WooCommerce Plugin Flaw: Web Shells and Server Defence
A single outdated plugin, a whole server exposedMost WordPress compromises we investigate at ALMC.es do not start with a sophisticated zero-day. They...
Blog Brain
Blog Brain
Browse public articles by editorial status or type. This classification complements topic categories.
Email AI for Customer Service Teams in Catalonia
Why inbox management is still the bottleneck for Catalan SMEsIn Barcelona, Lleida, Tarragona and Girona, customer service teams face the same daily re...
OAuth Token Leak: Supply Chain Lessons for Server Security
When a browser extension becomes the weakest linkIn September 2026, security researchers uncovered a supply chain incident involving a popular browser...
Browser Extensions Are a Supply Chain Risk: Lessons from the Twitch OAuth Leak
When a browser add-on becomes the weakest linkBrowser extensions are convenient, but they also run with extensive privileges inside the browser. A rec...
Browser Extension Leaks OAuth Tokens: Lessons for Server Security
When a Browser Extension Becomes a Supply Chain RiskA popular Twitch viewing extension, distributed through the official Chrome and Firefox add-on sto...
Artifactory Under Siege: Lessons for Server Security
When a Repository Becomes a BackdoorIn the summer of 2026, a series of intrusions against self-hosted JFrog Artifactory instances demonstrated how qui...
Supply Chain Phishing: When Your Email Provider Becomes the Attack Vector
The Trezor incident: a wake-up call for third-party riskWhen a hardware wallet manufacturer like Trezor discloses that attackers breached an external...
AI Email Management: Turn Your Inbox into a Productivity Hub
Why Your Inbox Feels Like a BattlegroundIf you run a small business or manage customer support in Spain, you know the feeling: every morning brings a...
How to Harden Your Servers with Fail2ban and IP Reputation Feeds
Why Your Servers Need More Than a FirewallEvery day, servers across Spain and beyond face a constant barrage of automated attacks. From SSH brute-forc...
Critical libssh2 flaw: urgent patch for SSH servers
Why this libssh2 vulnerability demands your attentionIf your organisation runs Linux servers, cloud instances, or network appliances, chances are you...