Threat intelligence & analysis
Reviewed intelligence notes for security leaders, executives and highly exposed organisations. Untranslated publications remain available in their original French version.
Threat brief · 19 September 2026
In industrial environments, ransomware is not confined to IT downtime. Spread through support functions, loss of visibility, or placing operations into a precautionary safe state can affect production and continuity. The priority is to safeguard critical functions, define the compromised scope, and organise a controlled recovery.
Read the intelligence noteThreat brief · 19 September 2026
Identity has become a central control plane in cloud environments. A hijacked session, an over-privileged account, or a poorly governed application can grant persistent access without any visible exploitation of a conventional vulnerability. Defence relies on the quality of authentication signals, the reduction of privileges, and the ability to rapidly revoke compromised access.
Read the intelligence noteStrategic analysis · 19 September 2026
The concentration of digital dependencies turns certain service providers into gateways to numerous organisations. Managing the supply chain cannot therefore be confined to contractual clauses: it requires visibility over dependencies, technical access and update mechanisms, as well as the capability to detect indirect compromise.
Read the intelligence noteStrategic analysis · 19 September 2026
A major cyber incident does not remain a technical matter. It requires executive management to make decisions with incomplete information: maintaining or suspending a service, isolating a perimeter, notifying, communicating, and initiating recovery. Preparedness must provide decision criteria, clear responsibilities, and a shared understanding of critical dependencies.
Read the intelligence noteRegulatory & sovereignty brief · 10 September 2026
The NIS2 framework strengthens governance, risk management and notification requirements for numerous entities.
Read the intelligence noteThreat brief · 01 September 2026
Ransomware attacks are reducing the window between initial intrusion and impact. Early detection and crisis procedures are becoming decisive.
Read the intelligence noteOfficial sources
Alerts from 13 official sources (CERT-FR/ANSSI, CISA, FBI, CNIL, NCSC UK, BSI/CERT-Bund, JPCERT/CC, NVD, EDPB, Canadian Centre for Cyber Security, Cybermalveillance.gouv.fr, CERT-EU), summarised from the official text. Always refer to the official source.
A confidential discussion can connect threat signals to your critical assets, operations and decisions.
Confidential discussion