Abuse Shield: Centralised Server Security for Catalan SMEs
Why scattered server defences quietly failMost small and mid-sized organisations in Catalonia do not run one server; they run five, ten, or twenty. A...
Cybersecurity
Cybersecurity
System protection, vulnerabilities and incident prevention.
Prime Mover plugin: critical PHP Object Injection flaw
What it is and who is affectedThe National Vulnerability Database (NVD) of NIST has published CVE-2026-115806, a PHP Object Injection flaw (CWE-502) i...
Server Security: Centralised IP Blocking with Abuse Shield
Why perimeter security is no longer enoughMost companies in Catalonia that run their own servers — from a hosting provider in Barcelona to a logistics...
Critical flaw in Collabora Online CODE Server for Nextcloud
What it is and who is affectedCVE-2026-110447 is an OS command injection flaw (CWE-78) in Collabora Online – Built-in CODE Server, the Nextcloud app d...
Arista VeloCloud Orchestrator CVE-2026-114625: critical SQL injection
What it is and who is affectedCVE-2026-114625 is a SQL injection vulnerability (CWE-89) in Arista VeloCloud Orchestrator, the management platform used...
Abuse Shield: Centralised Server Protection for Catalan SMEs
Why isolated server defences are no longer enoughRecent investigations into state-aligned threat actors have shown how quickly a single compromised en...
Node.js TLS and Brotli flaws: why patching is not enough
A runtime patch is a starting gun, not a finish lineWhen the Node.js project ships a security batch, the instinct is to open a terminal, bump the vers...
Node.js Brotli Flaw: Patch Fast, Then Harden Your Servers
A memory bug that turns compressed data into an attack surfaceThe Node.js project has shipped a security release addressing a high-severity defect in...
Siemens Software Center: CVE-2026-110936 Exploited in the Wild
What it is and who is affectedCVE-2026-110936 is an uncontrolled search path element vulnerability (CWE-427) in Siemens Software Center. According to...
Plex Media Server: CVE-2026-96652 SSRF Exploited in the Wild
What it is and who is affectedPlex Media Server carries a server-side request forgery (SSRF) flaw tracked as CVE-2026-96652, classified under CWE-918....