Cybersecurity guidance, without the jargon
Practical answers for SME leaders, CISOs and IT teams who need to make informed security decisions.
AI phishing in 2026: how to detect a credible message
AI does not make every phishing attempt undetectable. It mainly removes mistakes, speeds up personalisation, and makes it easier to impersonate a voice or image. These signals remain reliable.
Explore the English library
- 6 July 20267 min
SharePoint Server: CVE-2026-45659 is being exploited—patch now
CISA has added SharePoint vulnerability CVE-2026-45659 to its red list. Here is the real risk to a French SME or mid-sized company, and a 48-hour action plan.
Read the article - 25 June 20268 min
CEO fraud and BEC: how SMEs lose tens of thousands of euros in one transfer
An email from the CEO, an urgent transfer request, new bank details. CEO fraud requires no technical skill, yet generates more money than ransomware. What really happens and how to stop it.
Read the article - 24 June 20269 min
TLPT and DORA: mandatory advanced penetration testing for financial entities
DORA has applied since January 2025. For significant financial entities, Article 26 requires advanced penetration testing based on real-world threats. What this means in practice.
Read the article - 23 June 20267 min
Ransomware in 2026: 5 groups targeting French SMEs
These groups no longer encrypt immediately. They copy data first, stay hidden, then strike. What Akira, RansomHub, Qilin, DragonForce and Medusa are doing this year.
Read the article - 23 June 202612 min
Penetration testing: what it really reveals about your security
A penetration test is not just a list of CVEs. It is a simulated real-world attack, with a report showing exactly how an attacker gets in, how far they can go and what they can take. Here is what that looks like in practice.
Read the article - 23 June 20268 min
Cybersecurity awareness: why employees are your first line of defence (and your first weakness)
A firewall cannot protect you when an employee unwittingly hands over their credentials. Cybersecurity awareness is the only measure that addresses this attack vector. Here is how to make it effective.
Read the article - 9 May 20267 min
Phishing simulations: 12 role-based scenarios
Generic phishing no longer trains anyone. Here are 12 role-based scenarios you can launch tomorrow, with the pretext, channel, and intended lesson.
Read the article - 8 May 20267 min
Digital assets: 25 questions for business leaders
Your data, tools, brand and accounts: what are they worth if you lose access tomorrow? 25 questions for business leaders who want to know where they stand.
Read the article - 7 May 20266 min
Fractional CISO: cost and company size
In-house or fractional CISO? At what company size? For what annual budget? A detailed breakdown with figures for the market's 4 pricing models.
Read the article - 6 May 20267 min
ISO 27001 vs NIS2: comparison and combined strategy
ISO 27001 or NIS2? You can prepare for both together. A clear comparison, overlaps to leverage and a 12-month roadmap.
Read the article - 5 May 20266 min
21-point NIS2 checklist for SMEs
21 concrete controls to assess your NIS2 readiness in under an hour. Governance, technology and organisation: the checklist to use before the final texts.
Read the article - 4 May 20268 min
NIS2 for SME leaders: who is affected?
Could your SME fall within the scope of NIS2? Where does French transposition stand? A visual guide to help you decide in 10 minutes.
Read the article