Your questions, clear answers

Because criminal groups don't do surgical targeting: they automate, scan and test. It isn't the company that's targeted but its exposed surface, like a badly closed RDP port or a machine that was never updated.

In February 2026, the Resilience Act is still under parliamentary debate, with adoption hoped for in the first quarter and a compliance roadmap spread over three years, whereas the directive was meant to be transposed before October 2024.

It's a stealthy piece of malware that often installs without your knowledge, through an attachment, a booby-trapped download, a fake piece of software or a dubious extension. It harvests passwords, session cookies, credentials and keys, sometimes keystrokes or clipboard contents, then sends it all to the attacker's server.

An attack that compromises your phone without any action on your part: all it takes is for a booby-trapped image to be received and automatically processed by an app like WhatsApp for the malicious code to run.

A DoS attack comes from a single source that sends too many requests to a service until it breaks. A DDoS is the same logic, but 'distributed': a crowd of machines attacks at the same time, which makes it far harder to block.

The incidents of late 2025 (police, universities, big retail chains) show that even the best-resourced players are exposed. Modern attacks look like everyday life and target normal people who are busy and trusting.