News · Defentria
What's happening in cybersecurity, explained for companies without an IT department: what happened, whether it affects you and what to do this week.
Top story
AI and cybersecurity
Google documents a case in which a single attacker used AI to build an automated credential-theft campaign in under six hours. What's new isn't the technique but the speed and scale — and that changes how much time any company has to react.
· 3 min read
Read the story
Phishing and fraud
An active email and SMS campaign is impersonating the DGT, Spain's traffic authority, to collect non-existent fines and steal card details. INCIBE has rated it as high importance. If your company has vehicles or handles traffic paperwork, this is exactly the kind of message that can slip into the routine.
· 3 min read
Vulnerabilities
CISA has added a FortiOS flaw that Fortinet fixed in January to its catalogue of exploited vulnerabilities. According to SOCRadar, it has been used since July to install PivotC2, a backdoor on the firewall itself. If your company has a FortiGate, the question is simple: is it up to date?
· 3 min read
We start from primary sources —INCIBE, CERTs, official bodies, vendors— and always link to them. We separate what's confirmed from what isn't known yet, and we don't publish a story unless we can answer one concrete question: what should a small company do about it?
We don't compete with the media on speed. If nothing relevant to an SME happens in a given week, we don't publish. About us.