Fail2ban at scale: centralised IP blocking for your servers
The problem with treating each server as an islandMost small and mid-sized organisations in Catalonia run more than one machine. A web front end, a da...
Cybersecurity
Cybersecurity
System protection, vulnerabilities and incident prevention.
Abuse Shield: Centralised Server Protection for SMEs
Why server security is no longer a one-person jobSmall and medium-sized businesses in Catalonia and across Spain are running more internet-facing infr...
Rank Math SEO PRO 3.0.123: critical supply-chain compromise
What happened and who is affectedRank Math SEO PRO for WordPress has been caught up in a supply-chain compromise tracked as CVE-2026-111862 and rated...
ProFTPD 1.3.5: critical CVE-2015-3306 now exploited
What it is and who is affectedCVE-2015-3306 is an improper access control flaw (CWE-284) in ProFTPD, tracked by the NVD as affecting ProFTPD 1.3.5 thr...
ONLYOFFICE Docs: CVE-2021-3199 path traversal under active attack
What it is and who is affectedCVE-2021-3199 is a path traversal flaw (CWE-22) in ONLYOFFICE Docs, the self-hosted document suite many organisations ru...
Server Security Beyond Phishing: Blocking Malicious IPs at the Edge
Phishing has changed, and your perimeter should tooFor years, security awareness training relied on a handful of visible tells: clumsy grammar, an odd...
CVE-2023-22894 in Strapi: patch now as attacks are confirmed
What CVE-2023-22894 is and who is affectedCVE-2023-22894 is a cleartext storage of sensitive information vulnerability (CWE-312) in Strapi, the open-s...
Apache Struts CVE-2016-3081: command injection under attack
What it is and who is affectedCVE-2016-3081 is a command injection flaw in Apache Struts, catalogued by NIST as CWE-77. According to the National Vuln...
Server Security Beyond the Endpoint: Centralised IP Reputation
Defending servers one by one is a losing habitMost organisations with their own infrastructure have a familiar story. A server gets hammered by SSH br...
Server security: why one CVE is never the whole story
One CVE, many doorsWhen a vulnerability is published, the headline label rarely captures what an attacker can actually do with it. A flaw described as...