Server Security: Lessons from a Maturing Malware Downloader
Why a single downloader deserves a closer lookSecurity teams in Barcelona, Lleida and Tarragona tend to track the big campaigns: ransomware waves, mas...
Cybersecurity
Cybersecurity
System protection, vulnerabilities and incident prevention.
LearnPress CVE-2026-104736: critical PHP object injection
What it is and who is affectedThe LearnPress plugin for WordPress carries a critical vulnerability tracked as CVE-2026-104736. The National Vulnerabil...
ISC BIND CVE-2015-5477: old flaw, active attacks
What CVE-2015-5477 is and who it affectsCVE-2015-5477 is a data processing error in ISC BIND, the DNS server software that resolves names for a large...
PAN-OS CVE-2026-0322: code injection under active attack
What CVE-2026-0322 is and which systems it touchesCVE-2026-0322 is a code injection flaw (CWE-94) in Palo Alto Networks PAN-OS, the operating system t...
Patch Fast, Block Faster: Lessons from a NetScaler RCE
A memory bug that became a lesson in defenceEvery so often a vulnerability appears that is worth studying not because it is exotic, but because it exp...
Abuse Shield: Centralised Server Protection Against IP Abuse
Why scattered defences failMost organisations that run their own servers end up with the same problem: security is applied machine by machine. One adm...
LatePoint Authentication Bypass: Critical Flaw in WordPress Bookings
What the flaw is and who it affectsThe Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress is affected by an authenticati...
Fortinet CVE-2025-61624: patch FortiOS, FortiProxy, FortiPAM
What CVE-2025-61624 is and who it affectsCVE-2025-61624 is a path traversal vulnerability (CWE-22) in several Fortinet products. According to the NVD,...
BeyondTrust Remote Support: critical CVE-2026-102764 exploited
What CVE-2026-102764 is and who is affectedBeyondTrust Remote Support, the remote-access appliance many organisations use so their IT staff and extern...
Abuse Shield: Centralised Server Protection and Shared IP Reputation
Trust is the weakest link in any networkMost security incidents we investigate for clients in Barcelona, Lleida, Tarragona and Girona do not begin wit...