The latest news and updates within the sector

In an increasingly interconnected digital environment, an organisation’s cybersecurity no longer depends solely on its own systems. Technology providers, cloud platforms and external services are part of day-to-day operations, expanding the potential entry points for attackers. This reality requires businesses to adopt a broader view of their exposure to risk. The challenge is that not […]

For years, Identity and Access Management (IAM) has focused on protecting human credentials through multi-factor authentication (MFA), strong password policies, and role-based access controls (RBAC). However, the rapid adoption of microservices, CI/CD pipelines, and cloud automation has fundamentally transformed the corporate cybersecurity landscape. Today, non-human identities (NHIs)—including API tokens, service accounts, and digital certificates—far outnumber […]

As regulations such as NIS2, DORA, and the Spanish National Security Framework (ENS) continue to raise the bar for cybersecurity and resilience, GRC and security teams are facing an increasingly difficult challenge: proving compliance without taking resources away from security. For many organizations, compliance still means manually collecting evidence, taking screenshots of configurations, chasing validation […]

Artificial Intelligence (AI) is radically transforming the corporate cyber security landscape. However, the greatest challenge does not lie solely in the attacker’s technological sophistication, but in how this capability multiplies the vulnerability of the human factor and expands the attack surface towards the supply chain. When we analyse AI-driven cyber attacks, we tend to focus […]

For many organizations, the National Security Scheme (ENS) evokes the image of hundreds of static documents: policy manuals, procedures archived in shared folders, and giant spreadsheets attempting to track more than 75 security measures. This documentation-heavy approach not only drains the resources of cybersecurity and compliance teams, but also fails to uphold the guiding principle […]

The adoption of Software as a Service (SaaS) has radically transformed the way businesses operate. Agility, scalability, and the ability to integrate specialized tools have made SaaS the backbone of modern infrastructure. However, this speed comes with a hidden cost: the fragmentation of visibility and security control. At Riskblade, we see every day how the […]

Digital transformation has dramatically increased organizations’ dependence on third parties. Cloud providers, consulting firms, technology partners, and outsourcing companies are now part of critical business processes and, in many cases, have direct access to sensitive information, internal systems, or customer data. This scenario has turned TPRM (Third-Party Risk Management) into a fundamental component of any […]

The Digital Operational Resilience Act (DORA) marks a turning point in the regulation of the European financial sector. More than just an additional regulation, it represents a profound shift in how organizations must understand digital resilience. It is no longer enough to protect internal systems: it is now essential to ensure that the entire technology […]

Third-party relationships are essential to modern business. The ­depency on external entities to operate efficiently and scale quickly has increased over the years. However, this extended ecosystem also expands the attack surface and introduces a wide range of thid-party risks that traditional security and compliance models were never designed to manage. Thus, third-party risk management […]

Digitalization has revolutionized the way companies work. Collaborating with partners, vendors, and outsourcing services—sometimes from anywhere in the world—has never been easier. This opens up a world of opportunities, but it also introduces third-party risk. As a result, cybersecurity that focuses solely on controlling a company’s internal environment is no longer sufficient. It is now […]