Hard2bit's blog on cybersecurity, regulatory compliance (DORA, NIS2, ENS, ISO 27001) and technical operations.
Filter by category
Executive guide to preparing the post-quantum transition for European enterprises 2026-2028: cryptographic inventory, prioritisation by impact and feasibility, governance, KPIs and quick wins.
By Adrián González · CEO
How to move AI agents from pilot to secure production with MCP: control architecture, guardrails, security minimums and a phased implementation plan for the enterprise.
By Adrián González · CEO
Non-human identities now outnumber humans in most enterprises. Practical guide to inventory, least-privilege, secret rotation, anomaly detection and a 90-day implementation plan.
By Adrián González · CEO
Traditional MFA isn't enough. Technical analysis of Adversary-in-the-Middle (AiTM) attacks, Evilginx2, ESTSAUTH cookie theft and FIDO2-based mitigation in Microsoft 365.
By Adrián González · CEO
Device-code phishing in Microsoft 365 abuses legitimate OAuth flows to steal tokens without asking for passwords. How it works, warning signs and the controls that actually block it.
By Adrián González · CEO
AI-powered browser extensions can read sessions, prompts, cookies, SaaS data and corporate secrets. Learn the real risks, technical controls and detection patterns to protect your organisation.
By Adrián González · CEO
AI Agents like ChatGPT, Perplexity, Claude and Gemini discover websites through 11 emerging standards. What they are and how to audit your site against them.
By Adrián González · CEO
Before you leave…
Quick 15-minute assessment and we'll tell you what to prioritise first: Microsoft 365, pentesting, vulnerability management, SOC, DORA, NIS2, ENS or ISO 27001.
No spam. Reply within 24h.
