josecurity

OAuth 2.0: why you shouldn't sign in with Google or Facebook

Sun, 11 Oct 2026 10:30:00 +0200

This article was automatically translated by an AI tool from the original Spanish version, and may contain errors.

You’ve seen it a thousand times. You land on a new website, it asks you to create an account and, right below the form, there’s a button promising to save you the hassle: «Sign in with Google», «Continue with Facebook». One click and you’re in. No password to invent, no email to confirm, no waiting. It’s so convenient that we barely think about it. And that’s exactly why it’s worth pausing for a minute to understand what we’re accepting when we click it.

Your password has been compromised: why only MFA truly protects you

Tue, 06 Oct 2026 07:30:00 +0000

This article was automatically translated by an AI tool from the original Spanish version, and may contain errors.

We already covered in Social Engineering: tailgating, baiting and pretexting and Scareware, shoulder surfing, dumpster diving and phishing that the most effective attack does not need to burrow into your software: it exploits the person. And, as a matter of fact, it probably does not need to target you at all. The truth is duller and far more common: your most precious personal data ends up exposed on the Internet not because of you, but because of someone else.

Scareware, Shoulder Surfing, Dumpster Diving and Phishing: The Bestiary of Social Engineering

Tue, 29 Sep 2026 07:30:00 +0000

In the article Social engineering: tailgating, baiting and pretexting we already went through many of the techniques attackers use against you: tailgating, baiting, pretexting, vishing and smishing. In this post I continue walking through the bestiary of social engineering: scareware, shoulder surfing (over-the-shoulder spying), dumpster diving (rummaging in the bin) and, to wrap up, phishing in depth, including its most dangerous variant — spear phishing.

As usual, none of these techniques needs advanced software or any programming knowledge. They need exactly one thing: a victim who doesn’t suspect a thing.

How Hackers Try to Attack Your Browser (and How to Defend It)

Thu, 24 Sep 2026 07:30:00 +0000

When a web page is not properly configured, the session cookie the page hands you can fall into a hacker’s hands. If an attacker manages to steal that session cookie, they can impersonate your identity without you ever knowing: they log into your accounts and act as if they were you.

A session cookie is a small piece of data that the website you visit issues itself the moment you start a session, and your browser stores it in its local cookie jar, tied to that domain. It exists so the server recognises that you are already logged in and does not ask for your password again. They are usually short-lived: they expire when you log out or close the browser, although a website can also give each cookie its own expiry date.

If You're Still Not Using a Password Manager, What Are You Waiting For?

Wed, 23 Sep 2026 00:00:00 +0000

If I asked you how many different passwords you have… I wouldn’t believe you. And if you told me you use the same one for your email, your bank and your online shop, or that you keep them all in a drawer note or a sticky note on the monitor, I’d understand perfectly. Human memory wasn’t made for a hundred secrets — and that habit (reuse everything, or write it all down) is exactly what attackers exploit.

Social Engineering: tailgating, baiting, pretexting

Sun, 20 Sep 2026 12:00:00 +0000

In cyberspace, not every danger looks the way we imagine. It is not always a piece of malware lurking without you noticing, nor a hacker breaking through our defenses from the other side of the world. There is another family of attacks that does not exploit a flaw in software or configuration: it exploits the human nature of its victims.

It attacks your naivety, your kindness, your inability to say no to someone who asks for help. It attacks your desire to show off your knowledge when someone asks about something you happen to know. These are noble qualities in everyday life, and precisely for that reason they are a treasure in the hands of an attacker.

Facebook and Instagram: your privacy is their product — and they'll prove it

Sat, 19 Sep 2026 12:00:00 +0000

Facebook and Instagram aren’t just hugely popular social apps: they’ve also built up a questionable reputation that has earned them sanctions on both sides of the Atlantic. One of the loudest landed in 2023, when the Irish regulator fined Meta EUR 1.2 billion — then the largest European fine on record — for breaking, once again, the rules that protect European citizens’ privacy.

Throughout its history —first as Facebook, then as Meta in a very visible attempt to scrub its image— the company has done everything in its power, including illegal practices, including collecting information by whatever means necessary, to profit at its users’ expense: selling data, shaping opinions, spreading fake news, and transferring European data to US security agencies.

Affiliate disclosure

Sat, 05 Sep 2026 00:00:00 +0000

Some links on this blog are affiliate links. This page explains which ones, with whom, and what I get, because you have a right to know that before you click.

What an affiliate link is

It is a link that carries an identifier of mine. If you go through it and buy the service, the company credits that sign-up to me and gives me something in return. It does not cost you more: the price is the same as if you had arrived on your own, and in some cases it is better, because the link carries a discount.

Prompt engineering: how to get the most out of AI

Sat, 09 May 2026 12:30:00 +0000

This is the second article I dedicate to prompt engineering: the art of knowing how to communicate with artificial intelligence (AI) to obtain the best possible results. This time, however, we will leave the basics behind to delve into the architecture of its synthetic reasoning. The goal is for you to substantially improve your efficiency, while we explore new ways to automate tasks in both personal and business environments.

To understand how modern AI systems work, it is useful to illustrate it with examples that make it easier to understand, so the first thing we are going to do is to come up with an example in which we must first establish a frame of reference. Let’s imagine that we are a Director of Compliance and Technology Strategy in a global consulting firm.

State hackers: what no one tells you about offensive cybersecurity

Sun, 03 May 2026 12:12:19 +0000

A few days ago, a friend confessed to me that he thought all hackers were the same: hooded people who, for money, ego or ideals, sneak into other people’s systems from a dark room full of green screens. The image is very cinematic, I don’t deny it. It’s also quite comfortable, because it allows us to think that the world of hacking fits into a cartoon. But no: the reality is much more complex and, above all, much more disturbing.

Autonomous driving: Europe one step closer to approving Tesla's FSD, but with false promises

Sat, 18 Apr 2026 12:15:16 +0000

.

This time I am going to talk about Tesla and its wonderful autonomous driving software, which is constantly evolving.

As a Tesla and electric mobility enthusiast who has closely followed every advance of the company since about 2013, today I wanted to share with you the news of a crucial upcoming event: the possible approval of **Tesla’**s Full Self-Driving(FSD) software in Europe.

This is not just another rumor; it is the result of a decade of technological evolution, promises and, it must also be said, several disappointments due to continuous delays in its implementation.

The danger of dating apps

Sun, 01 Mar 2026 11:17:58 +0000

The search for human connection has moved, almost unnoticed, from bars and dinners with friends to an interface designed to keep you from closing it. In that leap there is convenience, yes, but also a quiet change: what was once an unpredictable encounter is now a continuous stream of stimuli optimized for retention, dopamine andengagement.

Tinder, Badoo, Facebook Matches, Bumble and company are not just dating sites: they are giant repositories of desires, routines, insecurities, schedules, photos, geolocation and micro-details that, together, draw a perfect map for a social engineering attack. And when we talk about attacks, we’re no longer talking about four improvising scammers; we’re talking about entire industries that have learned to monetize loneliness with cool efficiency.

OpenClaw: Science fiction no longer starts tomorrow and may get out of hand

Sun, 01 Feb 2026 13:17:18 +0000

We are not living through a technological revolution. We are living through something much stranger: the normalization of the unthinkable.

If you’ve ever wondered what it’s like to live in the prologue of an Isaac Asimov novel, stop looking in the science fiction section. No need to look into the future or imagine far-off scenarios, just open the GitHub software repository and take a closer look at what’s already happening.

Invisible threads: the manipulation that shapes our reality

Thu, 08 Jan 2026 17:30:12 +0000

Imagine for a moment that you are looking at a photograph that seems to leave no room for doubt but in reality you are being targeted by the concept of media framing and manipulation.

Let’s see it with the following real photograph taken by photographer Ituassu for the Associated Press (AP) news agency during the Iraq war in 2003.

The original image (center) shows a U.S. soldier pointing a gun at an Iraqi prisoner while another soldier gives him water. The sides show how, by cropping the photo, an image of pure cruelty (left) or pure benevolence (right) can be projected.

Deep Fakes: The Digital Clone That Steals Your Identity and Money | Avoid Being the Next Victim

Sun, 30 Nov 2025 20:10:00 +0000

I’m sure you’ve heard the term**“Deep Fake**” in your soup lately. It has become the buzzword, but trust me: behind this buzzword is much more than just a technological curiosity. In this article, we’re going to gut together what they really are, how these tools - which seem like black magic - are changing the rules of the game and, most importantly, how to avoid being spoofed. Make yourself comfortable, and let’s get started.

Don't even think of continuing to use your PC with Windows 10. Let's see alternatives

Tue, 21 Oct 2025 19:55:04 +0000

If you’re reading this from a Windows 10 computer, we have an urgent conversation to have, so pay attention dear reader.

October 10, 2025 was not just another date on the calendar. It was the day Microsoft stopped providing support and security updates for Windows 10.

It is, in a nutshell, the expiration date of your system’s security. From now on, you are at risk.

What will happen from now on?

[Part 3/3] RRSS: Algorithmic manipulation, social impacts and how to take back control

Tue, 14 Oct 2025 07:30:04 +0000

As a brief summary of the two previous articles onsocial networks: in art. 1/3 we looked at the business model and why leaks and scraping make “private” fragile; in art. 2/3 we reviewed scams, spear phishing, the dangers of LinkedIn, doxing, metadata and digital hygiene practices.

In this third and final article of the 3/3 series: we focus on algorithmic manipulation, synthetic users, social/psychological impact, cultural trends, regulation and a practical kit for your day-to-day life.

[Part 2/3] Social networks: scams, social engineering and physical hazards

Tue, 07 Oct 2025 07:30:27 +0000

In the first [1/3 ] article of this series on the dangers and abuses of social media, we saw that the business of social networks is based on tracking and massive data collection, that leaks and scraping turn “private” into public, and that 2FA and common sense are basic.

In this article 2 of 3: we focus on scams, spear phishing, LinkedIn, doxing, metadata and fake profiles.

Social networks are a real paradise for cybercriminals because of the feeling of anonymity and the ease of creating accounts without real verification.

[Part 1/3] How social networks trade your data: the price of your privacy for your daily connection

Sat, 04 Oct 2025 18:19:09 +0000

Social networks have become the platforms par excellence that occupy most of today’s society’s attention. What started out as simple applications for socializing now offer a wide range of options to attract as many users as possible.

These platforms are used to stay in constant contact with friends and family, watch videos, read news, flirt, search for jobs or play online games with strangers.

With so much variety, it’s hard to imagine anyone not using them. Over the years, social networks have evolved from spaces for sharing photos and messages to true communication, entertainment and even e-commerce tools, with integrated stores and live broadcasts.

Practical guide: the best applications to protect your privacy and online security

Sat, 27 Sep 2025 14:25:43 +0000

If there’s one thing I’ve learned after years of diving into the world of cybersecurity, it’s that privacy is not a luxury, it’s a necessity.

Surveillance and mass data tracking are the norm in the digital age, but fortunately, there are robust alternatives to the conventional services we all use.

This guide, inspired by the excellent work of @StarkPrivacy on X (which I recommend following), is intended to be a practical and up-to-date roadmap.

How well do you protect your accounts? You should use password managers and enable multifactor authentication.

Sat, 20 Sep 2025 12:31:31 +0000

Authentication

Let’s start by defining an important concept: authentication is the process of verifying that an individual, entity or application is who it claims to be. Let’s say it is the mechanism that responds to a request for identification with a set of credentials that only the legitimate user should know.

The credentials provided by the user to identify himself are compared with those stored in a file or database where the previously authorized user’s information is stored.

European technological independence and the transition to free software

Sun, 06 Jul 2025 12:18:11 +0000

The time for European digital sovereignty has arrived

For decades, Brussels was aware that relying on U.S. technology was a strategic and economic risk, but there were always excuses to delay the change. Today, that prudence has become untenable: all it takes is a tweet from Donald Trump, the threat to “shut down” Starlink or a simple Microsoft bulletin to remind us who has the upper hand and the switch on our digital infrastructure.

Ransomware: how to react and mitigate the impact of this cyberthreat

Sun, 29 Jun 2025 12:08:03 +0000

By now it is very likely that the vast majority of readers have already heard about or even suffered a ransomware attack , which, as we explained in a previous article, is just another type of malware.

What is ransomware and how does it work?

The ransomware mainly focuses on encrypting the victim’s files - photos, videos, documents, databases - and then displays a ransom note on screen or in a text file for the victim to read.

Instant messaging: iMessage, Facebook, Instagram messenger and the big lie of Telegram

Sat, 21 Jun 2025 13:44:19 +0000

Remember when Pavel Durov, the “rebel” founder of Telegram, fled Russia in 2014 “persecuted” for refusing to hand over user data to the Russian government?

An epic narrative that sold the app as a bastion of privacy in the face of oppressive governments.

Today, with some 900 million users, Telegram is one of the favorite alternatives to WhatsApp? along with Signal, but leaked documents and forensic analysis reveal that this battle against the Russian government was pure theater.

IA + loss of employment = Universal Basic Income

Sat, 07 Jun 2025 21:05:35 +0000

*First of all, I would like to beg my dear reader, as I am sure he always does, to read this article with an open mind. Please leave your political ideology behind for a moment and try to analyze with me the situation at hand. Together we all need to find an urgent solution to the unemployment problem before it is too late. *

—

Let’s start!…

Get ready to see factories operating at full capacity without lights on, supermarkets where there are no more cashiers to serve your shopping, robots playing the role of judges or surgeons, cabs that move autonomously, drones and robots replacing the military and law enforcement agencies, etc.; little by little, most of the jobs that people do today will end up in the hands of automation.

Incognito mode does NOT protect your privacy [I explain why].

Sun, 01 Jun 2025 13:00:03 +0000

Using incognito mode doesn’t make you invisible or protect your privacy, so if you’re thinking of using it at work, get it out of your head.

Session replay tools such as FullStory, Hotjar or Microsoft Clarity record your every mouse movement, keystroke (even the ones you delete!) and the time you hesitate before closing a window.

These data are used for:

**Anticipate your steps. **Analytical platforms such as Mixpanel build true behavioral profiles based on navigation patterns.
Modulate your decisions. A/B testing frameworks - Optimizely, *Google Optimize -*alter colors, sizes or button positions to trigger impulse purchases.

A recent study (FullStory, 2023) concluded that 89% of web applications incorporate at least one session replay tool.

Practical guide to protect your email

Sat, 31 May 2025 12:34:38 +0000

Before we start, let me make something clear: in this blog, at least for the moment, you will not find sponsored recommendations or mentions for advertising purposes. The tools I share are the result of a personal selection, based on their real usefulness and suitability for most users. Whenever possible, I give priority to open source solutions, free and with the active support of a committed community.

That said, let’s start by mentioning that there are open source services like SimpleLogin that allow you to create email aliases to protect your real address and avoid spam.

Browser plugins and extensions: allies or Trojan horses? A risk that outweighs their usefulness

Sun, 25 May 2025 12:16:30 +0000

A plugin (also written plug-in) or an extension (in English add-on), although they are not the same thing, are often confused and used interchangeably to refer to programs that are installed in a browser to add some extra functionality.

Although colloquially we call them the same, plugins such as Java, Silverlight or Adobe Flash Player (now extinct) and extensions usually developed in JavaScript and XUL*(XML User Interface Language*) such as uBlock Origin work in a radically different way.

Nuclear Black Swans Is it worth the risk?

Sun, 25 May 2025 04:00:38 +0000

Just a few decades ago, advocating nuclear power seemed to be the ideal solution: clean, efficient and powerful.

But what happens when this so-called “clean energy” is confronted with extreme situations such as wars or natural disasters?

What happens then is what Nassim Nicholas Taleb called a “Black Swan”: Highly improbable events, but which when they occur have devastating consequences..

Ukraine today is a clear example of how these risks quickly turn into real nightmares.

The man who whispered to the AI. Learn Prompts (God mode)

Sat, 17 May 2025 21:03:39 +0000

In just two years we have gone from hearing many experts promise that we would have real artificial intelligence tools (AGI - Artificial General Intelligence) by the year 2030, to proving how wrong they were and presenting this technology several years as a reality of everyday use.

iA assistants such as ChatGPT, DeepSeek, Gemini, Perplexity, Claude, Copilot, Qwen, Llama or Grok are now on everyone’s lips and all of them are able to answer any query with unprecedented fluency and accuracy.

These are the secure browsers and settings that Google hates

Sat, 10 May 2025 21:12:04 +0000

With the rise of artificial intelligence (AI) tools such as ChatGPT, Gemini, Perplexity or DeepSeek, the way in which many users obtain information has been transformed: instead of going through the results of a traditional search engine, they ask the question directly to an assistant that returns immediate and comprehensive answers.

However, web browsers remain key parts of the digital ecosystem and will continue to be so.

In fact, the browsers themselves are adapting to this trend: the classic lists of links will give way to enriched results that will integrate, in a single block, the synthesis generated by AI together with explanations, images and videos.

Blessed European Union and its rules such as GDPR.

Sat, 03 May 2025 10:36:59 +0000

It’s sickening to admit, but the simple fact is that we live in a world where every digital step we take - from the telemetry of the operating system you use to the location you provide when you post a photo - becomes a bargaining chip for companies you don’t even know.

However, I will dedicate this article to applauding the work that Europe has been doing for years.

Breathe a sigh of relief because if you reside in the European Union(EU), that scenario is slowing down, and a lot, thanks to the General Data Protection Regulation (GDPRGeneral Data Protection Regulation).

Malware in Windows? Use SysInternals. Better than an antivirus

Mon, 21 Apr 2025 13:51:51 +0000

The ** SysInternals Suite** is a set of free tools originally created by the company of the same name, later acquired by Microsoft in 2006.

Since 2021, it has been available for free direct installation from the Microsoft Store (Windows Store) and, in corporate environments, is usually accessible via the standard network path \live.sysinternals.comtools.

This package includes more than 70 specialized utilities for diagnostics and maintenance of the Windows operating system.

Is your email a leak? Protect yourself from spam, phishing, tracking

Sun, 20 Apr 2025 14:21:08 +0000

Email: how spam, phishing and BEC continue to threaten your inbox (and what you can do about it)

As time went by, and although at the beginning most people did not pay much attention to the issue of security, or rather**“cybersecurity**”, it became clear that email was not free of problems: *malware, phishing, spear-phishing, *BEC(Business Email Compromise) and spam (also called “junk mail”).

In case you didn’t know, spam accounts for almost 85% of all emails sent worldwide.

Browsers: Protect your online privacy without getting paranoid (Part 2/2)

Mon, 14 Apr 2025 21:39:42 +0000

Continuing with the second part of the post “Browsers: Protect your online privacy without becoming paranoid (Part 1/2)” in this second edition we will continue to see more surreptitious techniques used by the corporations behind the websites to spy on us through our browser.

The compilation and subsequent processing of the data revealed by our browser will allow them to later identify us unequivocally among millions of people, creating precise profiles about our tastes and online habits, with the ultimate goal of selling our data to third parties who will exploit this information to target us with targeted advertising.

Signal Vs Threema Vs Briar Which is the most secure app?

Sat, 12 Apr 2025 13:22:46 +0000

Faced with the growing weariness and concern of many people about the constant surveillance exercised by large corporations and suspicious governments, which often resort to various excuses to demand the installation ofbackdoors in everyday applications, in order to further facilitate espionage, more and more people are deciding to prioritize their privacy and digital security by seeking safer applications away from the control of these actors.

In this context, many people have opted to migrate to instant messaging applications that offer high standards of cybersecurity and privacy, such as Threema, Signal or Briar.

Real encryption? The Silent Trap of Instant Messaging

Thu, 03 Apr 2025 19:44:20 +0000

When we talk about instant messaging we refer to the tools used to send text messages immediately through applications such as SMS, WhatsApp, iMessage, Threema, Telegram, Signal, Facebook Messenger, WeChat, Line, Snapchat, Discord, Google Hangouts, Viber, etc.

Although they initially began as simple ways to send short texts, today they allow sending all kinds of multimedia content (audio, video, documents, images), as well as making calls and videoconferences.

The convenience of using this type of applications to communicate in a fast and agile way has led most of the population -especially those under 35 or 40 years of age- to communicate almost exclusively through them, exchanging a large number of voice messages which, in practice, have displaced telephone calls, except in rare exceptions or cases of urgency.

Browsers: Protect your online privacy without getting paranoid (Part 1/2)

Sun, 23 Mar 2025 13:08:23 +0000

(Part 1 of 2)

As you all know, the first thing you need to be able to surf the Internet is a web browser. A browser (browser) is a software application used to display information stored on a web server.

The browser is often used in conjunction with a search engine(browser) that is used to search for information on the World Wide Web (WWW) or, in other words, to surf the Internet.

Should Europe ban Google? The search engine monopoly and its unseen victims

Sat, 22 Mar 2025 15:12:28 +0000

Imagine you open a restaurant in Madrid. You have exquisite dishes, fair prices and a terrace with incredible views. But there’s a problem: in order for customers to find you, you have to pay a toll to an American company. If you don’t, your business will be invisible, except to those who happen to pass by.

This is not fiction: it is the reality of SEO (“Search Engine Optimization”) and SEM (Search Engine Optimization). SEM (“Search Engine Marketing”) of Google, a system that has turned the Internet into a battlefield where only those who pay win.

Be wary of WhatsApp and learn how to secure the application

Tue, 18 Mar 2025 21:27:14 +0000

With about 2 billion active users, **WhatsApp **is the world’s leading application owned by the company Goal. And here you will forgive me, but I still like to call it Facebook because -even if a monkey wears silk, she stays a monkey-.

In other words, no matter how much they change the name of one of the companies with the worst reputation worldwide, we should all keep in mind that Meta is still the same old Facebook, with its lifelong questionable practices.

Lazy Beware! Protect your privacy by checking your software settings

Sun, 16 Mar 2025 12:50:17 +0000

Out of laziness or ignorance, most people give away their privacy and expose themselves to security risks on the Internet by not carefully checking the settings of their installed programs before they start using them.

You only have to take a look at the application store of the different operating systems (OS) to realize the immensity of apps -free and paid- that exist.

As explained in another article, you should avoid that Diogenes syndrome that leads you to the temptation of installing every free application that crosses your path, when you should try to limit yourself to installing only those that you are really going to use on a regular basis.

Do you use pirated software? Bad idea, so you can get hacked.

Sat, 15 Mar 2025 12:14:11 +0000

Pirated software 🏴‍☠️ accounts for about 40% of installed software in many developed countries, with this percentage estimated to be much higher in less developed countries.

The truth is that the trend of illegal or unlicensed software use is decreasing every year, although it still persists as a worldwide problem.

Most people tend to opt for pirated *software *(SW) for purely economic reasons.

However, the failure to take into account other compelling reasons means that many users end up installing programs that leave their devices in a highly vulnerable situation.

Malware: 16 cyber threats that can infect your device

Sun, 09 Mar 2025 15:02:15 +0000

Image created with MidJourney

In the previous article we introduced the difference between what is known as an antivirus (AV)and a complete security suite. The two types of techniques typically used by these anti-malware tools to detect infections were also explained.

Now it is time to delve deeper into the different types of malware that exist and, moreover, to start talking properly when we refer to them.

Next time you tell your computer friend that your device has a virus, perhaps you can be a little more precise and specify exactly what type of **malware **is affecting it.

How does an antivirus work?

Sat, 08 Mar 2025 21:03:54 +0000

**Antivirus (AV) **programs have evolved a lot since their origins. In the beginning, they were simple programs designed to detect viruses, hence their name.

However, over time, they have evolved into complete security suites, known as Endpoint Protection Platforms**(EPP**).

These new *suites *not only detect, isolate and remove malicious code with its antivirus engine, but also incorporate other advanced threat detection and prevention functionalities, such as:

protection against ransomware,
intrusion prevention systems*(HIPS*),
file encryption,
data loss prevention*(DLP*),
firewall,
detection of malicious websites and much more.

Despite this evolution, most people still call these security suites“antivirus”, even though **virus **detection represents only a small part of their functionality.

The 3 basic principles of cybersecurity. Non-negotiable

Sun, 16 Feb 2025 14:23:49 +0000

{%CAPTION%}

As I advanced in my previous post talking about the weakest link in cybersecurity, with the 3 basic principles of cybersecurity: least privilege, defense in depth y limiting the area of exposureIf you always apply them as a rule, you will be reasonably well protected.

We will see what they consist of.

Principle of Least Privilege

**The Principle of Least Privilege **is undoubtedly one of your best shields against cyber-attacks.

The weakest link in cybersecurity: human error

Sat, 15 Feb 2025 20:37:50 +0000

* * * *“In front of the keyboard, we are all fighters.”

Or rather, we are all cyborgs!

Well, less crazy. Do you know what the secret ingredient behind almost every major cyberattack is?

No, it’s not the hackers in hoodies or the green neon lights (although they give a very inspiring cyberpunk touch).

It is** HUMAN ERROR. **Yes, that’s right, in capital letters.

Because, let’s be clear, we are often our own worst enemy.

Cybercriminals Exposed: How the Bad Guys Operate

Sun, 09 Feb 2025 11:16:47 +0000

If you follow my publications, you will have seen that the vast majority of the first articles have been dedicated to getting to know a little better the attackers we must protect ourselves from.

As I have reiterated in previous posts, in order to defend yourself properly it is essential to know your potential enemies. So, before we get into the next articles -where we will start to see some basic protection measures that we should consider putting into practice-, let’s finish this series of getting to know “the bad guys” with one more article. But this time, we will do it from a slightly more technical perspective. So, if any of you are lost with any concept, don’t worry, because in future articles we will be looking at everything.

Cybercriminals vs. Big Tech: Who is the Real Threat?

Sat, 08 Feb 2025 12:28:47 +0000

It is no secret that cyberspace is full of threats. From cybercriminals to, why not, large technology corporations - the so-called *Big Tech -*all compete to obtain the most precious asset of the 21st century: our data.

Let’s take a closer look at some of these actors from which we must protect ourselves, and they are not few in number.

Cybercriminals have been pestering us for decades, either with phishing campaigns or by spreading malware.

Infection vectors and infrastructures used by hackers to attack you

Sun, 19 Jan 2025 07:30:34 +0000

To finish getting to know a little better these bastards, known as cybercriminals, with whom we have to share the Internet (pardon the expression); let’s finish with an article that I hope will help us to get to know our enemy a little better, following Sun Tzu ’s advice mentioned in a previous post.

Let’s see what are the common attack vectors they usually use to get to us, as well as the infrastructures they use to make it more difficult for us to get to them and hold them accountable.

You are the raw material! This is how to make a fortune at the expense of your privacy.

Sun, 12 Jan 2025 20:59:24 +0000

Did you know that your personal data is the basis of Google’s and Facebook’s fortunes?

You may not yet know how they collect information for advertising campaigns and what this implies for your privacy. Are you aware of the risks?

No one doubts that the Internet is an extraordinary invention that offers us a myriad of conveniences and benefits, which may well be on a par with the great discoveries of history, among which we must add artificial intelligence tools such as ChatGPT.

The 5 phases hackers use to steal from you, learn about them

Wed, 01 Jan 2025 15:05:00 +0000

In most computer attacks targeting ordinary people, hackers mainly use social engineering techniques, e.g. malicious emails*(phishing*) or fraudulent text messages*(smishing*).

However, certain individuals, due to the position or position they hold - politicians, CEOs, judges, military, prosecutors, and a long etc. - face greater risks, as attackers can invest large resources of money and time to achieve their goals.

The effort is worth it because of the succulent rewards offered by the valuable information his victims handle.

Don't let hackers and scammers win: we can stop them

Fri, 27 Dec 2024 20:30:11 +0000

{%CAPTION%}

It’s Christmas time and, at least for me, I’ve already received a few fraudulent calls and messages with malicious links trying to spoil my holiday season.

I imagine I am not the only one, since these are the favorite dates for cybercriminals to deploy their entire arsenal, and try to catch off guard all those people who expect to receive congratulatory messages from family and friends. Probably, the most unwary or those with a lesser culture of cybersecurity will be easy prey.

Who I am

Sun, 10 Nov 2024 18:35:44 +0000

About Jose Saiz (Blog author)

Short" biography

Born in Madrid in nineteen hundred and something, with a partner and no children. Passionate about humor, cybersecurity, AI, computer science and technology in general.

Due to his divulgative spirit, he started his blog “josecurity.es” at the end of 2024, while he was living in Germany working as an Information and Communications Security Engineer (INFOSEC) of a, at that time, future unmanned aircraft known as MALE-RPAS “Eurodrone”, developed entirely by the European industry and that would be an important aeronautical and political advance that sought a future strategic sovereignty of the old continent.

Contact

Mon, 01 Jan 0001 00:00:00 +0000

Got a question, a suggestion or just want to say hello? Fill in the form and I’ll get back to you as soon as possible. You can also reach me on X, LinkedIn or Medium.

Follow me

Mon, 01 Jan 0001 00:00:00 +0000

Enjoying the blog? The best way not to miss anything is to follow me on my networks and platforms. That’s where I share new articles, videos and podcast episodes.

X (Twitter): @digitaljose01
LinkedIn: Jose Saiz
Medium: medium.com/josecurity
Podcast on Spotify: Cybersecurity by josecurity

See you around! 🙌

Topics

Mon, 01 Jan 0001 00:00:00 +0000

Browse all the blog content organised by categories and tags.