Un MacBook abierto visto desde arriba sobre un escritorio con una libreta y un lápiz: el equipo de trabajo donde alguien pega un comando dictado por una web

The macOS malware that exploits nothing: you paste it in yourself

On 6 August, Huntress published its analysis of a Go-based credential stealer for macOS that had been sitting inside a monitored Mac for three months. There is no CVE, no exploit and nothing to patch: the chain starts with a web page dictating a command and a user pasting it into Terminal. What that command does line by line, why Gatekeeper never gets involved, what it actually takes from a company (Keychain, session cookies, browser passwords) and why the warning Apple added in macOS 26.4 is a speed bump rather than a wall.

macOS Cybersecurity EDR/MDR

Read more →

Cajones de un fichero de biblioteca con sus portaetiquetas vacíos: el directorio sigue estando en el sitio de siempre y la fuente de autoridad se está moviendo a la nube

9 Aug 2026
Warning: Undefined array key "read_time" in /var/www/html/public/blog.php on line 5669
min read

Entra Connect: the date that stops your sync, and the date that just emails you

On 30 September 2026, any Entra Connect synchronisation running below version 2.5.79.0 stops working. This is not the Cloud Sync migration: it is a separate thing, and it is the only one of the two with a fixed date. The migration runs in waves, allows exceptions and has no announced retirement date. What exactly breaks when sync stops (hint: not email — the offboarding that never reaches the cloud), why auto-upgrade fails to save precisely the servers that need it, and the eight rows in Microsoft's own comparison table that decide whether you can move to Cloud Sync yet.

Microsoft Identity Active Directory

Read more →

Sala llena de ordenadores encendidos y funcionando con normalidad: los certificados de Secure Boot caducaron en junio y ningún equipo dejó de arrancar

8 Aug 2026 7 min read

Secure Boot expired in June and nothing broke. That is the problem

On 24 and 27 June, two of the certificates Microsoft has used to sign the boot chain since 2011 expired. Not a single machine went down: Microsoft states plainly that the device keeps starting and updating normally. What stops is something else — revocations, the boot manager, early-boot mitigations — and it raises no alert at all. A third date is still open: 19 October. How to check in two minutes whether your Windows estate, your Linux servers and — this is the one nobody looks at — your virtual machines already carry the 2023 certificates.

Windows Firmware Security

Read more →

El peaje del ESU de Windows 10: el precio se duplica cada año y es acumulativo

31 Jul 2026 5 min read

Windows 10 and the October toll: ESU doubles every year and you cannot skip year one

Microsoft charges $61 per device for the first year of Windows 10 extended security updates, and its own documentation says two things almost nobody puts together: the price doubles every consecutive year and ESUs are cumulative, so enrolling in year three means paying for all three. Delaying enrolment does not reduce the bill if you end up enrolling: it shifts the payment and leaves you without patches while you wait. The full math, the three blind spots that cost real money (the 2027 headline is not about your company, LTSC is not covered, and Office lives on until 2028 but you can no longer log a bug) and when paying for ESU really is the right call.

Windows Licensing Workplace

Read more →

La subida de precios de Microsoft 365 del 1 de julio de 2026, con la cuenta real por usuario

30 Jul 2026 5 min read

Microsoft 365 has already gone up: the percentage that scares you is not the one that costs you money

On 1 July the price increase for Microsoft 365 commercial suites came into force. Through June everyone repeated the same advice —renew before the 1st and you freeze your price— and that advice expired four weeks ago. The official before-and-after price table, the math that actually matters (per-user increase multiplied by headcount and by twelve), why the price that does NOT change is the most informative figure in the announcement, which capabilities land in each suite, and the five things we would do before your renewal.

Microsoft Licensing Endpoint

Read more →

CVE-2026-14266 en 7-Zip: por qué en la mayoría de los PCs de empresa el mejor parche es desinstalarlo

28 Jul 2026 9 min read

The best patch for 7-Zip is uninstalling it (on most of your PCs)

CVE-2026-14266 is a heap overflow in 7-Zip's XZ decoder: it affects version 21.07 and every release up to 26.01. With no public exploit and no known exploitation, it is not an emergency. But that is two code-execution flaws in two months, the program updates by hand, and Windows 11 has opened .7z and .rar natively since 2023. Before updating two hundred machines, it is worth checking how many actually need it.

Security Windows Endpoint

Read more →

everyWAN Blog

The macOS malware that exploits nothing: you paste it in yourself

Entra Connect: the date that stops your sync, and the date that just emails you

Secure Boot expired in June and nothing broke. That is the problem

Windows 10 and the October toll: ESU doubles every year and you cannot skip year one

Microsoft 365 has already gone up: the percentage that scares you is not the one that costs you money

The best patch for 7-Zip is uninstalling it (on most of your PCs)

Subscribe to our newsletter