IA6 min
Google Gemini 4 Carbon: a frontier model you can't use and what it means for security
A cybersecurity-focused AI model that only a few can use: which figures Google claims and which criteria to set before depending on it.
Feed by theme
Archive
Industria/OT-NIS206
Citrix vulnerabilities and Cisco, Veeam and Schneider Electric flaws: how to prioritize patches in IT and OT
How to order the critical INCIBE-CERT advisories on Citrix, Cisco, Veeam and Schneider Electric by affected versions, exposure and patch feasibility.
9 min
PHP2Shell industrial OT products: what vendors have warned and why inventory decides
The PHP patch has existed since 21 October. In a plant, the hard part is knowing which devices carry the vulnerable engine inside and what each vendor says about them.
9 min
Ivanti zero day in a VPN gave root access to a patched appliance
An attacker gained root access on an Ivanti Connect Secure appliance with every patch installed. What it means for industrial SMEs that give remote access to their OT network.
7 min
How to Protect a Connected Factory from Cyberattacks Without Stopping Production
Separate networks, control access, secure remote access and monitor the plant: low-impact measures, plus the funding SPRI lists to help pay for them.
7 min
NIS2 in the industrial sector: what the directive requires of factories and OT environments in Spain
What NIS2 requires of manufacturers and plants with OT environments in Spain: affected sectors, notification deadlines, Article 21 measures, and the state of transposition.
17 min
Complete NIS2 Compliance Guide for Spanish Companies
NIS2 has still not been transposed in Spain and remains subject to a European Commission infringement procedure. What companies should do in the meantime and how to prepare.
15 min
Pyme03
PHP2Shell PHP vulnerabilities already have patches: how to prioritize the work
PHP2Shell combines an available patch, many exploitation attempts and no confirmed intrusions. A work order to inventory, patch, mitigate and isolate.
8 min
Cybersecurity for SMEs in Spain: where to start without a large-enterprise budget
A practical, source-backed guide for a Spanish SME to prioritise cybersecurity without a large-enterprise budget.
9 min
Ransomware in 2026: trends, tactics and how to protect yourself
Ransomware in 2026: encryption-free extortion, RaaS fragmentation after LockBit's takedown and supply-chain attacks. Verified data and practical defence.
12 min
IA04
NIST Guidance on Super Intelligence Incidents: What the Ten Practices for AI Agents Require
NIST, the NSA and CISA treat what an AI agent does outside its limits as an incident. What the guidance contains and what a European company can learn from it.
7 min
The OpenCode Console Breach and API Keys for AI: How to Revoke and Limit Them
An AI API key lets someone consume a paid service at the holder's expense. What happened in OpenCode Console and how to revoke, rotate and monitor those keys.
7 min
EU AI Act: A Practical Guide for Spanish Companies in 2026
Prohibited practices and AI literacy already apply; high-risk obligations move to 2027–2028 under the Digital Omnibus. How to classify your systems and what to do now.
11 min
How AI Is Transforming Threat Detection in the SOC
AI does not replace the SOC analyst: it cuts noise, accelerates threat hunting, and demands governance under the AI Act and the ENS.
13 min
Financiero-DORA02
DORA Register of Information: how to complete the template under Regulation (EU) 2024/2956
A practical guide to the DORA Register of Information: templates B_01-B_99, xBRL-CSV format, the 2026 timeline and steps to comply with Art. 28.
11 min
DORA: The 5 Most Common Mistakes in the ICT Register of Information and How to Avoid Them
After the first complete annual cycle of DORA's ICT Register, we review the five mistakes that generate the most supervisory requests and how to correct them before the 2027 submission.
14 min
Sector público-ENS02
ENS for suppliers to the Spanish Administration: what Royal Decree 311/2022 requires from your company as a subcontractor
What Royal Decree 311/2022 requires from companies providing services to the Spanish Administration, directly or as subcontractors, and how to demonstrate compliance.
10 min
ENS High vs ENS Medium: a practical guide to choosing the right category
The difference between ENS Medium and ENS High is strategic, not just technical. We break down the categorisation criteria, real cost, audit requirements and common mistakes.
10 min
Ofensiva01
