Blog
Cybersecurity Blog
Insights, technical guides and analysis from the Secra team on the latest cybersecurity threats and trends.
AllThreat IntelligenceComplianceDevSecOpsOffensive securityDefensive securityCloud SecurityPentestingIoT and OTSMEsGovernanceRed TeamCommunity
Threat Intelligence
First autonomous AI agent cyberattack in Spain: what the AEPD reported and what changes for your company
Spain's data protection authority received the first data breach notification caused by an AI agent that planned and executed the attack without human intervention. What happened, what the AEPD recommends and what must change in your risk analysis.
2026-09-177 min
Compliance
EU AI Act: A Compliance Guide for Businesses
What the EU AI Act is, the obligations timeline (August 2026), the risk tiers and what businesses must do to comply, from transparency duties to GPAI and high-risk systems.
2026-08-0913 min
DevSecOps
AI-Generated Code Security: The Risks of Vibe Coding
Security risks of AI-generated code (vibe coding): insecure code, hallucinated dependencies (slopsquatting) and secret leakage, and how to control them in the SDLC.
2026-07-2613 min
Offensive security
AiTM Phishing: Session Hijacking and MFA Bypass Explained
What adversary-in-the-middle (AiTM) phishing is, how it steals the session cookie to bypass MFA, and how to defend with phishing-resistant MFA and conditional access.
2026-07-2612 min
Offensive security
CVE-2026-15409 and CVE-2026-15410: SonicWall SMA 1000 Zero-Days
Analysis of the SonicWall SMA 1000 zero-days CVE-2026-15409 (SSRF, CVSS 10) and CVE-2026-15410, chained for code execution. Affected versions and mitigation.
2026-07-2611 min
Defensive security
CVE-2026-56155: Active Directory Federation Services Privilege Escalation Zero-Day
Analysis of CVE-2026-56155, an actively exploited elevation-of-privilege zero-day in Active Directory Federation Services (AD FS). Risk to federated identity and mitigation.
2026-07-2611 min
Offensive security
CVE-2026-56164: SharePoint Server Under Active Exploitation
Analysis of CVE-2026-56164 in SharePoint Server: a missing-authentication flaw exploited unauthenticated, chained to RCE, web shells and IIS key theft. Impact and mitigation.
2026-07-2614 min
Offensive security
wp2shell: Unauthenticated RCE in WordPress Core
Analysis of wp2shell (CVE-2026-63030 and CVE-2026-60137): the chain that achieves unauthenticated remote code execution in WordPress core. Impact, versions, detection and mitigation.
2026-07-2014 min
DevSecOps
SBOM and Software Supply Chain Security
What an SBOM is (CycloneDX, SPDX), how to generate it in your pipeline, and why it is key to software supply chain security, SLSA, Sigstore and NIS2.
2026-07-1311 min
All blog articles
Key guides
- NIS2 in Spain: A Compliance Guide for 2026
- Cybersecurity Companies in Spain: How to Choose in 2026
- ENS Certification for Businesses: A Complete 2025 Guide
- What Is a Red Team: Complete Business Guide
- Web Application Penetration Testing: Complete Guide
- Penetration Testing Pricing in Spain: What Drives the Cost
- How to Choose a Penetration Testing Company: CISO Guide
- What Is Penetration Testing: Complete Business Guide
- Cybersecurity Audit: Complete Business Guide for 2026
- DORA Compliance Guide for Financial Entities in 2026
- ISO 27001: What It Is and How to Get Certified
- Cybersecurity company in Madrid: how to choose a provider in 2026
- What Is EDR (Endpoint Detection and Response)
- What Is a CISO: Functions, Responsibilities and Models
- What Is SIEM: How It Works, SOAR vs XDR and Use Cases
- What Is a SOC (Security Operations Center): How It Works
- Penetration Testing vs Red Team: Differences and When to Use
- NIS2 Audit: How to Prepare Step by Step (2026 Guide)
- What Is Ethical Hacking: Types and Certifications
Offensive security
- AiTM Phishing: Session Hijacking and MFA Bypass Explained
- CVE-2026-15409 and CVE-2026-15410: SonicWall SMA 1000 Zero-Days
- CVE-2026-56164: SharePoint Server Under Active Exploitation
- wp2shell: Unauthenticated RCE in WordPress Core
- WiFi Security: Wireless Pentesting Guide (WPA2/WPA3)
- Active Directory pentesting: tier model and hardening 2026
- AI red team automation 2026: tools, frameworks and limitations
- AI Red Teaming: how to evaluate the security of AI models and LLMs
- Blockchain and smart contract pentesting: Web3 audit 2026
- GraphQL Pentesting: Common Vulnerabilities and Defense Techniques
- iOS app pentesting: jailbreak, Frida and MASVS L1-L2 2026
- Kubernetes Pentesting: Cluster Attacks and Production Hardening
- OWASP Top 10 for LLM Applications 2025: Complete Guide With Examples
- Serverless pentesting: AWS Lambda, Azure Functions and GCP in 2026
- Thick-client pentesting: Windows desktop applications 2026
- Top 10 professional pentesting tools in 2026
- What is Burp Suite: complete guide to web pentesting 2026
- What Is Shodan: Internet-Connected Device Search and Defensive Use
- What Is Mimikatz: Credential Dumping, Techniques and Detection in 2026
- What Is Prompt Injection: LLM Attacks and How to Defend
- Watering Hole Attack: What It Is, How It Works and Cases
- DorkGPT: How Generative AI Is Accelerating OSINT and Dorking
- Kerberos Attacks in Active Directory: Technical Guide
- What Is an Exploit: Types, CVE, 0-day and Defence
- What Is Maltego: OSINT, Threat Intel and Graph Investigation
- What Is SAML 2.0: SSO Flow, OAuth/OIDC and Vulnerabilities
- Google Dorks: Operators, OSINT and Red Team Use
- Infrastructure Penetration Testing: Internal and External
- Web Security Audit: Complete Guide for Companies in 2026
- Mobile Application Penetration Testing: iOS and Android
- API Penetration Testing (REST and GraphQL): Technical Guide
- Cloud Penetration Testing (AWS, Azure and GCP): Guide
Compliance
- EU AI Act: A Compliance Guide for Businesses
- Business Continuity Plan (BCP/DRP): ISO 22301 Guide
- Cyber Insurance: What It Covers, Exclusions and Price
- Cyber Insurance Minimum Controls: MFA, EDR, Backups
- Cyber Resilience Act (CRA): What It Is and Who Must Comply
- Banking cybersecurity: DORA compliance for financial entities 2026
- Energy sector cybersecurity: NIS2 for utilities 2026
- Healthcare cybersecurity: NIS2, GDPR and hospital data protection
- ISO 27001 Information Security Policy Template 2026
- Logistics and transport cybersecurity: NIS2 essential sector 2026
- Retail and eCommerce cybersecurity: PCI DSS, NIS2 and fraud prevention 2026
- SaaS startup cybersecurity: ISO 27001 and SOC 2 from seed in 2026
- Cybersecurity for telecom operators: NIS2 and CNMC in Spain 2026
- What Is INCIBE: Functions, Services and Difference with CCN
- What Is Magerit: Risk Analysis Methodology and PILAR
- DORA vs NIS2: Which Regulation Applies and When
- ISO 27001 + NIS2: How They Complement Each Other
- NIS2 Directive: Scope, Fines and Key Deadlines
- NIS2 vs NIS1: Key Differences and What's New
- TIBER-EU and TLPT: Threat-Led Red Team in Banking
Defensive security
- CVE-2026-56155: Active Directory Federation Services Privilege Escalation Zero-Day
- Microsoft Copilot 365 Security: Risks and Controls for Business 2026
- What Is a Backdoor: Types, Real Examples and Detection Methods
- Cracker vs Hacker: Differences, Types and Real Examples
- SIEM vs SOAR vs XDR: Differences and How to Combine
- What Is Blue Team: Functions and Red Team Comparison
- SOC as a Service: Guide to Outsourcing Your SOC in 2026
- Types of Phishing: Spear, BEC, Vishing, Smishing and More
- What Is SHA-256: Hash Function, Real Uses and Comparison
- What Is a Computer Worm: Types, Examples and Removal
- What Is Adware: Types, Risks, Real Cases and How to Remove It
- What Is an IDS: Types, IPS Differences and Snort vs Suricata
- What Is MITRE ATT&CK: Tactics, Techniques and Use in SOC
- What Is MDR (Managed Detection and Response)
- What Is Wazuh: Open Source SIEM for Companies
- JWT Security: Vulnerabilities, Algorithms and Best Practices
- What Is PKI (Public Key Infrastructure)
- What Is a CVE: Common Vulnerabilities Explained
Pentesting
- Business logic vulnerabilities: attacks and testing
- Command Injection: OS Attacks, Impact & Prevention
- Web Cache Poisoning: Unkeyed Inputs and Cache Attacks
- WebSocket Security: CSWSH, Hijacking and Pentesting
- Pentesting AI and LLM models: methodology, tools and deliverables
- CVE-2026-21858 n8n: max severity RCE affects 100k servers
- CVE-2026-34926 Trend Micro Apex One: actively exploited path traversal
- CVE-2026-42897 Microsoft Exchange Server: actively exploited zero-day
- CVE-2026-31431 Copy Fail: root on every Linux since 2017
- How to Root an Android AVD for Pentesting with Burp Suite
- OWASP Top 10 2025: Business Web Vulnerabilities
- White Box vs Black Box vs Gray Box Pentesting
- What Is a Penetration Test? A Complete Guide for Businesses
IoT and OT
- IEC/ISA 62443: OT Cybersecurity Standard Guide
- ICS Penetration Testing: OT Security Assessment Guide
- SCADA Security: Threats, Architecture and Best Practices
- OT Security: What Is It, ICS/SCADA Risks and Defense
- Industry 4.0 and OT Cybersecurity: NIS2 Protection for Manufacturing 2026
- IoT/OT Cybersecurity: Critical Threats in 2026
Threat Intelligence
- First autonomous AI agent cyberattack in Spain: what the AEPD reported and what changes for your company
- Threat Intelligence Lifecycle: The 6 Stages of CTI
- ChatGPT Security in Business: Risks, Controls and Policies 2026
- What is a deepfake: business threats and defense in 2026
- Ransomware in Spain 2026: Landscape, Targeted Sectors and Response