--- title: Internet Security Auditors Blog | Alberto Villar Arévalo (3) description: "PCI SSA, PCI QSA, CISSP, CSSLP, ISO 27001 L.A., CSFPC, SFPC\n
Security Consultant\n
Consulting Department (3)" --- English - [Spanish](https://blog.isecauditors.com/) - [English](https://blog.isecauditors.com/en/author/alberto-villar/page/3) [![290x123px\_isecauditors](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/290x123px_isecauditors.png?width=290&height=91&name=290x123px_isecauditors.png) ![290x123px\_isecauditors](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/290x123px_isecauditors.png?width=290&height=91&name=290x123px_isecauditors.png)](https://blog.isecauditors.com/?hsLang=en) - [← www.isecauditors.com](https://www.isecauditors.com/) - [academy.isecauditors.com](https://academy.isecauditors.com/) - [← www.isecauditors.com](https://www.isecauditors.com/) - [academy.isecauditors.com](https://academy.isecauditors.com/) # ISecAuditors Blog Your security is our success ### Archive - [October 2026 (24)](https://blog.isecauditors.com/en/archive/2026/10) - [September 2026 (12)](https://blog.isecauditors.com/en/archive/2026/09) - [August 2026 (6)](https://blog.isecauditors.com/en/archive/2026/08) - [July 2026 (6)](https://blog.isecauditors.com/en/archive/2026/07) - [June 2026 (10)](https://blog.isecauditors.com/en/archive/2026/06) - [May 2026 (14)](https://blog.isecauditors.com/en/archive/2026/05) - [April 2026 (7)](https://blog.isecauditors.com/en/archive/2026/04) - [March 2026 (7)](https://blog.isecauditors.com/en/archive/2026/03) - [February 2026 (1)](https://blog.isecauditors.com/en/archive/2026/02) - [January 2026 (2)](https://blog.isecauditors.com/en/archive/2026/01) - [December 2025 (4)](https://blog.isecauditors.com/en/archive/2025/12) - [November 2025 (1)](https://blog.isecauditors.com/en/archive/2025/11) ### Tags - [AI (12)](https://blog.isecauditors.com/en/tag/ai) - [AIR (11)](https://blog.isecauditors.com/en/tag/air) - [API Audit (1)](https://blog.isecauditors.com/en/tag/api-audit) - [API Testing (1)](https://blog.isecauditors.com/en/tag/api-testing) - [ASV Scans (1)](https://blog.isecauditors.com/en/tag/asv-scans) - [ATMs (1)](https://blog.isecauditors.com/en/tag/atms) - [Authenticated Scans (1)](https://blog.isecauditors.com/en/tag/authenticated-scans) - [CardExpose (2)](https://blog.isecauditors.com/en/tag/cardexpose) - [CISO-as-a-Service (1)](https://blog.isecauditors.com/en/tag/ciso-as-a-service) - [Cloud Security (2)](https://blog.isecauditors.com/en/tag/cloud-security) - [CRA Compliance Assessment and Support (5)](https://blog.isecauditors.com/en/tag/cra-compliance-assessment-and-support) - [CRA Law (5)](https://blog.isecauditors.com/en/tag/cra-law) - [Critical Infrastructure Protection (1)](https://blog.isecauditors.com/en/tag/critical-infrastructure-protection) - [Cryptographic Keys (1)](https://blog.isecauditors.com/en/tag/cryptographic-keys) - [Cumplimiento Normativo (1)](https://blog.isecauditors.com/en/tag/cumplimiento-normativo) - [Data Protection (3)](https://blog.isecauditors.com/en/tag/data-protection) - [DORA Implementation (2)](https://blog.isecauditors.com/en/tag/dora-implementation) - [Encryption (1)](https://blog.isecauditors.com/en/tag/encryption) - [Events (4)](https://blog.isecauditors.com/en/tag/events) - [Generative AI (1)](https://blog.isecauditors.com/en/tag/generative-ai) - [GenIA (1)](https://blog.isecauditors.com/en/tag/genia) - [IA (3)](https://blog.isecauditors.com/en/tag/ia) - [Implementation of an AIMS (3)](https://blog.isecauditors.com/en/tag/implementation-of-an-aims) - [Implementation of an SGIA (14)](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) - [Intrusion Test (9)](https://blog.isecauditors.com/en/tag/intrusion-test) - [ISO 27002 (3)](https://blog.isecauditors.com/en/tag/iso-27002) - [ISO 27701 (1)](https://blog.isecauditors.com/en/tag/iso-27701) - [ISO 42001 (19)](https://blog.isecauditors.com/en/tag/iso-42001) - [ISO Consulting (4)](https://blog.isecauditors.com/en/tag/iso-consulting) - [ISO ISMS 27001 Consulting (6)](https://blog.isecauditors.com/en/tag/iso-isms-27001-consulting) - [MKO PCI (1)](https://blog.isecauditors.com/en/tag/mko-pci) - [Mobile Application Audit (1)](https://blog.isecauditors.com/en/tag/mobile-application-audit) - [National Security Framework (1)](https://blog.isecauditors.com/en/tag/national-security-framework) - [NIS2 Directive (2)](https://blog.isecauditors.com/en/tag/nis2-directive) - [NIST CSF Consulting and Implementation (4)](https://blog.isecauditors.com/en/tag/nist-csf-consulting-and-implementation) - [OWASP TOP10 LLM (1)](https://blog.isecauditors.com/en/tag/owasp-top10-llm) - [Payment Security (5)](https://blog.isecauditors.com/en/tag/payment-security) - [PCI 3DS (1)](https://blog.isecauditors.com/en/tag/pci-3ds) - [PCI Compliance (15)](https://blog.isecauditors.com/en/tag/pci-compliance) - [PCI PIN (1)](https://blog.isecauditors.com/en/tag/pci-pin) - [PCI SSF (1)](https://blog.isecauditors.com/en/tag/pci-ssf) - [PCI SSS (1)](https://blog.isecauditors.com/en/tag/pci-sss) - [PCI Standards (1)](https://blog.isecauditors.com/en/tag/pci-standards) - [Protección de Datos (1)](https://blog.isecauditors.com/en/tag/protección-de-datos) - [Red Team (3)](https://blog.isecauditors.com/en/tag/red-team) - [Risk Management (1)](https://blog.isecauditors.com/en/tag/risk-management) - [Secure configurations (4)](https://blog.isecauditors.com/en/tag/secure-configurations) - [Security Audits (5)](https://blog.isecauditors.com/en/tag/security-audits) - [Security Consulting (5)](https://blog.isecauditors.com/en/tag/security-consulting) - [Security for AI Ecosystems (5)](https://blog.isecauditors.com/en/tag/security-for-ai-ecosystems) - [Serverless (1)](https://blog.isecauditors.com/en/tag/serverless) - [Social Engineering (2)](https://blog.isecauditors.com/en/tag/social-engineering) - [SWIFT (1)](https://blog.isecauditors.com/en/tag/swift) - [System Hardening (2)](https://blog.isecauditors.com/en/tag/system-hardening) - [Training (6)](https://blog.isecauditors.com/en/tag/training) - [Vulnerabilities (3)](https://blog.isecauditors.com/en/tag/vulnerabilities) - [Vulnerability Management (1)](https://blog.isecauditors.com/en/tag/vulnerability-management) BLOG # All articles from Alberto Villar Arévalo [![Samsung and the Refrigerator That Stopped Cooling: A Warning Sign for the CRA](https://blog.isecauditors.com/hs-fs/hubfs/Samsung-y-el-frigorifico-que-dejo-de-enfriar.png?width=596&name=Samsung-y-el-frigorifico-que-dejo-de-enfriar.png)](https://blog.isecauditors.com/en/samsung-and-the-refrigerator-that-stopped-cooling-a-warning-sign-for-the-cra) Oct 1, 2026, 11:56:34 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [Samsung and the Refrigerator That Stopped Cooling: A Warning Sign for the CRA](https://blog.isecauditors.com/en/samsung-and-the-refrigerator-that-stopped-cooling-a-warning-sign-for-the-cra) [Read More](https://blog.isecauditors.com/en/samsung-and-the-refrigerator-that-stopped-cooling-a-warning-sign-for-the-cra) [![OpenAI and Australia: when an AI agent crosses the limits](https://blog.isecauditors.com/hs-fs/hubfs/OpenAI%20and%20Australia%20-%20when%20an%20AI%20agent%20crosses%20the%20limits.png?width=596&name=OpenAI%20and%20Australia%20-%20when%20an%20AI%20agent%20crosses%20the%20limits.png)](https://blog.isecauditors.com/en/openai-and-australia-when-an-ai-agent-crosses-the-limits) Sep 30, 2026, 10:57:16 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [OpenAI and Australia: when an AI agent crosses the limits](https://blog.isecauditors.com/en/openai-and-australia-when-an-ai-agent-crosses-the-limits) [Read More](https://blog.isecauditors.com/en/openai-and-australia-when-an-ai-agent-crosses-the-limits) [![AI Act in 2026: The Legal Obligation Is Already Underway](https://blog.isecauditors.com/hs-fs/hubfs/ria-en-2026-la-obligacion-legal-ya-esta-en-marcha.png?width=596&name=ria-en-2026-la-obligacion-legal-ya-esta-en-marcha.png)](https://blog.isecauditors.com/en/ai-act-in-2026-the-legal-obligation-is-already-underway) Sep 29, 2026, 11:06:07 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [AI Act in 2026: The Legal Obligation Is Already Underway](https://blog.isecauditors.com/en/ai-act-in-2026-the-legal-obligation-is-already-underway) [Read More](https://blog.isecauditors.com/en/ai-act-in-2026-the-legal-obligation-is-already-underway) [![The AEPD Receives the First Reported Data Breach Executed by an AI Agent](https://blog.isecauditors.com/hs-fs/hubfs/primera-denuncia-aepd.png?width=596&name=primera-denuncia-aepd.png)](https://blog.isecauditors.com/en/the-aepd-receives-the-first-reported-data-breach-executed-by-an-ai-agent) Sep 25, 2026, 1:36:19 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [The AEPD Receives the First Reported Data Breach Executed by an AI Agent](https://blog.isecauditors.com/en/the-aepd-receives-the-first-reported-data-breach-executed-by-an-ai-agent) [Read More](https://blog.isecauditors.com/en/the-aepd-receives-the-first-reported-data-breach-executed-by-an-ai-agent) [![OpenAI Delays Its IPO: AI Security Is Now a Business Risk](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Material%20corporativo/Boletines%20Media/ia-safe-from-reputational-risk-to-compliance.jpg?width=596&name=ia-safe-from-reputational-risk-to-compliance.jpg)](https://blog.isecauditors.com/en/openai-delays-its-ipo-ai-security-is-now-a-business-risk) Sep 22, 2026, 11:05:07 AM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [OpenAI Delays Its IPO: AI Security Is Now a Business Risk](https://blog.isecauditors.com/en/openai-delays-its-ipo-ai-security-is-now-a-business-risk) [Read More](https://blog.isecauditors.com/en/openai-delays-its-ipo-ai-security-is-now-a-business-risk) [![DORA: From Regulatory Obligation to Real Digital Resilience](https://blog.isecauditors.com/hs-fs/hubfs/dora-de-la-obligacion-a-la-resiliencia.png?width=596&name=dora-de-la-obligacion-a-la-resiliencia.png)](https://blog.isecauditors.com/en/dora-from-regulatory-obligation-to-real-digital-resilience) Sep 16, 2026, 2:06:45 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [DORA: From Regulatory Obligation to Real Digital Resilience](https://blog.isecauditors.com/en/dora-from-regulatory-obligation-to-real-digital-resilience) [Read More](https://blog.isecauditors.com/en/dora-from-regulatory-obligation-to-real-digital-resilience) [![CRA: The 24-hour clock starts on September 11](https://blog.isecauditors.com/hs-fs/hubfs/ISEC%20Media/Blog%20Media/CRA-Reloj-de-notificacion-para-fabricantes.png?width=596&name=CRA-Reloj-de-notificacion-para-fabricantes.png)](https://blog.isecauditors.com/en/cra-the-24-hour-clock-starts-on-september-11) Sep 10, 2026, 1:30:00 PM by [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) ### [CRA: The 24-hour clock starts on September 11](https://blog.isecauditors.com/en/cra-the-24-hour-clock-starts-on-september-11) [Read More](https://blog.isecauditors.com/en/cra-the-24-hour-clock-starts-on-september-11) [Legal Notice](https://www.isecauditors.com/aviso-legal) [Policy Privacy](https://www.isecauditors.com/politica-privacidad) [Cookie Policy](https://www.isecauditors.com/politica-cookies) [![Samsung and the Refrigerator That Stopped Cooling: A Warning Sign for the CRA](https://blog.isecauditors.com/hubfs/Samsung-y-el-frigorifico-que-dejo-de-enfriar.png)](https://blog.isecauditors.com/en/samsung-and-the-refrigerator-that-stopped-cooling-a-warning-sign-for-the-cra) ## [Samsung and the Refrigerator That Stopped Cooling: A Warning Sign for the CRA](https://blog.isecauditors.com/en/samsung-and-the-refrigerator-that-stopped-cooling-a-warning-sign-for-the-cra) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [CRA Law](https://blog.isecauditors.com/en/tag/cra-law)[CRA Compliance Assessment and Support](https://blog.isecauditors.com/en/tag/cra-compliance-assessment-and-support) Oct 1, 2026, 11:56:34 AM Madrid, 24 September 2026. Samsung has suspended a SmartThings update after several four-door Bespok... [Read more](https://blog.isecauditors.com/en/samsung-and-the-refrigerator-that-stopped-cooling-a-warning-sign-for-the-cra) [![OpenAI and Australia: when an AI agent crosses the limits](https://blog.isecauditors.com/hubfs/OpenAI%20and%20Australia%20-%20when%20an%20AI%20agent%20crosses%20the%20limits.png)](https://blog.isecauditors.com/en/openai-and-australia-when-an-ai-agent-crosses-the-limits) ## [OpenAI and Australia: when an AI agent crosses the limits](https://blog.isecauditors.com/en/openai-and-australia-when-an-ai-agent-crosses-the-limits) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[AI](https://blog.isecauditors.com/en/tag/ai)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Sep 30, 2026, 10:57:16 AM Madrid, September 24, 2026. The Australian Government has confirmed that an artificial intelligence ... [Read more](https://blog.isecauditors.com/en/openai-and-australia-when-an-ai-agent-crosses-the-limits) [![AI Act in 2026: The Legal Obligation Is Already Underway](https://blog.isecauditors.com/hubfs/ria-en-2026-la-obligacion-legal-ya-esta-en-marcha.png)](https://blog.isecauditors.com/en/ai-act-in-2026-the-legal-obligation-is-already-underway) ## [AI Act in 2026: The Legal Obligation Is Already Underway](https://blog.isecauditors.com/en/ai-act-in-2026-the-legal-obligation-is-already-underway) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[AI](https://blog.isecauditors.com/en/tag/ai)[AIR](https://blog.isecauditors.com/en/tag/air)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Sep 29, 2026, 11:06:07 AM As of September 2026, the AI Act can no longer be treated as a future regulation. Regulation (EU) 20... [Read more](https://blog.isecauditors.com/en/ai-act-in-2026-the-legal-obligation-is-already-underway) [![The AEPD Receives the First Reported Data Breach Executed by an AI Agent](https://blog.isecauditors.com/hubfs/primera-denuncia-aepd.png)](https://blog.isecauditors.com/en/the-aepd-receives-the-first-reported-data-breach-executed-by-an-ai-agent) ## [The AEPD Receives the First Reported Data Breach Executed by an AI Agent](https://blog.isecauditors.com/en/the-aepd-receives-the-first-reported-data-breach-executed-by-an-ai-agent) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[AI](https://blog.isecauditors.com/en/tag/ai)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Sep 25, 2026, 1:36:19 PM Madrid, September 25, 2026. The Spanish Data Protection Agency (AEPD) has received the first notific... [Read more](https://blog.isecauditors.com/en/the-aepd-receives-the-first-reported-data-breach-executed-by-an-ai-agent) [![OpenAI Delays Its IPO: AI Security Is Now a Business Risk](https://blog.isecauditors.com/hubfs/ISEC%20Media/Material%20corporativo/Boletines%20Media/ia-safe-from-reputational-risk-to-compliance.jpg)](https://blog.isecauditors.com/en/openai-delays-its-ipo-ai-security-is-now-a-business-risk) ## [OpenAI Delays Its IPO: AI Security Is Now a Business Risk](https://blog.isecauditors.com/en/openai-delays-its-ipo-ai-security-is-now-a-business-risk) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [ISO 42001](https://blog.isecauditors.com/en/tag/iso-42001)[AI](https://blog.isecauditors.com/en/tag/ai)[Implementation of an SGIA](https://blog.isecauditors.com/en/tag/implementation-of-an-sgia) Sep 22, 2026, 11:05:07 AM Madrid, September 14, 2026. OpenAI's decision to postpone its IPO amid concerns about artificial int... [Read more](https://blog.isecauditors.com/en/openai-delays-its-ipo-ai-security-is-now-a-business-risk) [![DORA: From Regulatory Obligation to Real Digital Resilience](https://blog.isecauditors.com/hubfs/dora-de-la-obligacion-a-la-resiliencia.png)](https://blog.isecauditors.com/en/dora-from-regulatory-obligation-to-real-digital-resilience) ## [DORA: From Regulatory Obligation to Real Digital Resilience](https://blog.isecauditors.com/en/dora-from-regulatory-obligation-to-real-digital-resilience) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [DORA Implementation](https://blog.isecauditors.com/en/tag/dora-implementation) Sep 16, 2026, 2:06:45 PM DORA applies from 17 January 2025. Its objective is to ensure that financial entities can withstand ... [Read more](https://blog.isecauditors.com/en/dora-from-regulatory-obligation-to-real-digital-resilience) [![CRA: The 24-hour clock starts on September 11](https://blog.isecauditors.com/hubfs/ISEC%20Media/Blog%20Media/CRA-Reloj-de-notificacion-para-fabricantes.png)](https://blog.isecauditors.com/en/cra-the-24-hour-clock-starts-on-september-11) ## [CRA: The 24-hour clock starts on September 11](https://blog.isecauditors.com/en/cra-the-24-hour-clock-starts-on-september-11) ![Author avatar](https://blog.isecauditors.com/hs-fs/hubfs/Logo_isecauditors_contraccion_HP.png?width=100&length=100&name=Logo_isecauditors_contraccion_HP.png) [Alberto Villar Arévalo](https://blog.isecauditors.com/en/author/alberto-villar) [CRA Law](https://blog.isecauditors.com/en/tag/cra-law)[CRA Compliance Assessment and Support](https://blog.isecauditors.com/en/tag/cra-compliance-assessment-and-support) Sep 10, 2026, 1:30:00 PM 11 September 2026 is not a preparatory date for the Cyber Resilience Act (CRA): it is the first oper... [Read more](https://blog.isecauditors.com/en/cra-the-24-hour-clock-starts-on-september-11) --- Copyright © 2026 - All rights reserved