Security Intelligence Blog on PROTISEC — AI-Powered Enterprise Cybersecurity

NIS2 in Spain: What SMEs Need to Do Before August 2026

Tue, 10 Mar 2026 00:00:00 +0000

The EU Network and Information Security Directive (NIS2) entered into force across EU member states in October 2024. Spain transposed it via the Ley de Seguridad de las Redes y Sistemas de Información (LSSI-NIS2). For Spanish SMBs in affected sectors, the clock is running.

Who Is Actually Affected

NIS2 expanded the scope dramatically compared to its predecessor. In Spain, the following sectors are now covered:

Energy (electricity, oil & gas, district heating)
Transport (road, rail, air, maritime)
Banking and financial market infrastructure
Health (hospitals, pharma manufacturing, R&D)
Drinking water and wastewater
Digital infrastructure (DNS, cloud, data centres, CDN providers)
ICT service management (MSPs, MSSPs)
Public administration
Space

The size threshold matters: medium enterprises (50+ employees or €10M+ revenue) in essential sectors fall under NIS2. Some critical entities regardless of size are also in scope. If you are an MSP or MSSP, you are almost certainly in scope.

How LockBit Penetrates ICS/OT Networks: An Anatomy

Thu, 05 Mar 2026 00:00:00 +0000

The Colonial Pipeline attack in 2021 cost $4.4M in ransom and shut down fuel supply to the US East Coast for six days. The compromise vector: a legacy VPN account with no MFA. The attackers never touched OT systems — they did not need to. The company shut down operations proactively out of fear.

This is the new reality of industrial ransomware. The attack does not need to compromise your PLC to be devastating.

Private LLMs vs OpenAI API: The Enterprise Security Case

Sat, 28 Feb 2026 00:00:00 +0000

In 2023, Samsung employees leaked proprietary source code by pasting it into ChatGPT. The incident is now a standard case study in enterprise AI risk. Two years later, most large European companies have an AI usage policy. Very few have an AI architecture that actually enforces it.

The fundamental problem: cloud LLM APIs process your data on infrastructure you do not control, governed by terms of service that change, subject to regulatory jurisdictions that may not align with your compliance obligations.