Your go-to source for cybersecurity news, analysis, and resources.
Progressive imposition of DMARC p=reject by Google and Yahoo since February 2024, new thresholds applicable to B2B senders, step-by-step configuration (strict SPF, DKIM rotation, DMARC, MTA-STS, TLS-RPT, BIMI with VMC), validation tools and concrete cases of common subdomain errors.
Technical benchmark of the three major alternatives to commercial SIEMs, detection capabilities (Sigma rules, MITRE ATT&CK coverage), scalability, TCO, integration with MISP and TheHive, lessons learned from deployments of 5,000 EPS and beyond.
State of the Commercial Spyware Vendor (CSV) market after the 2024-2025 US sanctions, new actors (Intellexa successor, QuaDream, Candiru), zero-click iMessage and WhatsApp infection vectors, detection with Amnesty MVT, recommendations for journalists, NGOs and executives.
Regulation (EU) 2024/1183 in force since May 2024, EUDI wallet deployment timeline, obligations for Relying Parties (banks, telcos, e-commerce), use cases (authentication, qualified signature, attestation sharing), phishing-adapted risks and countermeasures.
Concrete implementation of NIST SP 800-207 in an LPM/NIS2 context, network microsegmentation, mTLS and SPIFFE/SPIRE, integration with existing directories, anonymized lessons learned and articulation with PASSI and SecNumCloud.
France's domestic intelligence service DGSI alerts on data exfiltration risks via public LLMs, integrated AI assistants and autonomous agents. Analysis, documented cases, recommendations for OIV/OSE and articulation with ANSSI frameworks and GDPR.
The CISA KEV (Known Exploited Vulnerabilities) catalog lists actively exploited vulnerabilities. Structure, addition criteria, BOD 22-01, and SIEM/SOAR integration guide for European organizations.
Analysis of the Dropbox Sign (ex-HelloSign) breach: API key attack chain, exfiltration of 68 million accounts, impact on eSignature certificates and GDPR notification obligations.
A critical vulnerability in the Kubernetes admission controller allows privilege escalation through ServiceAccount token manipulation. Technical analysis, cloud-native impact and remediation plan.