GEN-075 — Abuso de AI Generativa en Campañas de Smishing Masivo qma.mx/abuso-ai-generativa-s… #InteligenciaAmenazas #Threatintel #Cybersecurity #ZeroDayUnit

ZDU-051 Samsung MagicINFO 9 Server: Path Traversal con Escritura Privilegiada qma.mx/cve-2025-4632-samsung… #ZeroDay #Threatintel #Cybersecurity #ZeroDayUnit

GEN-069 — Fraude FIFA Mundial 2026: Phishing, Malware y Robo de Cuentas qma.mx/fraude-fifa-mundial-2… #Threatintel #Cybersecurity #ZeroDayUnit #Phishing

ZDU-050 GitLab: Account Takeover Crítico Sin Autenticación qma.mx/cve-2023-7028-gitlab-… #ZeroDay Universe #Threatintel #Cybersecurity

GEN-064 — Vulnerabilidad crítica Android bajo explotación activa 2026 qma.mx/vulnerabilidad-critic… #Threatintel #Cybersecurity #ZeroDayUnit

GEN-063 — Ransomware con IA automatiza evasión EDR y descubrimiento AD qma.mx/ransomware-ia-evasion… #Threatintel #Cybersecurity #ZeroDayUnit #ransomware

ZDU-049 ConnectWise ScreenConnect: Bypass de Autenticación con CVSS 10 qma.mx/cve-2024-1709-connect… #Threatintel #Cybersecurity #ZeroDayUnit #BlackBasta

⚠️ Stealer activity surged last week. #Vidar, #Stealc, and #SalatStealer all increased, while #AsyncRAT and #DCRat also continued to grow. 📌 Trend to watch: credential theft is gaining momentum alongside remote access malware, giving attackers more opportunities to move from initial compromise to persistent access. For SOC teams, that means validating credential-related alerts quickly becomes even more important. Expand threat visibility in your SOC: any.run/enterprise/?utm_sour… #Top10Malware

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

For IT and security leaders, the question is not only: “Are employees using AI?” The better question is: “Can we see how AI is being used, what data is involved, and whether our policies are being enforced?” That is the difference between basic visibility and meaningful control. iboss helps organizations close that gap. Explore the platform: bit.ly/4dJJJLE

Latin American Cybercriminals Hoover Up Government Data: bit.ly/4vjWh2x by Robert Lemos #DRGlobal

⚠️ Threat actors are exploiting a critical FortiClient EMS flaw to push credential-stealing malware to entire networks of managed endpoints. CVE-2026-35616 (CVSS 9.1) allows pre-auth bypass and privilege escalation. Read full report: thehackernews.com/2026/05/th…

ZDU-048 Oracle Solaris ZFS: Compromiso Total con CVSS 10.0 qma.mx/cve-2020-14871-oracle… #ZeroDay Universe #Threatintel #Cybersecurity #ZeroDayUnit

ZDU-046 Aviatrix Controllers: Ejecución Remota Sin Autenticación CVSS 10.0 qma.mx/cve-2024-50603-aviatr… #Threatintel #Cybersecurity #ZeroDayUnit

ZDU-045 SmarterMail: Upload Sin Restricciones Permite RCE Total qma.mx/cve-2025-52691-smarte… #ZeroDayUniverse #Threatintel #Cybersecurity #ZeroDayUnit

🚨 Anthropic’s Claude Mythos Preview found 10,000 severe software flaws in one month. thehackernews.com/2026/05/cl… The AI uncovered high- or critical-severity vulnerabilities across widely used software, including 1,726 confirmed flaws and 1,094 rated high or critical severity. The findings have already led to 97 patches and 88 advisories. One flaw, CVE-2026-5194 in WolfSSL, could allow certificate forgery.

GEN-061 — Bullet-Proof Hosting Desmantelado: Riesgo para LATAM qma.mx/bullet-proof-hosting-… #Threatintel #Cybersecurity #ZeroDayUnit

ZDU-044 Wing FTP Server: Ejecución Remota Crítica CVSS 10.0 qma.mx/cve-2025-47812-wing-f… #ZeroDayUniverse #Threatintel #Cybersecurity #ZeroDayUnit

GEN-060 — VPN criminal desmantelada: riesgo para organizaciones MX qma.mx/first-vpn-desmantelad… #InteligenciaAmenazas #LeydeCiberseguridadMX

ZDU-043 Commvault Command Center: Path Traversal Sin Autenticación CVSS 10 qma.mx/cve-2025-34028-commva… #Apt #ThreatIntel #cybersecurity #zerodayunit