Mucho que contar, hablamos de PHP y como de nuevo, HAL 9000 no explica lo que está pasando. Luego desde Ghidra a Core War y el Holborn 9100, cómo funcionan los QR, en empleo con la IA, el ingeniero de Sony en el armario, videojuegos, pasatiempos con ninja puzzles, ciberseguridad, efemérides y música con ChatGPT.
Enlaces de este episodio:
- 41 años del Intel 386: https://dfarq.homeip.net/intel-386-released-october-17-1985/
- Ataque mediante ConnectWise comprometido: https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html
- Agentes de OpenAI sin permiso: https://arstechnica.com/security/2026/10/openai-models-hacked-a-crypto-wallet-and-breached-more-websites/
- Brecha en OpenCode: https://x.com/opencode/status/2111519637049319818
- Publicación de International Cyber Digest: https://x.com/IntCyberDigest/status/2111549250580431049
- Riesgos de modelos abiertos: https://github.com/NVIDIA/OpenEnterpriseRiskManagementGuidance/blob/main/Papers/Risk%20Management%20Guidance.pdf
- Apple contra OpenAI: https://www.reuters.com/business/retail-consumer/openai-employee-who-left-apple-took-files-about-unreleased-device-openai-alleges-2026-10-14/
- Mario 64 en Vision Pro: https://www.pagetable.com/303
- Vulnerabilidades de Plex: https://arstechnica.com/security/2026/10/recently-fixed-plex-media-vulnerabilities-are-being-exploited-to-install-malware/
- Fallo Wi-Fi de Broadcom: https://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.html
- Publicación de OVHcloud: https://x.com/olesovhcom/status/2112225308589834260
- EE. UU. restringe DeepSeek: https://public-inspection.federalregister.gov/2026-21447.pdf
- Certificados eMudhra: https://emudhra.we-have-a-problem.com
- PHP prepara un parche de emergencia: https://cybersecuritynews.com/php-to-issue-emergency-patch/
- Ataque a OVHcloud: https://cybersecuritynews.com/ovhcloud-supply-chain-attack/
- Super Mario Galaxy en Game Boy Advance: https://hackaday.com/2026/10/20/super-mario-galaxy-now-runs-on-the-gba/
- PHP2Shell: https://watchtowr.com/intelligence/php-cve-2026-109618-faq/
- Meta Muse expone información personal y empresarial: https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-when-they-share-conversations/
- Doom en Clotty: https://hackaday.com/2026/10/21/clotty-the-custom-period-tracker-can-of-course-run-doom/
- Ataque a LiteLLM: https://flatt.tech/research/posts/litellm-pypi-supply-chain-attack/
- Fallo crítico en GitLab: https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html
- Leer QR a mano: https://hackaday.com/2026/10/21/reading-qr-codes-by-hand/
- Pesadilla de ciberseguridad del 21 de octubre: https://cybersecuritynews.com/october-21-cybersecurity-nightmare/
- Intento de explotación de PHP2Shell: https://thehackernews.com/2026/10/someone-tried-to-exploit-php2shell-4.html
- Aniversario de Windows 7: https://dfarq.homeip.net/windows-7-released-oct-22-2009/
- eMudhra abandona el mercado global de certificados SSL/TLS: https://cybersecuritynews.com/emudhra-exits-global-ssl-tls-certificate/
- Node2Shell: https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html
- Agentes en cuentas bancarias: https://news.slashdot.org/story/26/10/23/0023257/unvetted-ai-agents-are-accessing-us-bank-accounts
- Claude Duet: https://slashdot.org/story/26/10/22/1629209/anthropic-takes-on-muse-with-claude-duet
- Fallos de Linux publicados por error: https://it.slashdot.org/story/26/10/22/1612227/several-linux-kernel-vulnerabilities-accidentally-posted-to-public-kernel-mailing-list
- 25 años del iPod: https://www.tomshardware.com/tech-industry/the-original-apple-ipod-debuted-25-years-ago-today-steve-jobs-usd399-device-fit-1-000-songs-into-a-package-the-size-of-a-deck-of-cards-with-5-gigabytes-of-storage
- PHP advierte de otra vulnerabilidad sin parchear: https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html
- 25 años de Windows XP: https://dfarq.homeip.net/windows-xp-released-october-25-2001/
- Capcom confirma exposición de registros de clientes: https://cybersecuritynews.com/capcom-confirmed-customer-records-exposed/
- HAL y los límites de la IA: https://video.twimg.com/amplify_video/2110242735102033920/vid/avc1/854x480/MgirP3kCbNfEJ8D4.mp4?tag=29
- Core War: https://corewar.co.uk/tournamentweekend2026a.htm
- Kimi K3.1 Pro: https://www.kimi.ai/blog/kimi-k3-1-pro
- Puzzle Ninja: https://www.alexbellos.com/home
- IA y empleo en Anthropic: https://www.anthropic.com/research/employment-at-anthropic
- Holborn 9100: https://en.wikipedia.org/wiki/Holborn_9100
- De WordPress a Hugo: https://gohugo.io/
- Ingeniería inversa con REA: https://github.com/morluto/rea
- IA local frente a suscripciones: Sin enlace específico.
- Disquetes, Sony y Macintosh: https://folklore.org/Hide_Under_This_Desk.html
- Apple Music con ChatGPT: https://chatgpt.com/plugins/plugin_asdk_app_6938a94a61d881918ef32cb999ff937c
Como siempre puedes ver o escuchar el episodio en: