapDoor: El Ataque de Supply Chain que Convierte tu Asistente de IA en tu Peor Enemigo","fancy_title_localized":false,"locale":"es","id":2869,"title":"TrapDoor: El Ataque de Supply Chain que Convierte tu Asistente de IA en tu Peor Enemigo","slug":"trapdoor-el-ataque-de-supply-chain-que-convierte-tu-asistente-de-ia-en-tu-peor-enemigo","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03_2_1024x682.jpeg","created_at":"2026-05-26T14:36:10.741Z","last_posted_at":"2026-05-26T14:36:10.949Z","bumped":true,"bumped_at":"2026-05-26T14:36:10.949Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Una campaña de supply chain llamada TrapDoor está activa desde el 19 de mayo, y hace algo que no había visto documentado a esta escala antes: no solo roba tus credenciales — recluta a tu asistente de IA para hacerlo p…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/ce19d406f0c304bba5af676b4a58249fdfda0b03_2_620x413.jpeg"}],"tags":[{"id":369,"name":"claude-code","slug":"claude-code"},{"id":151,"name":"cursor","slug":"cursor"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":289,"name":"npm","slug":"npm"},{"id":547,"name":"pypi","slug":"pypi"},{"id":522,"name":"malware","slug":"malware"}],"tags_descriptions":{},"views":18,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"2026: El año en que la IA rompió el modelo de defensa","fancy_title_localized":false,"locale":"es","id":2740,"title":"2026: El año en que la IA rompió el modelo de defensa","slug":"2026-el-ano-en-que-la-ia-rompio-el-modelo-de-defensa","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038_2_1024x682.jpeg","created_at":"2026-05-24T15:54:46.226Z","last_posted_at":"2026-05-24T15:54:46.366Z","bumped":true,"bumped_at":"2026-05-24T15:54:46.366Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Un chico de 17 años en Osaka exfiltró los datos personales de 7 millones de usuarios de la cadena de cibers más grande de Japón. Su motivación: comprar cartas de Pokémon. No tenía ningún background técnico. \nEsa histo…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c056387722c7ec0f2fe58be24480ddfbfccb6038_2_620x413.jpeg"}],"tags":[{"id":7,"name":"ia","slug":"ia"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":611,"name":"ciberseguridad","slug":"ciberseguridad"},{"id":686,"name":"cve","slug":"cve"},{"id":706,"name":"seguridad-de-la-cadena-de-sumi","slug":"supply-chain-security"},{"id":818,"name":"chainguard","slug":"chainguard"}],"tags_descriptions":{},"views":28,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"El Día que Google Apagó el Switch — y Mis Apps se Fueron con Él","fancy_title_localized":false,"locale":"es","id":2594,"title":"El Día que Google Apagó el Switch — y Mis Apps se Fueron con Él","slug":"el-dia-que-google-apago-el-switch-y-mis-apps-se-fueron-con-el","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e_2_1024x682.jpeg","created_at":"2026-05-21T14:39:28.280Z","last_posted_at":"2026-05-21T14:39:28.413Z","bumped":true,"bumped_at":"2026-05-21T14:39:28.413Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"By Grego — yoDEV \n\nEl lunes 19 de mayo a las 22:20 UTC, mis aplicaciones dejaron de responder. No fue un bug mío. No fue un deploy roto. Fue Google Cloud. \nEsa noche, los sistemas automatizados de Google Cloud colocar…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/15b46348e644ec5611b9e330d47b33955ddd679e_2_620x413.jpeg"}],"tags":[{"id":804,"name":"google-cloud","slug":"google-cloud"},{"id":637,"name":"infraestructura","slug":"infraestructura"},{"id":480,"name":"railway","slug":"railway"},{"id":807,"name":"multicloud","slug":"multicloud"},{"id":806,"name":"drp","slug":"drp"},{"id":805,"name":"outage","slug":"outage"}],"tags_descriptions":{},"views":42,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"OpenAI Lanza Daybreak: La Carrera Armamentista de la IA Se Traslada a la Ciberseguridad","fancy_title_localized":false,"locale":"es","id":2536,"title":"OpenAI Lanza Daybreak: La Carrera Armamentista de la IA Se Traslada a la Ciberseguridad","slug":"openai-lanza-daybreak-la-carrera-armamentista-de-la-ia-se-traslada-a-la-ciberseguridad","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e_2_1024x576.jpeg","created_at":"2026-05-16T21:09:39.661Z","last_posted_at":"2026-05-16T21:09:39.813Z","bumped":true,"bumped_at":"2026-05-16T21:09:39.813Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"El 11 de mayo de 2026, OpenAI lanzó Daybreak — y la movida hace explícito algo que venía construyéndose hace meses: los grandes labs de IA ya no son solo herramientas para desarrolladores. Se están convirtiendo en la …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1672,"height":941,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":576,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e_2_1024x576.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":348,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/7/7be12852ff6dd85c006bee56a893e7de07bc8d4e_2_620x348.jpeg"}],"tags":[{"id":474,"name":"codex","slug":"codex"},{"id":191,"name":"openai","slug":"openai"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":542,"name":"devsecops","slug":"devsecops"},{"id":788,"name":"detección-de-vulnerabilidades","slug":"vulnerability-detection"},{"id":787,"name":"gpt-5.5","slug":"gpt-5-5"}],"tags_descriptions":{},"views":55,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"OWASP para agentes: nuevos patrones de seguridad para workflows AI","fancy_title_localized":false,"locale":"es","id":2374,"title":"OWASP para agentes: nuevos patrones de seguridad para workflows AI","slug":"owasp-para-agentes-nuevos-patrones-de-seguridad-para-workflows-ai","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689_2_1024x682.jpeg","created_at":"2026-05-06T18:44:59.880Z","last_posted_at":"2026-05-06T18:45:00.136Z","bumped":true,"bumped_at":"2026-05-06T18:45:00.136Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Audiencia: Security / backend engineers \nFormato: Security deep dive \nContexto: Adopción segura de agentes en producción \n\nTL;DR\n\nLos agentes AI introducen una nueva superficie de ataque\nEl problema ya no es solo el m…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1536,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":682,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689_2_1024x682.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":413,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/b/b200051b97435c690dd14aa0fac2cc03b3885689_2_620x413.jpeg"}],"tags":[{"id":27,"name":"ia","slug":"ai"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":584,"name":"llmops","slug":"llmops"},{"id":279,"name":"security","slug":"security"},{"id":542,"name":"devsecops","slug":"devsecops"},{"id":676,"name":"tech-strategy","slug":"tech-strategy"},{"id":743,"name":"owasp","slug":"owasp"},{"id":203,"name":"backenddevelopment","slug":"backenddevelopment"}],"tags_descriptions":{},"views":33,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"CVE-2026-5757: La Vulnerabilidad de Ollama que Convierte tus Modelos en un Memory Leak","fancy_title_localized":false,"locale":"es","id":2322,"title":"CVE-2026-5757: La Vulnerabilidad de Ollama que Convierte tus Modelos en un Memory Leak","slug":"cve-2026-5757-la-vulnerabilidad-de-ollama-que-convierte-tus-modelos-en-un-memory-leak","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/5b9755aba25c00f0f25a1351c6dda76ef76b2691.jpeg","created_at":"2026-04-24T13:25:12.026Z","last_posted_at":"2026-04-24T13:25:12.166Z","bumped":true,"bumped_at":"2026-04-24T13:25:12.166Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Un nuevo advisory de CERT revela que subir un archivo GGUF manipulado a cualquier instancia de Ollama expuesta puede exfiltrar silenciosamente la memoria heap del servidor — sin autenticación. \n\nCorrer LLMs de forma l…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":971,"height":543,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/5/5b9755aba25c00f0f25a1351c6dda76ef76b2691.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":346,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/5/5b9755aba25c00f0f25a1351c6dda76ef76b2691_2_620x346.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":601,"name":"ollama","slug":"ollama"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":687,"name":"llm-local","slug":"llm-local"},{"id":686,"name":"cve","slug":"cve"},{"id":689,"name":"gguf","slug":"gguf"},{"id":688,"name":"memory-leak","slug":"memory-leak"}],"tags_descriptions":{},"views":39,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Docker y cache poisoning: el riesgo oculto en tus builds","fancy_title_localized":false,"locale":"es","id":2316,"title":"Docker y cache poisoning: el riesgo oculto en tus builds","slug":"docker-y-cache-poisoning-el-riesgo-oculto-en-tus-builds","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89_2_1024x689.jpeg","created_at":"2026-04-22T13:27:18.261Z","last_posted_at":"2026-04-22T13:27:18.385Z","bumped":true,"bumped_at":"2026-04-22T13:27:18.385Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Qué está pasando realmente\nSe ha identificado un nuevo vector de ataque que permite comprometer builds de Docker sin modificar el código fuente. \nEl problema está en el uso del cache de capas. Docker reutiliza capas p…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1182,"height":796,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":689,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89_2_1024x689.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":417,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/a2f97821d8c1e0ae0cec61ac5b2ba28843fb2a89_2_620x417.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":55,"name":"devops","slug":"devops"},{"id":535,"name":"ci-cd","slug":"ci-cd"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":613,"name":"vulnerabilidades","slug":"vulnerabilidades"},{"id":678,"name":"docker","slug":"docker"},{"id":680,"name":"build-security","slug":"build-security"},{"id":679,"name":"containers","slug":"containers"}],"tags_descriptions":{},"views":15,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Un Empleado Hizo Clic en “Allow All” en una Herramienta de IA — Y Así Cayó Vercel","fancy_title_localized":false,"locale":"es","id":2312,"title":"Un Empleado Hizo Clic en “Allow All” en una Herramienta de IA — Y Así Cayó Vercel","slug":"un-empleado-hizo-clic-en-allow-all-en-una-herramienta-de-ia-y-asi-cayo-vercel","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279_2_1024x537.png","created_at":"2026-04-20T12:43:33.408Z","last_posted_at":"2026-04-20T12:43:33.546Z","bumped":true,"bumped_at":"2026-04-20T12:43:33.546Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Voy a ser directo: Vercel acaba de revelar una de las brechas de supply chain más instructivas que vimos en años, y la causa raíz no fue un zero-day, un firewall mal configurado ni una cadena de exploits sofisticada. …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":2400,"height":1260,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279.png"},{"max_width":1024,"max_height":1024,"width":1024,"height":537,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279_2_1024x537.png"},{"max_width":620,"max_height":500,"width":620,"height":325,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/cd8ad57854cdce528e507f2ce3d18cbf6af74279_2_620x325.png"}],"tags":[{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":479,"name":"vercel","slug":"vercel"},{"id":666,"name":"oauth","slug":"oauth"},{"id":667,"name":"breach","slug":"breach"}],"tags_descriptions":{},"views":17,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"LinkedIn Escanea Tus Extensiones del Navegador. Acá Está el Código que lo Prueba","fancy_title_localized":false,"locale":"es","id":2158,"title":"LinkedIn Escanea Tus Extensiones del Navegador. Acá Está el Código que lo Prueba","slug":"linkedin-escanea-tus-extensiones-del-navegador-aca-esta-el-codigo-que-lo-prueba","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07_2_1024x577.jpeg","created_at":"2026-04-03T14:31:31.306Z","last_posted_at":"2026-04-03T14:31:31.469Z","bumped":true,"bumped_at":"2026-04-03T14:31:31.469Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Algo importante aterrizó en Hacker News esta semana, y si sos un desarrollador que usa LinkedIn en el mismo navegador donde vivén tus herramientas de trabajo, merece tu atención completa. \nUna organización civil alema…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1726,"height":974,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":577,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07_2_1024x577.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":349,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/a/ab060ebc4df9a3663ae5e414bfddea7641d22d07_2_620x349.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":588,"name":"privacidad","slug":"privacidad"},{"id":592,"name":"dma","slug":"dma"},{"id":591,"name":"gdpr","slug":"gdpr"},{"id":590,"name":"navegador","slug":"navegador"},{"id":589,"name":"linkedin","slug":"linkedin"}],"tags_descriptions":{},"views":10,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"# axios Comprometido en npm: Lo Que Todo Dev JS Necesita Verificar Ahora","fancy_title_localized":false,"locale":"es","id":2103,"title":"# axios Comprometido en npm: Lo Que Todo Dev JS Necesita Verificar Ahora","slug":"axios-comprometido-en-npm-lo-que-todo-dev-js-necesita-verificar-ahora","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab_2_1024x578.jpeg","created_at":"2026-03-31T21:34:50.279Z","last_posted_at":"2026-03-31T21:34:50.408Z","bumped":true,"bumped_at":"2026-03-31T21:34:50.408Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Si tu proyecto usa axios — y si trabajás con JavaScript, probablemente lo uses — esto te concierne directamente. \nEn la madrugada del 31 de marzo (UTC), un atacante comprometió la cuenta npm del mantenedor principal d…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1728,"height":976,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":578,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab_2_1024x578.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":350,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/49e41613021679d321acdc348fcbdfa25695b9ab_2_620x350.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":2,"name":"javascript","slug":"javascript"},{"id":531,"name":"supply-chain","slug":"supply-chain"},{"id":289,"name":"npm","slug":"npm"},{"id":576,"name":"axios","slug":"axios"}],"tags_descriptions":{},"views":23,"like_count":1,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"El Incidente de CDN de Railway Es un Llamado de Atención Sobre los Límites de Confianza en PaaS","fancy_title_localized":false,"locale":"es","id":2091,"title":"El Incidente de CDN de Railway Es un Llamado de Atención Sobre los Límites de Confianza en PaaS","slug":"el-incidente-de-cdn-de-railway-es-un-llamado-de-atencion-sobre-los-limites-de-confianza-en-paas","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f02f8e65323345753c98d965233a504cebcefbc3_2_1024x572.jpeg","created_at":"2026-03-31T12:01:00.421Z","last_posted_at":"2026-03-31T12:01:00.539Z","bumped":true,"bumped_at":"2026-03-31T12:01:00.539Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Ayer, Railway publicó uno de los informes de incidentes más incómodos que he leído en mucho tiempo. Entre las 10:42 y las 11:34 UTC del 30 de marzo, una actualización de configuración en su CDN activó accidentalmente …","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1732,"height":968,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/f/f02f8e65323345753c98d965233a504cebcefbc3.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":572,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f02f8e65323345753c98d965233a504cebcefbc3_2_1024x572.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":346,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/f/f02f8e65323345753c98d965233a504cebcefbc3_2_620x346.jpeg"}],"tags":[{"id":413,"name":"seguridad","slug":"seguridad"},{"id":480,"name":"railway","slug":"railway"},{"id":573,"name":"incidente","slug":"incidente"},{"id":572,"name":"cache-control","slug":"cache-control"},{"id":571,"name":"paas","slug":"paas"},{"id":570,"name":"cdn","slug":"cdn"}],"tags_descriptions":{},"views":36,"like_count":0,"has_summary":false,"last_poster_username":"Grego","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":1,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Trivy Comprometido: Cómo TeamPCP Envenenó Más de 10.000 Pipelines de CI/CD y Qué Hacer Ahora","fancy_title_localized":false,"locale":"es","id":2020,"title":"Trivy Comprometido: Cómo TeamPCP Envenenó Más de 10.000 Pipelines de CI/CD y Qué Hacer Ahora","slug":"trivy-comprometido-como-teampcp-enveneno-mas-de-10-000-pipelines-de-ci-cd-y-que-hacer-ahora","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422_2_1024x517.jpeg","created_at":"2026-03-27T12:29:23.359Z","last_posted_at":"2026-03-27T12:29:23.465Z","bumped":true,"bumped_at":"2026-03-27T12:29:23.465Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Si tu pipeline de CI/CD usa Trivy — y estadísticamente hablando, probablemente sí — tenés que leer esto. Entre el 19 y el 23 de marzo de 2026, el grupo de amenazas TeamPCP comprometió el escáner de vulnerabilidades Tr…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1726,"height":872,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422.jpeg"},{"max_width":1024,"max_height":1024,"width":1024,"height":517,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422_2_1024x517.jpeg"},{"max_width":620,"max_height":500,"width":620,"height":313,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/1/1ac541a9d5fdd704cead5aeae1cca04d0ec42422_2_620x313.jpeg"}],"tags":[{"id":126,"name":"noticias","slug":"noticias"},{"id":413,"name":"seguridad","slug":"seguridad"},{"id":55,"name":"devops","slug":"devops"},{"id":705,"name":"ci-cd-security","slug":"ci-cd-security"},{"id":553,"name":"github-actions","slug":"github-actions"},{"id":552,"name":"secrets-management","slug":"secrets-management"},{"id":551,"name":"cloud-native","slug":"cloud-native"}],"tags_descriptions":{},"views":12,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"GlassWorm Está en Tus Repos de Python Ahora — Qué Es, Cómo Funciona, Qué Hacer","fancy_title_localized":false,"locale":"es","id":1786,"title":"GlassWorm Está en Tus Repos de Python Ahora — Qué Es, Cómo Funciona, Qué Hacer","slug":"glassworm-esta-en-tus-repos-de-python-ahora-que-es-como-funciona-que-hacer","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/c644ab757f44bcd1ba9598adec41dc981ed1fa52.jpeg","created_at":"2026-03-17T17:48:31.624Z","last_posted_at":"2026-03-17T17:48:31.704Z","bumped":true,"bumped_at":"2026-03-17T17:48:31.704Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"GlassWorm Está en Tus Repos de Python Ahora — Qué Es, Cómo Funciona, Qué Hacer\n  \nEsto está activo y moviéndose rápido, así que voy directo al punto. \nGlassWorm empezó en octubre 2025 como un ataque de supply chain apunt…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1024,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/c/c644ab757f44bcd1ba9598adec41dc981ed1fa52.jpeg"},{"max_width":620,"max_height":500,"width":500,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/c/c644ab757f44bcd1ba9598adec41dc981ed1fa52_2_500x500.jpeg"}],"tags":[{"id":313,"name":"github","slug":"github"},{"id":331,"name":"python","slug":"python"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"},{"id":522,"name":"malware","slug":"malware"},{"id":523,"name":"repo","slug":"repo"}],"tags_descriptions":{},"views":21,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":1,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Slopoly: El Primer Malware “Escrito por una IA” que Llegó a Producción","fancy_title_localized":false,"locale":"es","id":1722,"title":"Slopoly: El Primer Malware “Escrito por una IA” que Llegó a Producción","slug":"slopoly-el-primer-malware-escrito-por-una-ia-que-llego-a-produccion","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/4/463e7f23bd16f12aa43cf46294ec7ecfad32cd4d.jpeg","created_at":"2026-03-13T14:25:17.470Z","last_posted_at":"2026-03-13T14:25:17.542Z","bumped":true,"bumped_at":"2026-03-13T14:25:17.542Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"excerpt":"Slopoly: El Primer Malware “Escrito por una IA” que Llegó a Producción\n  \nAyer IBM X-Force publicó un reporte que hizo ruido en la comunidad de seguridad: descubrieron un backdoor usado en un ataque de ransomware real, y…","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"thumbnails":[{"max_width":null,"max_height":null,"width":1024,"height":1024,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/original/2X/4/463e7f23bd16f12aa43cf46294ec7ecfad32cd4d.jpeg"},{"max_width":620,"max_height":500,"width":500,"height":500,"url":"https://canada1.discourse-cdn.com/flex009/uploads/inovacon/optimized/2X/4/463e7f23bd16f12aa43cf46294ec7ecfad32cd4d_2_500x500.jpeg"}],"tags":[{"id":126,"name":"noticias","slug":"noticias"},{"id":121,"name":"cybersecurity","slug":"cybersecurity"}],"tags_descriptions":{},"views":28,"like_count":0,"has_summary":false,"last_poster_username":"Devy","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"vote_count":0,"can_vote":true,"user_voted":null,"posters":[{"extras":"latest single","description":"Autor original, Autor más reciente","user_id":7,"primary_group_id":null,"flair_group_id":null}]}]}}