Articles 25 to 48 of 126 in this category. To search by keyword, go back to the blog hub.
Four AI coding agents pinned every plugin to a reviewed commit and none of them checked where the checkout landed. What breaks, who has a patch and what to control in the enterprise.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
What changed in the OWASP Top 10 2025, why two categories come from a survey rather than the data, what a pentester tests in each one and what to add to the scope of your next web audit.
By Adrián González · CEO y socio fundador
A guide to honeytokens: fake-SPN accounts, accounts that never sign in, credentials planted in SYSVOL and cloud tokens. How to build them, watch them and stop them becoming a risk.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
What tiered administration is, what belongs in Tier 0, why so many organisations skip it, and which controls and evidence prove the model exists.
By Adrián González · CEO y socio fundador
Proofpoint and Volexity separately document Chinese groups exploiting three Chrome and Windows zero-days in the gap between the Chromium fix and the browser release.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
On 29 September we will have a stand at Digitaliza Madrid and Thilina Manana joins the panel on the human factor and the supply chain.
By Adrián González · CEO y socio fundador
By leaving the SMTP envelope sender empty, an attacker sidesteps the RejectDirectSend control and slips external mail into Microsoft 365 as if it were internal. Detection and defence.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
We scanned SPF and DMARC across 219 large companies in 8 sectors: 73% block, 38% at reject, 22% with SPF at the edge of the limit. What RFC 9989 requires and how to reach p=reject.
By Adrián González · CEO y socio fundador
PostGREShell (CVE-2026-6471) lets a REPLICATION account load code on the PostgreSQL server. Conditions, trail, detection, and how to patch without breaking logical replication.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
CVE-2026-48710, a CVSS 6.5 Starlette flaw, joins the KEV catalogue after being used to break into AI gateways without credentials. Who is exposed, how to detect it and how to patch.
By Daniel O'Grady · CIO y socio fundador
Microsoft will block NTLM by default in the next Windows release and tightens NTLMv1 in October 2026. Why it persists on your network, which events to audit and how to remove it in phases.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
US and Canadian courts handed database copies to their case management vendor to debug faults, and an intruder had them for four months. What EU rules require and what to check in your contracts.
By Adrián González · CEO y socio fundador
An unauthorised BGP announcement diverted Softaculous traffic for 33 hours, handed the attacker a valid certificate and served a Virtualizor update with root. What failed and what to check.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
CVE-2026-82329 lets attackers mint Artifactory admin tokens with no credentials. Patched 28 August, exploited by 1 September, now on CISA's KEV catalogue.
By Adrián González · CEO y socio fundador
Three DDoS attacks in three months struck ID-porten, Norway's digital identity gateway. What the campaign reveals, and what any organisation that depends on a shared layer should take from it.
By Daniel O'Grady · CIO y socio fundador
A business guide to DDoS protection: what to contract upstream, what your architecture must do, how to rehearse the response and what NIS2 demands. With 2026 data: 5,343 attacks mitigated every hour.
By Adrián González · CEO y socio fundador
In 2025 NIST withdrew the incident response model much Spanish-language guidance still copies. What a plan needs today, the deadlines NIS2, DORA and Spain's ENS impose, and how to test it.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
The firewall blocked the request and that log entry carried the order in: how GhostJacking hijacks AI agents through the data they trust most.
By Daniel O'Grady · CIO y socio fundador
CISA has replaced flat patching deadlines with a four-variable risk model. What BOD 26-04 demands, and what European organisations can borrow from it.
By Adrián González · CEO y socio fundador
82% of CrowdStrike's 2025 detections brought no malware: the attacker uses the signed programs you already have. Why antivirus misses them and how to hunt them.
By Daniel O'Grady · CIO y socio fundador
The TIBER-ES guide dates from January 2022 and never mentions DORA. Since 2025 the same procedure has been mandatory for designated entities, and several of its parts have changed.
By Daniel O'Grady · CIO y socio fundador
MITRE retired ATT&CK's detection fields and replaced them with 697 strategies and 1,758 analytics. That change explains why a coverage percentage measures the map rather than the ground.
By Adrián González · CEO y socio fundador
Production SIEMs ingest enough data to cover 90% of MITRE ATT&CK and detect 22%. Which sources to prioritise, which fields to demand and how long to keep them.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Unit 42, SpecterOps and Mollema got past passkey sign-in without breaking the encryption, starting from an already-compromised endpoint. The weakness is in the implementation.
By Adrián González · CEO y socio fundador
Before you leave…
Quick 15-minute assessment and we'll tell you what to prioritise first: Microsoft 365, pentesting, vulnerability management, SOC, DORA, NIS2, ENS or ISO 27001.
No spam. Reply within 24h.
