Your questions, clear answers

Because criminal groups don't do surgical targeting: they automate, scan and test. It isn't the company that's targeted but its exposed surface, like a badly closed RDP port or a machine that was never updated. In 2025, very small businesses, SMEs and mid-size companies accounted for 48% of the ransomware victims recorded by ANSSI.

In 2026, the Resilience Act that transposes NIS2 is still not adopted: the Senate passed it at first reading on 12 March 2025, but its examination in the National Assembly is pushed back to September 2026 at the earliest. On 9 July 2026, the European Commission referred France to the EU Court of Justice over this delay, even though the directive was meant to be transposed before 17 October 2024.

It's a stealthy piece of malware that often installs without your knowledge, through an attachment, a booby-trapped download, a fake piece of software or a dubious extension. It harvests passwords, session cookies, credentials and keys, sometimes keystrokes or clipboard contents, then sends it all to the attacker's server.

An attack that compromises your phone without any action on your part: all it takes is for a booby-trapped image to be received and automatically processed by an app like WhatsApp for the malicious code to run. No link to click, no attachment to open, no file to approve.

A DoS attack comes from a single source that sends too many requests to a service until it breaks. A DDoS is the same logic, but 'distributed': a crowd of machines attacks at the same time, which makes it far harder to block.

The incidents of late 2025 (police, universities, big retail chains) show that even the best-resourced players are exposed. Modern attacks look like everyday life and target normal people who are busy and trusting.