LAPSUS$: AstraZeneca Breach
Sensitive data theft via a Cloud misconfiguration. Analysis of privileged access compromise.
Data BreachCloud Security
Read article
Technology Watch
I use Feedly every day to stay up to date in real time on new cyber threats and critical vulnerabilities.
News Feed (2024 - 2026)
Generative AI & Targeted Phishing
Using AI to create spear-phishing campaigns undetectable by traditional filters. Need for reinforced Endpoint defense.
AISocial Engineering
Technical details
CISA Advisories: Focus on VPNs
Discovery of 0-day vulnerabilities in several enterprise VPN gateways. Priority on remote access patching.
CISAVPNRemote Access
View list
Threats to DNS Protocol
DNS Hijacking campaign targeting public services. Importance of DNSSEC implementation.
NetworkDNSSEC
CERT-FR Advisory
Mass Securing of Industrial IoT
The new security standard for connected devices in enterprise environments. Focus on strong authentication.
IIoTProtocols
Read study
Vulnerability Exploitation in VMware
Surge in Ransomware attacks targeting unpatched ESXi hypervisors.
VirtualizationESXi
Technical analysis
Denial of Service (DDoS) Attacks
Record increase in DDoS attack power driven by IoT botnets. Layer 4 and 7 protection.
DDoSNetwork
Trend Micro Report
Wi-Fi Vulnerabilities (WPA3)
Analysis of new side-channel attacks impacting WPA3 security.
Wi-FiWireless Security
Technical source
Zero Trust Network Access (ZTNA)
Phase-out of traditional VPNs in favor of the Zero Trust model in multi-site environments.
ArchitectureZero Trust
White paper
2024 Cyber Review & 2025 Outlook
Retrospective on major cyberattacks and anticipation of new malicious encryption techniques.
Annual ReviewStrategy
ANSSI Report
Hospital Cyberattacks Overview
CERT-FR analysis of the surge in ransomware targeting the healthcare sector. Focus on network segmentation.
HealthcareSegmentation
ANSSI Report
Critical Vulnerability on Windows Server
Active exploitation of a Kerberos flaw allowing privilege escalation (Domain Admin). Urgent AD updating needed.
ADWindows Server
Technical details
Paris 2024 Olympics Cybersecurity
Overview of Denial of Service (DDoS) and phishing attempts during the event. Success of perimeter defense.
DDoSSOC
Read summary
0-Day Vulnerability in Fortinet Firewalls
Technical analysis of remote code execution via SSL-VPN. Recommendation to transition to ZTNA.
FortigateVPN
Bleeping analysis
Dismantling of the LockBit 3.0 Group
International Operation "Cronos" against the infrastructure of the largest Ransomware-as-a-Service group.
RansomwareLaw Enforcement
Read article
France Travail Data Breach
Personal data theft affecting 43 million users. Analysis of exfiltration methods via agent access.
Data BreachPhishing
Attack details