Articles 49 to 72 of 168. To search by keyword, go back to the blog hub.
By leaving the SMTP envelope sender empty, an attacker sidesteps the RejectDirectSend control and slips external mail into Microsoft 365 as if it were internal. Detection and defence.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
We scanned SPF and DMARC across 219 large companies in 8 sectors: 73% block, 38% at reject, 22% with SPF at the edge of the limit. What RFC 9989 requires and how to reach p=reject.
By Adrián González · CEO y socio fundador
PostGREShell (CVE-2026-6471) lets a REPLICATION account load code on the PostgreSQL server. Conditions, trail, detection, and how to patch without breaking logical replication.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
CVE-2026-48710, a CVSS 6.5 Starlette flaw, joins the KEV catalogue after being used to break into AI gateways without credentials. Who is exposed, how to detect it and how to patch.
By Daniel O'Grady · CIO y socio fundador
Microsoft will block NTLM by default in the next Windows release and tightens NTLMv1 in October 2026. Why it persists on your network, which events to audit and how to remove it in phases.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
US and Canadian courts handed database copies to their case management vendor to debug faults, and an intruder had them for four months. What EU rules require and what to check in your contracts.
By Adrián González · CEO y socio fundador
An unauthorised BGP announcement diverted Softaculous traffic for 33 hours, handed the attacker a valid certificate and served a Virtualizor update with root. What failed and what to check.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
CVE-2026-82329 lets attackers mint Artifactory admin tokens with no credentials. Patched 28 August, exploited by 1 September, now on CISA's KEV catalogue.
By Adrián González · CEO y socio fundador
Three DDoS attacks in three months struck ID-porten, Norway's digital identity gateway. What the campaign reveals, and what any organisation that depends on a shared layer should take from it.
By Daniel O'Grady · CIO y socio fundador
A business guide to DDoS protection: what to contract upstream, what your architecture must do, how to rehearse the response and what NIS2 demands. With 2026 data: 5,343 attacks mitigated every hour.
By Adrián González · CEO y socio fundador
In 2025 NIST withdrew the incident response model much Spanish-language guidance still copies. What a plan needs today, the deadlines NIS2, DORA and Spain's ENS impose, and how to test it.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
The firewall blocked the request and that log entry carried the order in: how GhostJacking hijacks AI agents through the data they trust most.
By Daniel O'Grady · CIO y socio fundador
CISA has replaced flat patching deadlines with a four-variable risk model. What BOD 26-04 demands, and what European organisations can borrow from it.
By Adrián González · CEO y socio fundador
82% of CrowdStrike's 2025 detections brought no malware: the attacker uses the signed programs you already have. Why antivirus misses them and how to hunt them.
By Daniel O'Grady · CIO y socio fundador
Only 24% of breach notices now disclose the attack vector. What that does to supplier assessment in Europe, and what can still be demanded by contract.
By Adrián González · CEO y socio fundador
The TIBER-ES guide dates from January 2022 and never mentions DORA. Since 2025 the same procedure has been mandatory for designated entities, and several of its parts have changed.
By Daniel O'Grady · CIO y socio fundador
MITRE retired ATT&CK's detection fields and replaced them with 697 strategies and 1,758 analytics. That change explains why a coverage percentage measures the map rather than the ground.
By Adrián González · CEO y socio fundador
Production SIEMs ingest enough data to cover 90% of MITRE ATT&CK and detect 22%. Which sources to prioritise, which fields to demand and how long to keep them.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
A macOS Screen Sharing flaw hands root to anyone who can reach port 5900. Exploitation is active with Monero miners, and the usual hardening offers no protection.
By Adrián González · CEO y socio fundador
Lazarus paired fake job offers and DLL side-loading in a PDF viewer with zero-day CVE-2026-68820 in afd.sys to plant the FudModule rootkit inside European defence firms.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Unit 42, SpecterOps and Mollema got past passkey sign-in without breaking the encryption, starting from an already-compromised endpoint. The weakness is in the implementation.
By Adrián González · CEO y socio fundador
Hundreds of organisations targeted in July 2026: Payroll Pirates steals Microsoft 365 sessions with AiTM phishing, maps HR staff via Microsoft Graph and reroutes salaries.
By Thilina Manana · COO, Director Técnico de Seguridad hard2bit y socio fundador
Six US and South Korean agencies detail how Gunra operates: in through firewalls and VPNs, a back door planted inside MFA, and backups wiped before encryption.
By Adrián González · CEO y socio fundador
An attacker pivoted from a wind farm to a heating plant through a private APN assumed to be isolated, stopped a turbine and wiped its tracks — no malware.
By Daniel O'Grady · CIO y socio fundador
Before you leave…
Quick 15-minute assessment and we'll tell you what to prioritise first: Microsoft 365, pentesting, vulnerability management, SOC, DORA, NIS2, ENS or ISO 27001.
No spam. Reply within 24h.
