NULLSTRATA — Cybersecurity blog https://nullstrata.info/en/blog/ Articles on cybersecurity for businesses: GDPR, Spain's ENS, NIS2, phishing and security audits. No hype, applicable today. en-US Sun, 01 Nov 2026 00:00:00 GMT Sun, 01 Nov 2026 00:00:00 GMT 1440 PHP and Brotli under active exploitation: October 2026 criticals https://nullstrata.info/en/blog/vulnerabilidades-octubre-2026/ https://nullstrata.info/en/blog/vulnerabilidades-octubre-2026/ Sun, 01 Nov 2026 00:00:00 GMT PHP (CVE-2026-109618) and Brotli (CVE-2026-111497) are in CISA's KEV catalogue with confirmed exploitation. Which versions to patch, in what order, and what to check after patching. Two-factor authentication (MFA): what it stops and how to roll it out https://nullstrata.info/en/blog/doble-factor-mfa/ https://nullstrata.info/en/blog/doble-factor-mfa/ Sun, 01 Nov 2026 00:00:00 GMT Passwords leak and get reused. Two-factor is the most cost-effective barrier an SME can put up, but only with the right second factor and a planned rollout. 3-2-1 backups: the one defence that actually stops ransomware https://nullstrata.info/en/blog/copias-de-seguridad-3-2-1/ https://nullstrata.info/en/blog/copias-de-seguridad-3-2-1/ Thu, 29 Oct 2026 00:00:00 GMT The 3-2-1 rule without jargon: three copies, two media, one off the network. And what almost nobody does: testing the restore and timing it for real. Ransomware: how SMEs get attacked and how to respond https://nullstrata.info/en/blog/ransomware-pymes/ https://nullstrata.info/en/blog/ransomware-pymes/ Thu, 15 Oct 2026 00:00:00 GMT An unprotected remote access, an attachment or an unpatched server: how attackers get in, why paying almost never works and what to do step by step. Your domain is being spoofed: SPF, DKIM and DMARC without the jargon https://nullstrata.info/en/blog/suplantacion-dominio-dmarc/ https://nullstrata.info/en/blog/suplantacion-dominio-dmarc/ Wed, 14 Oct 2026 00:00:00 GMT Anyone can send emails in your domain's name unless you protect it. SPF, DKIM and DMARC stop that: what they are, how to check them and how to roll them out safely. CEO fraud: when the person writing to you is not your boss https://nullstrata.info/en/blog/fraude-ceo-deepfakes/ https://nullstrata.info/en/blog/fraude-ceo-deepfakes/ Tue, 13 Oct 2026 00:00:00 GMT Urgency, secrecy and a transfer: CEO fraud is growing with AI-cloned voice and video. How to spot it and which protocol stops it. Five critical vulnerabilities still being exploited (and what they teach your SME) https://nullstrata.info/en/blog/vulnerabilidades-criticas-pymes/ https://nullstrata.info/en/blog/vulnerabilidades-criticas-pymes/ Sun, 11 Oct 2026 00:00:00 GMT Log4Shell, MOVEit, Citrix Bleed, ScreenConnect and the XZ Utils backdoor: what they were, why attackers still exploit them and how to protect your business. Stolen credentials: the lesson from the Snowflake incident https://nullstrata.info/en/blog/credenciales-robadas/ https://nullstrata.info/en/blog/credenciales-robadas/ Sun, 04 Oct 2026 00:00:00 GMT In 2024, around 165 organisations had cloud data compromised without the platform being hacked: stolen credentials. What happened and how to prevent it in your business. NIS2 for SMEs: what it requires and how to prepare https://nullstrata.info/en/blog/nis2-pymes/ https://nullstrata.info/en/blog/nis2-pymes/ Sun, 27 Sep 2026 00:00:00 GMT The NIS2 directive and its transposition in Spain: who it affects, what duties it imposes and which technical steps you can take now to comply. National Security Scheme (ENS) for SMEs: practical guide https://nullstrata.info/en/blog/ens-pymes/ https://nullstrata.info/en/blog/ens-pymes/ Tue, 01 Sep 2026 00:00:00 GMT When ENS applies to your business, what Annex II measures you can implement today, and how to prepare for a certification audit. Targeted phishing against employees: how to spot it and what to do https://nullstrata.info/en/blog/phishing-empleados/ https://nullstrata.info/en/blog/phishing-empleados/ Tue, 11 Aug 2026 00:00:00 GMT Red flags in phishing emails, what to do if someone clicked by mistake, and continuous training as the best defense. GDPR for small businesses: a no-jargon practical guide https://nullstrata.info/en/blog/rgpd-pymes/ https://nullstrata.info/en/blog/rgpd-pymes/ Tue, 14 Jul 2026 00:00:00 GMT Everything you need to know about data protection applied to your SME, without unnecessary jargon.