Certighost and the PKI Blind Spot: Hardening AD CS in Your Servers
Why the certificate authority became the quietest way into your networkFor years, Active Directory Certificate Services sat in the corner of most Wind...
Cybersecurity
Cybersecurity
System protection, vulnerabilities and incident prevention.
Fail2ban at scale: centralised IP blocking for your servers
The problem with treating each server as an islandMost small and mid-sized organisations in Catalonia run more than one machine. A web front end, a da...
Abuse Shield: Centralised Server Protection for SMEs
Why server security is no longer a one-person jobSmall and medium-sized businesses in Catalonia and across Spain are running more internet-facing infr...
Rank Math SEO PRO 3.0.123: critical supply-chain compromise
What happened and who is affectedRank Math SEO PRO for WordPress has been caught up in a supply-chain compromise tracked as CVE-2026-111862 and rated...
ProFTPD 1.3.5: critical CVE-2015-3306 now exploited
What it is and who is affectedCVE-2015-3306 is an improper access control flaw (CWE-284) in ProFTPD, tracked by the NVD as affecting ProFTPD 1.3.5 thr...
ONLYOFFICE Docs: CVE-2021-3199 path traversal under active attack
What it is and who is affectedCVE-2021-3199 is a path traversal flaw (CWE-22) in ONLYOFFICE Docs, the self-hosted document suite many organisations ru...
Server Security Beyond Phishing: Blocking Malicious IPs at the Edge
Phishing has changed, and your perimeter should tooFor years, security awareness training relied on a handful of visible tells: clumsy grammar, an odd...
CVE-2023-22894 in Strapi: patch now as attacks are confirmed
What CVE-2023-22894 is and who is affectedCVE-2023-22894 is a cleartext storage of sensitive information vulnerability (CWE-312) in Strapi, the open-s...
Apache Struts CVE-2016-3081: command injection under attack
What it is and who is affectedCVE-2016-3081 is a command injection flaw in Apache Struts, catalogued by NIST as CWE-77. According to the National Vuln...
Server Security Beyond the Endpoint: Centralised IP Reputation
Defending servers one by one is a losing habitMost organisations with their own infrastructure have a familiar story. A server gets hammered by SSH br...