Cybersecurity Blog

Technical analysis, research and news on offensive security: AI and agents, hardware hacking, drones, real-world threats and geopolitics. Written by the QuantumSec team.

CRA scoping form · Penetration testing scoping form · ISO 27001 and security master plan scoping form · ENS scoping form · Training scoping form · Practical cybersecurity guides

• MCP: Blind Trust, Maximum Risk — AI & Security
• Spec-Driven Development: the end of vibe coding, and why your AI needs a signed contract before it touches your repo — AI & Security
• Kimi K2.5 in depth — AI & Security
• Honeypots and canary tokens: defending corporate networks against sophisticated adversaries — Threats
• Drone security: critical threats and how to protect airspace in 2025 — Drones & Defense
• Clawdbot: the critical AI agent vulnerabilities nobody tells you about — AI & Security
• Starlink vs Iran: A technical analysis of blocking and countermeasures in cyberwarfare — Defense & Geopolitics
• The New War Casino: How People Are Betting in Real Time on the Military Advance in Ukraine — Defense & Geopolitics
• The digital crime factory: a Dark Web threat intelligence report — Research
• Quantum Computing: The Invisible Threat to Your Digital Security — Threats
• Drones and AI: how they are changing the balance of modern warfare — Drones & Defense
• Palantir Technologies: anatomy of a data empire — Research
• Report: Privacy for rent: what VPNs don’t want you to know - 0data — Research
• Human biocomputing: security and organoid intelligence in the new AI era — AI & Security
• Skunk Works — Defense & Geopolitics
• V-JEPA 2: the new visual brain that learns the world in order to anticipate it — AI & Security
• The Drone King – Operation Spiderweb: a masterstroke of intelligence and technology — Drones & Defense
• Scattered Spider's Siege on Retail: A Wake-Up Call for Cybersecurity — Threats
• Hardware Analysis Series – Part 7: Advanced ARM Microcontroller Debugging with JTAG and the Bus Pirate — Hardware & OT
• How to find your own cracks before someone else does (and it costs you millions) — Threats
• Hardware Analysis Series – Part 6 Bus Pirate: From Bits to Buses — Hardware & OT
• The digital grenade in cyberwarfare: Neutralizing and jamming communications — Defense & Geopolitics
• Hacking Drones III: Drone Warfare – Active Defense and Operational Resilience — Drones & Defense
• Hardware Analysis Series – Part 5: Electromagnetic Espionage – The Silent Attack — Hardware & OT
• Hacking Drones (II): Anatomy of the Aerial Vector — Drones & Defense
• Multi-domain and mosaic warfare: the new US military thinking, by Guillermo Pulido Pulido — Defense & Geopolitics
• The technological singularity: inevitable progress or likely extinction? — AI & Security
• Operation Guacamaya | Checkmate to the Dictator: The Perfect Move — Research
• Hardware Analysis Series – Part 4: Hacking through power consumption — Hardware & OT
• Hardware Analysis Series – Part 3: Fault injection – introduction and practical applications — Hardware & OT
• Elite hunters: threat hunting as a strategic advantage — Threats
• Hardware Analysis Series – Part 2: Component identification and information gathering — Hardware & OT
• Hardware Analysis Series – Part 1: Peripheral interfaces, the forgotten doors of silicon — Hardware & OT
• Uncrewed submarines: the new hybrid threat in 21st-century naval warfare — Defense & Geopolitics
• MCP and A2A: How the protocols orchestrating the new intelligence between models and agents work — AI & Security
• Military jet falls into the Red Sea — Defense & Geopolitics
• Spain's Power Blackout: An Analysis of Cyberattacks on Critical Energy Infrastructure — Threats
• Report on the J-20 Mighty Dragon fighter and Chinese military power | 2025 — Defense & Geopolitics
• The Evolution of Offshore Finance: Legal Loopholes, Leaks and the Rise of the US "Onshore Haven" — Research
• How to Share Credentials and Encrypted Files Securely with Third Parties — Threats
• The American Silk Road: how China is conquering the Americas from Mexico — Defense & Geopolitics
• Can emojis hack AI models? — AI & Security
• Cyberattack risks in 5G infrastructure — Threats
• When dogs carry rifles: urban survival in the age of autonomous swarms — Defense & Geopolitics
• Wars are not won with nuclear bombs, but with plastic — Defense & Geopolitics
• Docker Model Runner vs. Ollama — AI & Security
• Transforming Businesses with Intelligent Agents — AI & Security
• Transforming industries with AI, automation and cybersecurity — AI & Security
• Artificial Intelligence and Cybersecurity for Business — AI & Security
• Bybit Hack Analysis (III): Implications and the Future of Crypto Security After the Bybit Hack — Threats
• How a principled hacker exploited a hole in Solana to fund indie projects — Threats
• Cloudflare vs. LaLiga: The clash of titans threatening the internet in Spain — Research
• Honeypot as a Service: catching the attacker on their first move — Threats
• Which bucket does your product fall into? An interactive Cyber Resilience Act classifier — Hardware & OT
• A badly scoped pentest isn't cheap: it's useless — Threats
• KOMPLIANCE: the audit you can watch as it happens, and the platform that stays afterward — AI & Security
• How a news story travels: anatomy of fourteen days of press — Research
• When an executive buys their own shares — Research
• Deploying AI in the enterprise without opening a hole: control, governance and measurement — AI & Security
• Can I upload this to AI? Classify the data before you paste it — AI & Security
• Jev and System 1 models: when AI stops writing and starts deciding — AI & Security
• Cleverium: Which Executives Really Get It Right When They Buy Their Own Shares — Research
• How a company falls: a simulator of the final lapses — Threats
• ISO 27001 in 2026: what has really changed and what you still need to get certified — Research
• RTX 5090, DGX Spark or Mac Studio: which machine to choose for running AI locally — AI & Security
• How an AI application is attacked: prompt injection and tool-using agents — AI & Security
• How an industrial plant gets attacked: the leap from IT to the metal, explained with a machine — Hardware & OT
• European compliance calendar 2026-2030: CRA, AI Act, Data Act and everything still to come — Research
• Cyber Resilience Act reporting is now mandatory: what has changed and what to do this quarter — Hardware & OT
• NIS2 in Spain, two years without a law: where transposition stands and what to do this quarter — Research
• Anatomy of 0data: dissecting a data and AI platform that never leaves your house — AI & Security