Articles 25 to 48 of 114 in this category. To search by keyword, go back to the blog hub.
An unauthorised BGP announcement diverted Softaculous traffic for 33 hours, handed the attacker a valid certificate and served a Virtualizor update with root. What failed and what to check.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
CVE-2026-82329 lets attackers mint Artifactory admin tokens with no credentials. Patched 28 August, exploited by 1 September, now on CISA's KEV catalogue.
By Adrián González · CEO y socio fundador
Three DDoS attacks in three months struck ID-porten, Norway's digital identity gateway. What the campaign reveals, and what any organisation that depends on a shared layer should take from it.
By Daniel O'Grady · CIO y socio fundador
A business guide to DDoS protection: what to contract upstream, what your architecture must do, how to rehearse the response and what NIS2 demands. With 2026 data: 5,343 attacks mitigated every hour.
By Adrián González · CEO y socio fundador
In 2025 NIST withdrew the incident response model much Spanish-language guidance still copies. What a plan needs today, the deadlines NIS2, DORA and Spain's ENS impose, and how to test it.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
The firewall blocked the request and that log entry carried the order in: how GhostJacking hijacks AI agents through the data they trust most.
By Daniel O'Grady · CIO y socio fundador
CISA has replaced flat patching deadlines with a four-variable risk model. What BOD 26-04 demands, and what European organisations can borrow from it.
By Adrián González · CEO y socio fundador
82% of CrowdStrike's 2025 detections brought no malware: the attacker uses the signed programs you already have. Why antivirus misses them and how to hunt them.
By Daniel O'Grady · CIO y socio fundador
The TIBER-ES guide dates from January 2022 and never mentions DORA. Since 2025 the same procedure has been mandatory for designated entities, and several of its parts have changed.
By Daniel O'Grady · CIO y socio fundador
MITRE retired ATT&CK's detection fields and replaced them with 697 strategies and 1,758 analytics. That change explains why a coverage percentage measures the map rather than the ground.
By Adrián González · CEO y socio fundador
Production SIEMs ingest enough data to cover 90% of MITRE ATT&CK and detect 22%. Which sources to prioritise, which fields to demand and how long to keep them.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Unit 42, SpecterOps and Mollema got past passkey sign-in without breaking the encryption, starting from an already-compromised endpoint. The weakness is in the implementation.
By Adrián González · CEO y socio fundador
Hundreds of organisations targeted in July 2026: Payroll Pirates steals Microsoft 365 sessions with AiTM phishing, maps HR staff via Microsoft Graph and reroutes salaries.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Six US and South Korean agencies detail how Gunra operates: in through firewalls and VPNs, a back door planted inside MFA, and backups wiped before encryption.
By Adrián González · CEO y socio fundador
An attacker pivoted from a wind farm to a heating plant through a private APN assumed to be isolated, stopped a turbine and wiped its tracks — no malware.
By Daniel O'Grady · CIO y socio fundador
A deserialization flaw (CWE-502) in JetBrains TeamCity On-Premises allows unauthenticated remote code execution (CVSS 9.8). Now on CISA's KEV: timeline, detection and CI/CD hardening.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
UNC6671 calls employees on their personal phones, steals the MFA token with AiTM infrastructure and negotiates under four separate brands. What it reveals about defending financial firms.
By Daniel O'Grady · CIO y socio fundador
Progress patched the flaw on 4 June and attacks began on the 29th, the day the analysis went public. CISA added it to KEV on 7 August. What that timeline teaches about your patching deadlines.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Two suppliers can both claim ENS and cover very different things. What the boundary, the category and the audit result actually tell a buying committee.
By Adrián González · CEO y socio fundador
For a SaaS provider selling to Spanish public bodies, ENS arrives as a tender clause with a deadline. Boundary and category decide the cost. How to get both right.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
An unauthenticated CVSS 10.0 flaw in Metabase, exploited since 3 August, handed attackers the credentials for connected databases. What to check, how to detect it and who to notify.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Edge devices went from 3% to 22% of exploitation breaches in a year. Why EDR cannot reach firewalls, VPNs and routers, and how to regain visibility without an agent.
By Adrián González · CEO y socio fundador
Verizon cut US$350m from the Yahoo price over two breaches; Marriott inherited Starwood's penalty. What to assess, how to price it and how to get it into the agreement.
By Adrián González · CEO y socio fundador
At Black Hat 2026 an AI system found attack techniques no human had catalogued first. Signature and known-TTP defence now has a much shorter shelf life.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Before you leave…
Quick 15-minute assessment and we'll tell you what to prioritise first: Microsoft 365, pentesting, vulnerability management, SOC, DORA, NIS2, ENS or ISO 27001.
No spam. Reply within 24h.
