Arista VeloCloud Orchestrator CVE-2026-114625: critical SQL injection
What it is and who is affectedCVE-2026-114625 is a SQL injection vulnerability (CWE-89) in Arista VeloCloud Orchestrator, the management platform used...
Blog Brain
Blog Brain
Browse public articles by editorial status or type. This classification complements topic categories.
Document Retention in Spain: Automate What You Keep
Why retention rules matter more than they seemMost SMEs in Catalonia keep everything. Storage is cheap, deleting feels risky, and nobody wants to be t...
What the Meta privacy ruling means for your online shop
When a court in the United States hands down one of the largest penalties ever imposed on a technology company over how it handled personal data, onli...
ChatGPT Ads: a new channel for your online shop in Spain
Conversational advertising arrives at the checkoutFor years, online shops in Lleida, Barcelona and across Catalonia have fought for attention in the s...
Agentic commerce: when AI agents start buying on your online shop
From browsing to delegating: a new kind of shopperFor two decades, running an online shop has meant designing for a human being: someone who lands on...
Abuse Shield: Centralised Server Protection for Catalan SMEs
Why isolated server defences are no longer enoughRecent investigations into state-aligned threat actors have shown how quickly a single compromised en...
Node.js TLS and Brotli flaws: why patching is not enough
A runtime patch is a starting gun, not a finish lineWhen the Node.js project ships a security batch, the instinct is to open a terminal, bump the vers...
Node.js Brotli Flaw: Patch Fast, Then Harden Your Servers
A memory bug that turns compressed data into an attack surfaceThe Node.js project has shipped a security release addressing a high-severity defect in...
Siemens Software Center: CVE-2026-110936 Exploited in the Wild
What it is and who is affectedCVE-2026-110936 is an uncontrolled search path element vulnerability (CWE-427) in Siemens Software Center. According to...
Plex Media Server: CVE-2026-96652 SSRF Exploited in the Wild
What it is and who is affectedPlex Media Server carries a server-side request forgery (SSRF) flaw tracked as CVE-2026-96652, classified under CWE-918....