@MBeltranPardo

Profesora, investigadora, divulgadora e innovadora. Apasionada de la tecnología y de las personas detrás de ella. Cuenta personal.

 Madrid, España
mbelpar.github.io/
Joined January 2010
  • Tweets11.6K
  • Following382
  • Followers2.9K
171Media
Qué fácil resulta conversar con algunas personas... aquí un ejemplo, una charla con "mi editor" sobre tecnología, algoritmos y cómo nos afectan: youtu.be/0LK6T65Np84

#4x25 | Marta Beltrán: "El algoritmo es nuestro amigo"

Este viernes se celebra el Día Mundial de la Tecnología, y si hay a...

youtube.com
1
2
734
ENISA Technical Advisory for Software Bill of Materials enisa.europa.eu/publications…
94
If the vulnpocalypse is the apocalypse, where are the agentic attacker hordes? joshuasaxe181906.substack.co…
726
The 2026 ENISA Threat Landscape confirms that cyber dependencies expand the attack surface and require a new level of vigilance to effectively prevent and mitigate the impact of cyber incidents enisa.europa.eu/news/explori…
90
High Assurance Dgital Credentials on Android: A Framework for Hardware-Backed Security services.google.com/fh/files…
2
784
OpenAI Models Escaped Containment and Hacked Hugging Face: The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack wired.com/story/openai-model…

OpenAI Models Escaped Containment and Hacked Hugging Face

The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack.

wired.com
1
148
The Payload Is in the Header: A New Prompt Injection Blind Spot blog.securitybreak.io/the-pa…

The Payload Is in the Header

A New Prompt Injection Blind Spot

blog.securitybreak.io
163
SME Cyber Resilience Maturity Assessment Model enisa.europa.eu/publications…
106
Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers cisa.gov/sites/default/files…
1
116
Stop Copying Plastic Cards: Why Many EUDI Wallet Credentials Don’t Need Your Name mmollik.medium.com/stop-copy…

stop copying plastic cards: why many EUDI Wallet attestations don’t need your name

If cryptography already proves ownership, why are we still putting people's names into every EAA?

mmollik.medium.com
1
144
Identity Crisis in Confidential Computing: Formal Analysis of Attested TLS dl.acm.org/doi/10.1145/37792…

Identity Crisis in Confidential Computing: Formal Analysis of Attested TLS | Proceedings of the ACM...

dl.acm.org
108
Los videojuegos tratan multitud de datos personales y no siempre somos conscientes de cuáles se tratan ni para qué. Nos lo explica Marta Beltrán (@AEPD_es @URJCcientifica): f.mtr.cool/qoqemenbni

¿Para qué se usan los datos personales que recogen los videojuegos?

Los videojuegos tratan multitud de datos personales y no siempre somos conscientes de cuáles se tratan ni para qué. Conocer cómo podrían violar nuestros derechos y libertades, y en concreto nuestra...

theconversation.com
3
3
459
EU Action Plan on Cybersecurity and Artificial Intelligence digital-strategy.ec.europa.e…

EU Action Plan on Cybersecurity and Artificial Intelligence

The European Commission has presented an Action Plan on Cybersecurity and Artificial Intelligence to support the safe and responsible use of AI while strengthening Europe's cybersecurity.

digital-strategy.ec.europa.eu
1
217
From Cloud to Chaos: Defining Shared Responsibility for AI Security medium.com/anton-on-security…

From Cloud to Chaos: Defining Shared Responsibility for AI Security

For 15 years (!), many of us who have touched cloud security have struggled with the shared responsibility model for cloud security. As…

medium.com
84
ENISA’s view on Cybersecurity in the Frontier AI Era enisa.europa.eu/publications…
79
Marta Beltrán retweeted
Cybersecurity @ NIST@NISTcyberJul 1
🆕@NIST SP 800-18r2, “Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems,” identifies essential elements of system plans to promote consistent information collection across the organization. Check it out: csrc.nist.gov/pubs/sp/800/18…
1
12
11
2,832
Mind your key: An Empirical Study of LLM API Credential Leakage in iOS Apps arxiv.org/abs/2606.12212

Mind your key: An Empirical Study of LLM API Credential Leakage in iOS Apps

The rapid integration of large language models (LLMs) into mobile applications has introduced a new class of credential security risk: leaked credentials that grant unauthorized access to LLM...

arxiv.org
1
3
137
Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector unit42.paloaltonetworks.com/…

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn more.

unit42.paloaltonetworks.com
89
Accelerating EDR Evasion with LLM-Driven Analysis specterops.io/blog/2026/06/2…

Accelerating EDR Evasion with LLM-Driven Analysis

SpecterOps reverse engineered Cortex XDR with LLMs to extract YARA rules, ML models, and behavioral detections.

specterops.io
114
Core Collapse: The Mathematics of AI Security Asymmetry cloudsecurityalliance.org/ar…

The Mathematics of AI Security Asymmetry | CSA

Explore the security asymmetry of attackers and defenders. Connect risk reduction strategies to Zero Trust architecture and vulnerability management.

cloudsecurityalliance.org
62
Anonymous researcher drops 0-day 'exploitarium' repo: At least two vulnerabilities are already under attack theregister.com/security/202…

Anonymous researcher drops 0-day 'exploitarium' repo

At least two vulnerabilities are already under attack

theregister.com
125
Load more