Banner «Featured news: we have updated our blog design»

This summer we dove headfirst into the pool and completely revamped our corporate blog design! Now more modern and versatile, you can easily subscribe to stay up to date with all our news!

We are introducing new features, so we would like to apologize in advance if you receive any unwanted emails or notifications; we continue working to improve this and other aspects.

What's New

Code Review: Bandit vs Sepgrem vs SonarQube

In this article, we will compare three popular code auditing tools with manual analysis by an auditor. Highlighting their differences and similarities, and analyzing why it is beneficial to use more than one of these tools in a software project.

Read more

PCI DSS v4 requires merchants with SAQ-A to perform quarterly scans.
With the new version of PCI DSS v4.0, some changes that perhaps have not been discussed enough have occurred with a fairly large impact, not so much because of their depth (due to having to implement that control, which could be considered not very complex), but rather because of the breadth of the impact of that control on a huge set of companies globally.

Read more

C1b3rwall Chronicle

For another year, the C1b3rWall Digital Security and Cyberintelligence Congress has been held between June 18 and 20 at the National Police School in Ávila.

During this event, key topics related to cybersecurity were addressed, including OSINT (Open Source Intelligence), Virtual HUMINT (Virtual Human Intelligence), and OPSEC (Operational Security).

Read more

PCI DSS is updated to version 4.0.1

On March 31, 2022, one of the most anticipated updates to the Payment Card Industry Data Security Standard (PCI DSS) was released, version 4.0, which brought us many new features and updates to align with new technologies; its application began to become mandatory (at least some requirements) starting March 31, 2024. On June 11, 2024, a new version, 4.0.1, has been released; this new version is a minor update that has some changes stemming from industry feedback and includes the following changes.

Read more

Most Read

Malicious code is injected into popular WordPress plugins

The main goal of this code is the creation of fraudulent administrator accounts, allowing attackers to perform modified actions within the affected websites.

Read more

A Windows vulnerability allows malware to be installed via WiFi without user interaction

The discovery has put cybersecurity experts on alert. Classified as “Important” in terms of severity, this vulnerability allows attackers to install malware on Windows devices simply by being within the range of a WiFi network to which the device is connected.

Read more

Ticketmaster suffers a massive hack: personal data of over 500 million users exposed

Ticketmaster suffers a hack that exposes the data of over 500 million users on the dark web.

Read more

The world's largest cybercriminal botnet has been dismantled after ten years of scams

More than 19 million infected IP addresses in 200 countries and millions of euros in profit thanks to an international botnet. The world's largest cybercriminal botnet has been dismantled after ten years of scams.

Read more

Upcoming Courses

Calendar with September 16: PCIP course, 16-17/09 (virtual, ES)
Calendar with September 16: PCI DSS Standard training, 16-19/09 (virtual, ES)
Calendar with September 23: CISSP course, from 23/09 to 17/10 (virtual, ES)
Calendar with September 30: CCSP course, from 30/09 to 11/10 (virtual, CO)

← Back to Newsletters