{"id":4470,"date":"2025-12-13T00:34:32","date_gmt":"2025-12-12T23:34:32","guid":{"rendered":"https:\/\/davidperezgar.com\/?p=4470"},"modified":"2025-12-13T00:36:51","modified_gmt":"2025-12-12T23:36:51","slug":"wordpress-day-granada-ciberseguridad-aplicada-al-mundo-real","status":"publish","type":"post","link":"https:\/\/davidperezgar.com\/es\/wordpress-day-granada-ciberseguridad-aplicada-al-mundo-real\/","title":{"rendered":"WordPress Day Granada: ciberseguridad aplicada al mundo real"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Ayer se celebr\u00f3 en Granada una jornada centrada en uno de los temas m\u00e1s cr\u00edticos para cualquier proyecto digital: la <strong>ciberseguridad en WordPress<\/strong>. El evento, organizado en el <strong>Centro de Datos de Trevenque<\/strong>, reuni\u00f3 a perfiles t\u00e9cnicos, agencias, desarrolladores, responsables de ecommerce y profesionales del marketing con un objetivo com\u00fan: entender los riesgos reales y c\u00f3mo prevenirlos.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00e1s all\u00e1 de la teor\u00eda, las charlas se enfocaron en <strong>casos reales, m\u00e9tricas claras y decisiones pr\u00e1cticas<\/strong> que afectan directamente al negocio.<\/p>\n\n\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex frontblocks-gallery-grid\" data-layout=\"grid\" data-columns=\"3\" data-gutter=\"20\" data-lightbox=\"false\">\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5144\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-4-1082x812-1.jpeg\" alt=\"Wpday Granada 25 4\" class=\"wp-image-5144\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-4-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-4-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-4-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-4-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5138\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-1-1082x812-1.jpeg\" alt=\"Wpday Granada 25 1\" class=\"wp-image-5138\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-1-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-1-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-1-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-1-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5150\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-7-1082x812-1.jpeg\" alt=\"Wpday Granada 25 7\" class=\"wp-image-5150\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-7-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-7-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-7-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-7-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5152\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-8-1082x812-1.jpeg\" alt=\"Wpday Granada 25 8\" class=\"wp-image-5152\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-8-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-8-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-8-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-8-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5146\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-5-1082x812-1.jpeg\" alt=\"Wpday Granada 25 5\" class=\"wp-image-5146\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-5-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-5-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-5-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-5-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5148\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-6-1082x812-1.jpeg\" alt=\"Wpday Granada 25 6\" class=\"wp-image-5148\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-6-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-6-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-6-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-6-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5142\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-3-1082x812-1.jpeg\" alt=\"Wpday Granada 25 3\" class=\"wp-image-5142\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-3-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-3-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-3-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-3-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1082\" height=\"812\" data-id=\"5140\" src=\"\/wp-content\/uploads\/2026\/10\/wpday-granada-25-2-1082x812-1.jpeg\" alt=\"Wpday Granada 25 2\" class=\"wp-image-5140\" title=\"\" srcset=\"https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-2-1082x812-1.jpeg 1082w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-2-1082x812-1-300x225.jpeg 300w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-2-1082x812-1-1024x768.jpeg 1024w, https:\/\/davidperezgar.com\/wp-content\/uploads\/2026\/10\/wpday-granada-25-2-1082x812-1-768x576.jpeg 768w\" sizes=\"auto, (max-width: 1082px) 100vw, 1082px\" \/><\/figure>\n<\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Una idea clave que lo resume todo<\/h3>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>Una web hackeada es siempre m\u00e1s cara que una web ca\u00edda.<\/strong><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">No solo por el coste t\u00e9cnico, sino por el impacto en reputaci\u00f3n, ventas, campa\u00f1as publicitarias, posicionamiento en Google e incluso consecuencias legales.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Se\u00f1ales tempranas y ataques en curso<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Uno de los mensajes m\u00e1s repetidos fue que <strong>el servidor siempre avisa<\/strong>. El problema es que muchas veces no se est\u00e1n mirando los avisos adecuados.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Algunos datos relevantes:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\">El <strong>51% del tr\u00e1fico en internet son bots<\/strong>.<\/li>\n\n\n\n<li class=\"\">Del total, un <strong>37% corresponde a bots maliciosos<\/strong>.<\/li>\n\n\n\n<li class=\"\">La mayor\u00eda de ataques siguen cuatro fases claras:\n<ol class=\"wp-block-list\">\n<li class=\"\">Reconocimiento<\/li>\n\n\n\n<li class=\"\">Explotaci\u00f3n<\/li>\n\n\n\n<li class=\"\">Persistencia<\/li>\n\n\n\n<li class=\"\">Abuso o monetizaci\u00f3n<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cuando se detectan s\u00edntomas visibles (redirecciones, cambios en contenidos, avisos de Google o suspensi\u00f3n del hosting), el ataque suele estar ya en fases avanzadas.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">WordPress y los vectores de entrada m\u00e1s comunes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Se desmont\u00f3 uno de los grandes mitos: <strong>WordPress no se hackea \u201cporque s\u00ed\u201d<\/strong>. En la mayor\u00eda de los casos, el origen est\u00e1 claro:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\">Vulnerabilidades en c\u00f3digo leg\u00edtimo sin parchear<\/li>\n\n\n\n<li class=\"\">Falta de mantenimiento continuo<\/li>\n\n\n\n<li class=\"\">Credenciales d\u00e9biles o comprometidas<\/li>\n\n\n\n<li class=\"\">C\u00f3digo introducido manualmente sin control (\u201clo has metido t\u00fa\u201d)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">La seguridad no depende de un plugin milagro, sino de <strong>procesos, control y disciplina t\u00e9cnica<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2025: nueva regulaci\u00f3n y nuevas responsabilidades<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">La jornada tambi\u00e9n puso el foco en el <strong>Cyber Resilience Act (CRA)<\/strong>, que apunta a convertirse en el equivalente a la GDPR en materia de ciberseguridad.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Algunos conceptos clave:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\">Seguridad <strong>por defecto<\/strong> y <strong>desde el dise\u00f1o<\/strong><\/li>\n\n\n\n<li class=\"\">Gesti\u00f3n continua de vulnerabilidades<\/li>\n\n\n\n<li class=\"\">SBOM (Software Bill of Materials)<\/li>\n\n\n\n<li class=\"\">Mayor exigencia de transparencia, documentaci\u00f3n y control<\/li>\n\n\n\n<li class=\"\">Responsabilidades claras y posibles sanciones<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">El mensaje es claro: ya no vale con reaccionar cuando hay un problema. La prevenci\u00f3n pasa a ser obligatoria.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Herramientas y buenas pr\u00e1cticas<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Entre las recomendaciones pr\u00e1cticas, destac\u00f3 el uso de <strong><a href=\"https:\/\/wordpress.org\/plugins\/plugin-check\/\" target=\"_blank\" rel=\"noopener\">Plugin Check Plugin<\/a><\/strong> como herramienta esencial para detectar problemas de seguridad en el desarrollo y mantenimiento de plugins WordPress.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Me alegra este \u00faltimo t\u00e9rmino ya que actualmente contribuyo a este proyecto gracias a pertenecer al equipo de Plugins.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El objetivo operativo es ambicioso, pero necesario:<br><strong>cero vulnerabilidades conocidas en producci\u00f3n<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Ponentes y comunidad<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">La jornada cont\u00f3 con ponencias de gran nivel por parte de:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"\"><strong>N\u00e9stor Angulo<\/strong> (Head of Security en Patchstack)<\/li>\n\n\n\n<li class=\"\"><strong>Javier Var\u00f3n<\/strong> (Administrador de Sistemas Linux en Trevenque Group)<\/li>\n\n\n\n<li class=\"\"><strong>Francisco Torres<\/strong> (Consultor WordPress y Responsable del Equipo Global de Plugins de WordPress)<\/li>\n\n\n\n<li class=\"\"><strong>Luis Molina<\/strong> (Responsable de Tecnolog\u00eda WordPress en Trevenque Group)<\/li>\n\n\n\n<li class=\"\"><strong>Guillermo Hidalgo<\/strong> (Maio Legal)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Adem\u00e1s, fue una excelente oportunidad para reencontrarse con la comunidad WordPress y compartir impresiones con profesionales como <strong>Sacra J\u00e1imez<\/strong>, <strong>Fede Padilla<\/strong>, <strong>Jes\u00fas Yesares<\/strong>, <strong>Miguel \u00c1ngel P\u00e9rez<\/strong>, <strong>Antonio Cantero<\/strong>, entre muchos otros.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Conclusi\u00f3n<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">La ciberseguridad en WordPress no es un extra ni un \u201cya lo veremos\u201d. Es <strong>parte directa del negocio<\/strong>.<br>Detectar antes, mantener siempre y reducir riesgos de forma continua es la \u00fanica estrategia viable para proyectos en producci\u00f3n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Eventos como este ayudan a poner foco en lo importante y a tomar decisiones t\u00e9cnicas con impacto real.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ayer se celebr\u00f3 en Granada una jornada centrada en uno de los temas m\u00e1s cr\u00edticos para cualquier proyecto digital: la ciberseguridad en WordPress. El evento, organizado en el Centro de Datos de Trevenque, reuni\u00f3 a perfiles t\u00e9cnicos, agencias, desarrolladores, responsables de ecommerce y profesionales del marketing con un objetivo com\u00fan: entender los riesgos reales y [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":4778,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":2,"footnotes":""},"categories":[45],"tags":[],"class_list":["post-4470","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-eventos"],"_links":{"self":[{"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/posts\/4470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/comments?post=4470"}],"version-history":[{"count":1,"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/posts\/4470\/revisions"}],"predecessor-version":[{"id":5965,"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/posts\/4470\/revisions\/5965"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/media\/4778"}],"wp:attachment":[{"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/media?parent=4470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/categories?post=4470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidperezgar.com\/es\/wp-json\/wp\/v2\/tags?post=4470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}