Pablo Vera

More Cyber Physical !! #cyberinsurance On July 1, 2025, Spanish food company Hero España experienced a cyberattack that temporarily halted operations at its key production facility in Alcantarilla, Murcia. The company swiftly implemented a controlled shutdown of its IT systems to contain the threat and protect sensitive data. Cybersecurity and forensic experts are currently investigating the origin of the breach and working on recovery procedures.  This incident underscores the growing vulnerability of the food industry to cyber threats. It highlights the necessity for robust cybersecurity measures to safeguard critical infrastructure and maintain business continuity. As cyberattacks become increasingly sophisticated, organizations must remain vigilant and proactive in their defense strategies. Read more: https://lnkd.in/eCTeFU_n #CyberSecurity #CyberAttack #BusinessContinuity #Spain #FoodIndustry #InfoSec

10

I am excited to announce that Semperis is partnering with ADAPTIT S.A. to strengthen hybrid identity security across #Greece. 🇬🇷 Together, we’re empowering organizations across key sectors—including telecom, financial services, transportation, utilities, and retail—to strengthen their identity infrastructure and safeguard critical systems like Microsoft Active Directory and Entra ID against an increasingly sophisticated threat landscape. Greece represents a strategic opportunity for Semperis: a green, high-potential market where #awareness around identity security is quickly accelerating. With ADAPTIT as our trusted local #partner, we’re well-positioned to deliver real impact across the region. I’m also happy to share that Ray Mills Moreno who has been successfully leading our efforts in #Spain, will now also be responsible for the Greek market. Ray reports into me and brings valuable regional insight and momentum to this new chapter. A very special thank you to our Channel Director for Southern Europe, Santiago T., who introduced us to the amazing team at ADAPTIT and played a key role in bringing this partnership to life. 🙌 Hybrid identity is the backbone of modern security—and we’re here to help organizations protect it. #Semperis #ADAPTIT #IdentitySecurity #CyberResilience #ActiveDirectory #EntraID #SouthernEurope #Greece #StrategicGrowth #Partnership #Leadership

11

525+ sites. One secure solution. 🔒 Alcampo, one of Spain’s top retailers, turned to Fortinet Secure SD-Branch to unify security and networking. The result? 👉 Centralized visibility, simplified operations, and 30% savings in both time and costs. 📚 Read the full story: https://ftnt.net/6041AhOkV

4

The public sector in countries like Italy, Spain and Portugal is facing an escalating cyber crisis, and the challenge is amplified by their complex organizational structures. It's not just a global trend, it's a critical local reality. According to the latest DBIR 2025 data, ransomware is rampant, involving 30% of public sector breaches. Local governments from regional councils to smaller municipal bodies are frequent and high-value targets. Why? The critical services and sensitive citizen data held by these entities make the impact of an attack severe, lucrative for criminals, and devastating for the public. The Complex Vulnerability of Public Administration Public sector organizations in Southern Europe face unique and compounded challenges that leave their #ActiveDirectory systems , the digital keys to the kingdom—alarmingly exposed: 🏛️ Legacy Technologies: Outdated IT infrastructure struggles to keep pace with modern threat vectors. 💻 Remote Infrastructures: The shift to remote and hybrid work has expanded the attack surface. 🧱 Siloed IT & Security Teams: Lack of coordination hinders a unified defense strategy. 💰 Limited Budget & Resources: Insufficient funding for specialized cybersecurity tools and expert staff. CISO Reality: The Active Directory Downtime Crisis For CISOs, the biggest nightmare is not the initial breach, it's the crippling AD recovery time, often measured in days or even weeks. In the public sector, this means a devastating loss of citizen trust and massive disruption to essential services. The Semperis CISO Value Proposition: ✅Mitigate the #1 Risk: Active Directory is involved in 9 out of 10 cyberattacks. We stop attackers who target AD with specialized detection and automated remediation. ✅Cut Downtime from Weeks to Minutes: Traditional system-state backups risk malware re-infection. Our purpose-built AD Forest Recovery solution automates recovery and ensures a malware-free return to operations, drastically reducing the Mean Time To Recovery (MTTR) from days to minutes. ✅Achieve Compliance/Resilience: Move beyond basic compliance checkboxes to true cyber resilience. We help you proactively identify Indicators of Exposure (IOEs) and Indicators of Compromise (IOCs) within AD to harden your environment before the worst happens. Semperis enables public sector organizations, including schools and government agencies in complex environments to secure their most vital identity infrastructure and ensure maximum service uptime. Are your AD recovery plans tested and ready to cut downtime from days to minutes? #Cybersecurity #CISO #PublicSector #Ransomware #ItalyPA #SpainTech #ActiveDirectory #Semperis #CyberResilience

15

1 comentario

Great write up Robert Alexander! Cert management is a big thorn for most large enterprises and there no longer can afford to be uncertainty around PKI.

6

AI tools are everywhere - but their rapid adoption brings hidden security and privacy risks, from unpredictable outputs to exposure of sensitive data. Proofpoint's Fernando Anaya explains why traditional security must evolve alongside large language models.

2

For a while, the conversation was “how do we cope with 200-day TLS certificates?” Now, the real question is: are you ready for 100-day certificates? Why the urgency? From 15 March 2026, publicly trusted TLS/SSL certs drop to a 200-day maximum. That shift is important, but it also forces everyone to prepare for the next milestone. From 15 March 2027, the maximum drops again — to 100 days. At 100 days, you’re effectively moving to a quarterly renewal cadence. For many organisations that means renewing public certs roughly 4 times per year across production estates — and doing it with shorter DCV/data reuse windows at the same time. If you’re still managing certificates with spreadsheets, inbox approvals, and manual installs, the risk profile changes fast: * Higher probability of expiry-driven outages * More operational load on already-stretched teams * Inconsistent policy enforcement and missed renewals across business units * Certificate sprawl becomes unmanageable (and invisible) before you know it This is exactly why Certificate Lifecycle Management can’t be a “later” project. Platforms like Sectigo Certificate Manager (SCM) help you: *Discover and inventory certificates (public + private) across your environment *Automate renewal + deployment through integrations and workflows *Reduce expiry risk with monitoring, governance, and reporting *Standardise processes so shorter lifetimes don’t translate into higher downtime Act now while 398 days is still the norm — because by the time 100-day certs arrive, playing catch-up will be expensive. #PKI #TLS #SSL #CertificateManagement #CLM #CertificateLifecycleManagement #CyberSecurity #ITOperations #DevSecOps #Automation #ACME #DCV #ZeroTrust #RiskManagement #Sectigo #SectigoSCM

6

The rise in the use of artificial intelligence means companies need to protect their employees from so-called prompt engineering, says Sumit Dhawan , CEO of Proofpoint . “Phishing emails, fraud—those are all forms of social engineering, where someone is attacked so they’ll do something urgently by taking advantage of trusted communication. With AI, that’s called prompt engineering, which is using AI to get it to do something with a certain degree of trust and urgency on the part of someone who has control over it,” Dhawan explains. Read more in this Excélsior/ Dinero en Imagen story. #Proofpoint #AI #HumanCentricSecurity #AgenticAIWorkspace

12

"For many businesses, the cloud is becoming a patchwork of blind spots, and in that darkness, risks multiply", Francisco Ramírez de Arellano, Senior Vice President, Tenable Latin America and Caribbean http://ow.ly/92kn106ijBP

1

The introduction of the NIS2 Directive marks a pivotal evolution in Europe’s cybersecurity landscape.🇪🇺 At ExtraHop, we recognize that compliance alone is not enough‼️ True resilience comes from visibility, accountability, and continuous improvement. Our team provides an excellent overview of how deep network visibility enables organizations to meet these new standards with confidence. #CyberSecurity #NIS2 #Leadership #Governance #ExtraHop #CyberResilience

2

Big day for Palo Alto Networks! We've announced our entry into a definitive agreement to acquire the leading identity security platform in CyberArk. Why now? The identity category is at an inflection point. The future is securing every identity: human & machine. By combining our strengths, we're poised to deliver the integrated security solutions our customers need to secure their digital future. Thrilled to be part of a team that is not just participating in the future, but building it. See important information: https://bit.ly/45czf28  And get the details from our press release: https://bit.ly/4kZc01b

81

2 comentarios

Great reading about Zero-Day vulnerabilities and latest breach in Sweden where 200 municipalities were impacted. Learn why NDR is must have and why EDR is not enough.

3

Fortinet Security Day may be over, but the energy and momentum continue. 🎉 This year, we welcomed 1,100 participants in Athens to exchange knowledge, strategies, and innovation in #cybersecurity. The event brought together leaders across industries through: 💡 4 interactive workshop tracks 🎤 12 expert presentations 🤝 1 strategic panel discussion 🖥️ 4 Fortinet solution demo booths 🌐 21 sponsors & 5 event supporters Key insights were shared on accelerating technology adoption, navigating the Quantum–AI cybersecurity era, securing #OT cyber-physical systems, and strengthening resilience from code to cloud. Admiral James Stavridis, USN (Ret.), also provided a geopolitical and investment outlook, offering valuable context for decision-makers. The day concluded with our Partner Awards Session and an exclusive C-level dinner with 120 CEOs, CIOs, and CISOs, where Stephane Monboisset presented #Fortinet’s vision on #SASE. A sincere thank you to our customers, partners, sponsors, and Fortinet team for making this event a success. Together, we continue to drive innovation and resilience in the cybersecurity landscape. #FortinetSecurityDay

17

Qualys is a cybersecurity company that provides cloud-based security and compliance solutions, helping businesses identify, assess, and manage cyber risks across their IT assets and cloud environments. They offer a suite of tools for vulnerability management, continuous monitoring, cloud security, web application scanning, and more. Here's a more detailed look at what Qualys does: Vulnerability Management: Qualys helps businesses identify, assess, and prioritize vulnerabilities in their IT assets, including servers, network devices, and cloud workloads. Continuous Monitoring: Qualys monitors IT assets for changes and suspicious activity, alerting users to potential threats and breaches. Cloud Security: Qualys provides solutions for securing cloud environments, including container security, cloud workload protection, and SaaS security posture management. Web Application Security: Qualys offers tools for scanning web applications for vulnerabilities, such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). Compliance: Qualys helps organizations meet compliance requirements by providing tools for vulnerability management, configuration auditing, and security policy enforcement. Asset Management: Qualys helps businesses identify and track their IT assets, including those in cloud environments, to improve security visibility. Remediation: Qualys provides guidance and workflows for remediating vulnerabilities and misconfigurations, helping businesses address identified security risks.

2