https://hard2bit.com/en/blog/ Technical analysis, NIS2, DORA, ENS and ISO 27001 guides and operational insights from the Hard2bit team: 24/7 SOC, pentesting, red team and incident response. en Thu, 02 Jul 2026 13:15:21 GMT https://hard2bit.com/en/blog/prompt-injection-rce-ai-code-editors-cursor-duneslide/ https://hard2bit.com/en/blog/prompt-injection-rce-ai-code-editors-cursor-duneslide/ Thu, 02 Jul 2026 13:15:21 GMT Two critical Cursor flaws (DuneSlide) turn indirect prompt injection into code execution. What it means for the AI editors your developers use, and how to defend. Ciberamenazas Ciberseguridad https://hard2bit.com/en/blog/cve-2026-42897-exchange-server-owa-zero-day-EN/ https://hard2bit.com/en/blog/cve-2026-42897-exchange-server-owa-zero-day-EN/ Wed, 01 Jul 2026 10:12:43 GMT Microsoft has confirmed active exploitation of CVE-2026-42897, an XSS flaw in on-premises Exchange OWA that runs JavaScript the moment a crafted email is opened. What it means and how to contain it. Ciberamenazas https://hard2bit.com/en/blog/signal-whatsapp-account-hijacking-linked-devices/ https://hard2bit.com/en/blog/signal-whatsapp-account-hijacking-linked-devices/ Wed, 01 Jul 2026 09:43:07 GMT The US is offering up to $10 million for information on Russian-linked groups that compromised Signal and WhatsApp accounts. What companies and executives should do next. Ciberamenazas Ciberseguridad https://hard2bit.com/en/blog/unifi-os-lantronix-eds5000-cisa-kev-network-management-entry-point/ https://hard2bit.com/en/blog/unifi-os-lantronix-eds5000-cisa-kev-network-management-entry-point/ Mon, 29 Jun 2026 06:52:30 GMT On 23 June 2026 CISA added four UniFi OS and Lantronix EDS5000 flaws to its KEV catalogue. Chained, three of them give unauthenticated remote code execution on the box that manages your network. Ciberamenazas Noticias IT https://hard2bit.com/en/blog/siem-as-breach-splunk-cve-2026-20253-rce-kev/ https://hard2bit.com/en/blog/siem-as-breach-splunk-cve-2026-20253-rce-kev/ Wed, 24 Jun 2026 15:16:03 GMT An unauthenticated endpoint in Splunk Enterprise's PostgreSQL service allows remote code execution. CISA added it to the KEV catalogue on 18 June. What breaks and how to contain it. Ciberamenazas https://hard2bit.com/en/blog/hidden-c2-microsoft-teams-dragonforce-turn-relays/ https://hard2bit.com/en/blog/hidden-c2-microsoft-teams-dragonforce-turn-relays/ Tue, 23 Jun 2026 07:02:41 GMT DragonForce hid its command and control inside Microsoft Teams TURN relays and stayed undetected for nearly two months. How Backdoor.Turn works and how to hunt it on your network. Ciberamenazas https://hard2bit.com/en/blog/npm-easy-day-js-mastra-postinstall-supply-chain-attack/ https://hard2bit.com/en/blog/npm-easy-day-js-mastra-postinstall-supply-chain-attack/ Fri, 19 Jun 2026 11:45:33 GMT On 17 June 2026 an attacker pushed more than 140 @mastra npm packages carrying a malicious dependency that runs a trojan during postinstall. What happened, and how to defend against it. Ciberamenazas https://hard2bit.com/en/blog/typosquatting-scan-24-brands-591-domains/ https://hard2bit.com/en/blog/typosquatting-scan-24-brands-591-domains/ Thu, 18 Jun 2026 11:10:52 GMT We ran a 100% passive OSINT scan against 24 well-known brands and found 591 live typosquatting domains. 48% can send email. Anonymised aggregate data, June 2026. Ciberamenazas Ciberseguridad https://hard2bit.com/en/blog/clickfix-fake-captcha-social-engineering-defence-guide/ https://hard2bit.com/en/blog/clickfix-fake-captcha-social-engineering-defence-guide/ Mon, 15 Jun 2026 08:31:13 GMT ClickFix tricks users into running PowerShell by pasting a command. 517% growth in 2025. Anatomy, operational detection and defences that genuinely work. Ciberamenazas Ciberseguridad https://hard2bit.com/en/blog/cybersecurity-audit-cost-for-businesses/ https://hard2bit.com/en/blog/cybersecurity-audit-cost-for-businesses/ Thu, 11 Jun 2026 12:46:22 GMT Realistic 2026 ranges for cybersecurity audit pricing in the Spanish and EU mid-market, what a professional audit covers and how to choose a serious provider. Ciberseguridad https://hard2bit.com/en/blog/digital-supply-chain-2025-2026-5-lessons-ciso/ https://hard2bit.com/en/blog/digital-supply-chain-2025-2026-5-lessons-ciso/ Thu, 11 Jun 2026 09:48:17 GMT ENISA Threat Landscape 2025 (4,875 EU incidents) and Verizon DBIR 2026 combined: five CISO lessons on supply chain, digital dependencies, vulnerabilities, AI phishing and NIS2. Investigación Ciberseguridad https://hard2bit.com/en/blog/ai-agent-readiness-eu-60-enterprises-report-2026/ https://hard2bit.com/en/blog/ai-agent-readiness-eu-60-enterprises-report-2026/ Sat, 06 Jun 2026 16:16:24 GMT Passive analysis of 60 EU domains — banking, pharma, telcos, energy, retail and public sector — against the 11 emerging AI Agent Readiness standards. Aggregated data by sector. Investigación Ciberseguridad https://hard2bit.com/en/blog/cyber-resilience-dashboard-board-12-actionable-kpis/ https://hard2bit.com/en/blog/cyber-resilience-dashboard-board-12-actionable-kpis/ Sat, 06 Jun 2026 09:29:07 GMT A practical 12-KPI cyber resilience dashboard for the Board: what to measure, how to present it, and how to use it to drive decisions on risk, investment and strategy. Normativa & GRC https://hard2bit.com/en/blog/spiffe-spire-vs-oauth-non-human-identities-cloud-native/ https://hard2bit.com/en/blog/spiffe-spire-vs-oauth-non-human-identities-cloud-native/ Sat, 06 Jun 2026 09:20:07 GMT SPIFFE/SPIRE for workload identity and OAuth for machine-to-machine: how each works, where each fits, and the hybrid pattern that scales for cloud-native enterprises. Ciberamenazas https://hard2bit.com/en/blog/kev-epss-ssvc-prioritise-exploitable-vulnerabilities/ https://hard2bit.com/en/blog/kev-epss-ssvc-prioritise-exploitable-vulnerabilities/ Sat, 06 Jun 2026 09:16:48 GMT How to combine CISA KEV, EPSS and SSVC to prioritise exploitable vulnerabilities, replace CVSS-only triage and produce defensible remediation decisions. Ciberseguridad https://hard2bit.com/en/blog/continuous-threat-exposure-management-ctem-regulated-enterprises/ https://hard2bit.com/en/blog/continuous-threat-exposure-management-ctem-regulated-enterprises/ Sat, 06 Jun 2026 08:13:59 GMT How to implement Continuous Threat Exposure Management (CTEM) in regulated enterprises: five phases, architecture, KPIs, compliance mapping and a 90-day rollout plan. Ciberseguridad https://hard2bit.com/en/blog/hybrid-active-directory-attacks-detection-containment/ https://hard2bit.com/en/blog/hybrid-active-directory-attacks-detection-containment/ Sat, 06 Jun 2026 06:08:00 GMT Technical playbook for SOC and IR teams: how to detect, contain and reduce Active Directory abuse in hybrid environments — Kerberoasting, AD CS misconfigurations, Golden Ticket and Entra ID. Ciberamenazas https://hard2bit.com/en/blog/post-quantum-cryptography-transition-european-enterprises-2026-2028/ https://hard2bit.com/en/blog/post-quantum-cryptography-transition-european-enterprises-2026-2028/ Fri, 05 Jun 2026 20:54:11 GMT Executive guide to preparing the post-quantum transition for European enterprises 2026-2028: cryptographic inventory, prioritisation by impact and feasibility, governance, KPIs and quick wins. Ciberseguridad https://hard2bit.com/en/blog/mcp-security-enterprise-ai-agents-production-controls/ https://hard2bit.com/en/blog/mcp-security-enterprise-ai-agents-production-controls/ Fri, 05 Jun 2026 20:54:11 GMT How to move AI agents from pilot to secure production with MCP: control architecture, guardrails, security minimums and a phased implementation plan for the enterprise. Ciberseguridad https://hard2bit.com/en/blog/non-human-identities-security-service-accounts-tokens-api-keys/ https://hard2bit.com/en/blog/non-human-identities-security-service-accounts-tokens-api-keys/ Fri, 05 Jun 2026 18:49:33 GMT Non-human identities now outnumber humans in most enterprises. Practical guide to inventory, least-privilege, secret rotation, anomaly detection and a 90-day implementation plan. Ciberseguridad https://hard2bit.com/en/blog/microsoft-365-account-takeover-aitm-token-theft/ https://hard2bit.com/en/blog/microsoft-365-account-takeover-aitm-token-theft/ Fri, 05 Jun 2026 18:44:37 GMT Traditional MFA isn't enough. Technical analysis of Adversary-in-the-Middle (AiTM) attacks, Evilginx2, ESTSAUTH cookie theft and FIDO2-based mitigation in Microsoft 365. Ciberseguridad https://hard2bit.com/en/blog/microsoft-365-device-code-phishing-prevention-detection/ https://hard2bit.com/en/blog/microsoft-365-device-code-phishing-prevention-detection/ Fri, 05 Jun 2026 18:41:51 GMT Device-code phishing in Microsoft 365 abuses legitimate OAuth flows to steal tokens without asking for passwords. How it works, warning signs and the controls that actually block it. Ciberseguridad https://hard2bit.com/en/blog/browser-extensions-genai-session-theft-corporate-data/ https://hard2bit.com/en/blog/browser-extensions-genai-session-theft-corporate-data/ Fri, 05 Jun 2026 18:18:21 GMT AI-powered browser extensions can read sessions, prompts, cookies, SaaS data and corporate secrets. Learn the real risks, technical controls and detection patterns to protect your organisation. Ciberseguridad https://hard2bit.com/en/blog/ai-agent-readiness-scanner/ https://hard2bit.com/en/blog/ai-agent-readiness-scanner/ Fri, 05 Jun 2026 12:27:53 GMT AI Agents like ChatGPT, Perplexity, Claude and Gemini discover websites through 11 emerging standards. What they are and how to audit your site against them. Ciberseguridad