Insights

Insights

Analysis on cybersecurity, artificial intelligence and risk governance for boards and executives.

Critical infrastructure

The Camembert Didn't Melt on Its Own

A critical infrastructure cyberattack heated the fridges of hundreds of French supermarkets. Why Spain is already on the list and what NIS2 demands.

· 4 min read
Training

Back to School (Cybersecurity Edition)

Three ways to get up to speed with cybersecurity training this year: a jargon-free course for executives and two master's degrees, on campus and online.

· 2 min read
Hacktivism

The Story of the Little Hacktivist

A Correos phishing scam, the fraudster's own webshell and a hacktivist who switched it off. Why hacking back isn't legal, however fair it may seem.

· 3 min read
Cyberwarfare

Echoes of Cyberwar

NIS2, fines for executives, NoName057(16) and Z Pentest Alliance: a cyberwar 4,000 km away can leave a Spanish company dead in the water.

· 3 min read
Online fraud

New Year's Cyber Resolutions

Online fraud will remain one of the most reported crimes. Tips to start the year: common sense, INCIBE's 017, secure payments and two-factor auth.

· 2 min read
Geopolitics

Hacking Venezuela's Elections

Indra, Smartmatic, ExClé and CANTV: a look at the tech behind the Venezuela election hack claims, and why slowing the tally sheets changes no votes.

· 6 min read
Future of work

Remote Work Is Dead

Sam Altman, Elon Musk and the return to the office versus the Stanford and Pittsburgh studies: why I think we still need to adapt to remote work.

· 3 min read
Espionage

Pegasus, the Best and Only Spyware

Pegasus is not the only one: FinFisher, HackingTeam, Predator or Cytrox. A look at the European spyware business, zero-days and spying through ads.

· 3 min read
Artificial intelligence

Barefaced Scams

From the 24 million lost on a video call to sextortion and propaganda: how criminals use deepfake technology and what we can do about it.

· 4 min read
Artificial intelligence

With Great Power Comes Great Responsibility

6% of employees paste sensitive data into ChatGPT. Samsung, Apple and banks restrict it. The risks of generative AI in business and the OWASP LLM Top 10.

· 3 min read