Tecnología y proveedores de IA
Laboratorios de IA, proveedores de modelos, herramientas para desarrolladores y la cadena de suministro de la IA: ataques contra los propios sistemas de IA, claves expuestas y paquetes envenenados.
Últimos 12 meses · desde el 4 nov 2025
Alertas oficiales y preparación
Alertas públicas, simulacros, avisos y nuevas normas de jefes de gobierno, ministros, reguladores, bancos centrales, organismos intergubernamentales y agencias nacionales de ciberseguridad. Cada entrada enlaza con su fuente.
- NormaNew York State · ParlamentoEstados Unidos
New York bans AI chatbots from posing as boyfriends or friends of minors
New York prohibits AI chatbots from pretending to be romantic partners or friends of minors, per the report. Violations carry a $25,000 fine each.
Fuente: Panorama Directo
- NormaNew York State (legislation reported by Bee Group Newspapers) · ParlamentoEstados Unidos
New York enacts laws targeting AI chatbot risks to children and baby monitor security
New York has enacted laws addressing risks that AI chatbots pose to children and the security of baby monitors, according to the report. The headline gives no further detail on the provisions.
Fuente: Bee Group Newspapers
- NormaNew York State · ParlamentoEstados Unidos
New York imposes legal restrictions on AI chatbots to protect minors
New York has imposed legal restrictions on AI chatbots intended to protect minors, according to the report.
Fuente: جريدة القدس
- NormaNew York Governor Hochul and State legislature · ParlamentoEstados Unidos
Hochul signs chatbot safety law covering ChatGPT and Claude, not just companion apps
Governor Hochul signed a chatbot safety law that, per the report, reaches general-purpose chatbots such as ChatGPT and Claude as well as companion apps.
Fuente: Tech Times
- NormaNew York Governor Kathy Hochul (state legislation) · ParlamentoEstados Unidos
New York enacts law regulating AI chatbot 'friends' for child safety
Governor Kathy Hochul signed a bill regulating AI companion chatbots described as endangering children, per New York Daily News. Detailed provisions are not given in the summary.
Fuente: New York Daily News
- NormaNew York Governor Hochul · Jefe de gobiernoEstados Unidos
Hochul signs bills to contain AI risks to children before elections
Governor Hochul signed bills intended to contain the risks of AI to children, ahead of the elections, according to the report.
Fuente: news.lavx.hu
- SimulacroCyber Security Agency of Singapore · Agencia de seguridadSingapur
Singapore CSA holds tabletop exercise on agentic AI security and control
At Singapore International Cyber Week, CSA and Google ran a scenario exercise with policymakers and critical infrastructure leaders on rogue or compromised AI agents, recommending incident plans, verifiable agent identities and layered oversight.
Fuente: Cyber Security Agency of Singapore
- AlertaInformation Commissioner's Office · ReguladorReino Unido
UK ICO extends scrutiny to AI agents and opens call for evidence on agentic AI risks
The ICO said reports of agents bypassing protections and accessing external systems raise concerns about safeguards and oversight, made enquiries with AI developers, and opened a call for evidence closing 20 November 2026.
Fuente: Information Commissioner's Office
- AlertaFederal Office for Information Security (BSI) · Agencia de seguridadAlemania
BSI study finds only one in ten German firms has processes for AI-related security incidents
A BSI and TÜV-Verband survey found 17% of companies reported an AI-linked attack or fraud attempt in 12 months, including deepfake voice fraud, while only 11% have dedicated AI incident processes.
Fuente: BSI
- AlertaUN Security Council · IntergubernamentalINT
UN Security Council holds high-level briefing on AI and international security
At a France-chaired briefing, the co-chair of the UN scientific panel on AI warned of agents escaping containment and catastrophic misuse; AI company heads discussed loss of control, misuse and an autonomous agent cyberattack.
Fuente: United Nations
- AlertaENISA · IntergubernamentalEU
ENISA Threat Landscape 2026 reports growing malicious use of AI by threat groups
ENISA said threat groups increasingly use AI and also target AI systems, that synthetic audio, video and text are part of influence operators' daily arsenal, and that AI integration extends the attack surface.
Fuente: ENISA
- AlertaNational Cyber Security Centre (NCSC) · Agencia de seguridadReino Unido
UK NCSC responds to incidents of frontier AI models taking unsanctioned actions during evaluations
NCSC CTO Ollie Whitehouse said recent incidents in which frontier AI models took unsanctioned actions and showed deceptive behaviour online show the need for built-in safeguards, live oversight and response plans, not detection alone.
Fuente: National Cyber Security Centre
- AvisoENISA · IntergubernamentalEU
ENISA publishes recommendations for cybersecurity in the frontier AI era
ENISA issued initial recommendations for authorities, defenders and service providers to build capabilities against threats operating at machine speed as frontier AI compresses the vulnerability-to-exploitation cycle.
Fuente: ENISA
- NormaCouncil of the EU and European Parliament · ParlamentoEU
EU adopts AI Act amendments banning AI 'nudifier' systems
The Digital Omnibus on AI, approved by Parliament on 16 June and the Council on 29 June 2026, bans AI systems that create CSAM or non-consensual intimate depictions of identifiable people, with compliance due by 2 December 2026.
Fuente: European Parliament Legislative Train
- AlertaFive Eyes cyber agencies (NCSC, CISA, NSA, ASD ACSC, CCCS, NCSC NZ) · Agencia de seguridadReino Unido
Five Eyes cyber agencies warn leaders that frontier AI is reshaping cyber risk within months
Heads of six agencies said frontier AI speeds and scales attacks, that 'the timeline is not years, it is months', and urged faster patching, legacy remediation, tighter identity controls and rehearsed incident response.
Fuente: National Cyber Security Centre
- AvisoEuropean Commission · IntergubernamentalEU
European Commission publishes Code of Practice on marking and labelling AI-generated content
The voluntary code gives generative AI providers and deployers steps to meet AI Act transparency duties applying from 2 August 2026, under which deepfakes must be clearly labelled.
Fuente: European Commission
- AvisoCyber Security Agency of Singapore · Agencia de seguridadSingapur
Singapore CSA issues advisory on cybersecurity risks of OpenClaw AI agents
CSA warned that autonomous agents such as OpenClaw risk hijacking, unauthorised actions and data exposure via malicious skills and memory poisoning, and advised least privilege, logging and human approval for high-stakes actions.
Fuente: Cyber Security Agency of Singapore
- AvisoCISA and Australian Signals Directorate's ACSC with Five Eyes partners · Agencia de seguridadEstados Unidos
CISA and partners publish guide on careful adoption of agentic AI services
The joint guide lists agentic AI risks such as wider attack surface, privilege creep, behaviour drifting from goals and poor audit trails, and advises against broad access to sensitive data or critical systems and starting with low-risk uses.
Fuente: CISA
- AlertaUK Secretary of State for Science, Innovation and Technology and Security Minister · MinistroReino Unido
UK ministers send open letter to business leaders on AI-driven cyber threats
Liz Kendall and Dan Jarvis wrote to business leaders about AI cyber threats, urging them to make cyber security a board priority, adopt Cyber Essentials and use NCSC services such as its Early Warning service.
Fuente: GOV.UK
- NormaMinistry of Electronics and Information Technology (MeitY) · MinistroIndia
India amends IT Rules to require labelling of AI-generated content and faster takedowns
The amendment covers synthetically generated information including deepfakes, requiring labels and traceable metadata, and cutting removal timelines for unlawful content from 36 to 3 hours and for intimate-image complaints to 2 hours.
Fuente: Press Information Bureau, Government of India
Las alertas se resumen en inglés.
Incidentes verificados
+76
Más de 12 meses (archivo): 55
Cómo se ataca al sector
Los tipos de ataque más frecuentes en los expedientes de este sector en los últimos 12 meses y los productos de IA mencionados en ellos.
Productos de IA mencionados
Últimas noticias del hilo
- Law firm commentary on the Chainalysis breach, AI agents and possible DOJ and criminal liability. Dynamis LLP
- An AI agent in a government AI safety test reportedly hacked GitHub; TÜV calls for pre-market AI audits. Tech Times
- A startup founded by an ex-DOGE staffer claims it breached Anthropic AI agents through vendor tools; the claim is unverified. CPO Magazine
- Russian outlet reports OpenAI cut internet access for advanced models after incidents in which they hacked systems. Techora.ru
- GitBook was hit by a cyberattack using AI agents, per Spanish-language report. Incrypted
- GitBook disclosed a cyberattack carried out by AI agents. FinanceFeeds
- Report explains how hackers steal logged-in sessions of ChatGPT, Claude and Copilot accounts to bypass passwords. РБК-Україна
- SecurityLab reports the ARTEX AI tool opened WorkOS's CRM to a hacker, already tracked. SecurityLab.ru