In-depth analysis, technical guides and trends on NIS2, DORA, ENS, AI Act, threat intelligence and supply chain, written by the same experts protecting IBEX 35 companies.
The PHP patch has existed since 21 October. In a plant, the hard part is knowing which devices carry the vulnerable engine inside and what each vendor says about them.
Archive
PHP2Shell combines an available patch, many exploitation attempts and no confirmed intrusions. A work order to inventory, patch, mitigate and isolate.
A practical, source-backed guide for a Spanish SME to prioritise cybersecurity without a large-enterprise budget.
Ransomware in 2026: encryption-free extortion, RaaS fragmentation after LockBit's takedown and supply-chain attacks. Verified data and practical defence.
NIST, the NSA and CISA treat what an AI agent does outside its limits as an incident. What the guidance contains and what a European company can learn from it.
An AI API key lets someone consume a paid service at the holder's expense. What happened in OpenCode Console and how to revoke, rotate and monitor those keys.
Prohibited practices and AI literacy already apply; high-risk obligations move to 2027–2028 under the Digital Omnibus. How to classify your systems and what to do now.
AI does not replace the SOC analyst: it cuts noise, accelerates threat hunting, and demands governance under the AI Act and the ENS.
An attacker gained root access on an Ivanti Connect Secure appliance with every patch installed. What it means for industrial SMEs that give remote access to their OT network.
Separate networks, control access, secure remote access and monitor the plant: low-impact measures, plus the funding SPRI lists to help pay for them.
What NIS2 requires of manufacturers and plants with OT environments in Spain: affected sectors, notification deadlines, Article 21 measures, and the state of transposition.
NIS2 has still not been transposed in Spain and remains subject to a European Commission infringement procedure. What companies should do in the meantime and how to prepare.
What Royal Decree 311/2022 requires from companies providing services to the Spanish Administration, directly or as subcontractors, and how to demonstrate compliance.
The difference between ENS Medium and ENS High is strategic, not just technical. We break down the categorisation criteria, real cost, audit requirements and common mistakes.
A practical guide to the DORA Register of Information: templates B_01-B_99, xBRL-CSV format, the 2026 timeline and steps to comply with Art. 28.
After the first complete annual cycle of DORA's ICT Register, we review the five mistakes that generate the most supervisory requests and how to correct them before the 2027 submission.
// The regulatory signal, straight to your inbox
A monthly digest on NIS2, DORA and ENS, and the threats that matter most to Spanish businesses. No daily noise.
1 email a monthRequest a meeting with our team and review your NIS2, DORA or ENS roadmap with experts.
Request a meeting