Exploiter davantage les données sans accroître les risques associés : c’est l’un des grands défis auxquels les organisations sont aujourd’hui confrontées. Pendant longtemps, cette question a été perçue comme un arbitrage difficile entre deux objectifs à concilier : valoriser les…
This article explores the challenges of access control in modern data environments, characterized by a growing number of use cases, increasing data volumes, and expanding exposure points. We begin by reviewing the main access management models, as well as data-centric…
The purpose of this article is to provide a landscape of existing solutions in order to identify those that could fit into the practices of a professional pentester/cybersecurity auditor. The analysis covers their effectiveness in realistic environments, their cost, their…
With the transposition of NIS 2 into French law approaching, organizations must prepare for a significant strengthening of cybersecurity requirements. For the entities concerned, the question is no longer whether operational security will be affected, but how. This article explains the…
This figure reveals a profound shift: backups, often considered the last resort, have now become prime targets for attackers. When faced with a major cyberattack, traditional continuity plans are no longer sufficient. Indeed, they fall short in industrial environments, particularly…
In modern DevOps environments, CI/CD pipelines automate code development, testing, and deployment, enabling rapid delivery and scalability while significantly expanding the attack surface. CI/CD audits conducted in 2025 and 2026 revealed that credentials leaked in repositories, misconfigured runners, insecure artifact…
The increased professional use of mobile devices, mobile phones and tablets, as well as the forced adoption of remote work during the Covid crisis, have led to a multiplication of mobile work situations in companies. Two cases can be distinguished: remote work…
Purple Teaming has become a key practice for organizations looking to assess and improve their detection and response capabilities. By bringing together offensive and defensive teams, Purple Team exercises help validate security controls, identify detection gaps, and strengthen incident response…
As highlighted in our previous article, Electric vehicle charging infrastructures: Energy performance and new cybersecurity challenges, charge point operators (CPOs) operate within a demanding business model, where profitability depends on their ability to drive recurring usage of their networks. In this context, user experience becomes a key…
1. AI is no longer a fantasy, it's a reality that IAM must not miss Two years ago, we asked whether artificial intelligence (AI) could represent a revolution for IAM in our article “Artificial intelligence: a revolution in IAM? -…
