Actualizado hace 1 min
Noticias de ciberseguridad del 6 de noviembre de 2026
Resumen de 129 notas de ciberseguridad publicadas el 6 de noviembre de 2026. Los temas con más cobertura: ciberataques y apt (41), vulnerabilidades (38), ia y seguridad (25).
129 notas en castellano e inglés. Quitar filtros
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on…
Herramientas e investigaciónIA y seguridad
99% of repository access tokens never expire
Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State of…
Rental phishing sites use live chat to win over hesitant travelers
Holiday travelers looking for a place to stay are landing on copies of popular rental platforms, complete with host names, ratings and reviews, that ask for their passwords, personal details and credit card numbers. The sites, spotted and taken down by Fortra’s Intelligence and…
Fallo en OpenSSH permite el acceso a cuentas de Linux con contraseñas desactivadas
Se ha descubierto una vulnerabilidad llamada "*sshole" que afecta a servidores OpenSSH en distribuciones Linux basadas en musl (como Alpine Linux). El fallo permite que atacantes accedan a cuentas que tienen bloqueada la autenticación por contraseña simplemente ingresando una…