IA7 min
The OpenCode Console Breach and API Keys for AI: How to Revoke and Limit Them
An AI API key lets someone consume a paid service at the holder's expense. What happened in OpenCode Console and how to revoke, rotate and monitor those keys.
Feed by theme
Archive
Industria/OT-NIS204
Ivanti zero day in a VPN gave root access to a patched appliance
An attacker gained root access on an Ivanti Connect Secure appliance with every patch installed. What it means for industrial SMEs that give remote access to their OT network.
7 min
How to Protect a Connected Factory from Cyberattacks Without Stopping Production
Separate networks, control access, secure remote access and monitor the plant: low-impact measures, plus the funding SPRI lists to help pay for them.
7 min
NIS2 in the industrial sector: what the directive requires of factories and OT environments in Spain
What NIS2 requires of manufacturers and plants with OT environments in Spain: affected sectors, notification deadlines, Article 21 measures, and the state of transposition.
17 min
Complete NIS2 Compliance Guide for Spanish Companies
NIS2 has still not been transposed in Spain and remains subject to a European Commission infringement procedure. What companies should do in the meantime and how to prepare.
15 min
IA02
EU AI Act: A Practical Guide for Spanish Companies in 2026
Prohibited practices and AI literacy already apply; high-risk obligations move to 2027–2028 under the Digital Omnibus. How to classify your systems and what to do now.
11 min
How AI Is Transforming Threat Detection in the SOC
AI does not replace the SOC analyst: it cuts noise, accelerates threat hunting, and demands governance under the AI Act and the ENS.
13 min
Financiero-DORA02
DORA Register of Information: how to complete the template under Regulation (EU) 2024/2956
A practical guide to the DORA Register of Information: templates B_01-B_99, xBRL-CSV format, the 2026 timeline and steps to comply with Art. 28.
11 min
DORA: The 5 Most Common Mistakes in the ICT Register of Information and How to Avoid Them
After the first complete annual cycle of DORA's ICT Register, we review the five mistakes that generate the most supervisory requests and how to correct them before the 2027 submission.
14 min
Pyme02
Cybersecurity for SMEs in Spain: where to start without a large-enterprise budget
A practical, source-backed guide for a Spanish SME to prioritise cybersecurity without a large-enterprise budget.
9 min
Ransomware in 2026: trends, tactics and how to protect yourself
Ransomware in 2026: encryption-free extortion, RaaS fragmentation after LockBit's takedown and supply-chain attacks. Verified data and practical defence.
12 min
Sector público-ENS02
ENS for suppliers to the Spanish Administration: what Royal Decree 311/2022 requires from your company as a subcontractor
What Royal Decree 311/2022 requires from companies providing services to the Spanish Administration, directly or as subcontractors, and how to demonstrate compliance.
10 min
ENS High vs ENS Medium: a practical guide to choosing the right category
The difference between ENS Medium and ENS High is strategic, not just technical. We break down the categorisation criteria, real cost, audit requirements and common mistakes.
10 min
Ofensiva01
