Cybersecurity made clear, in your inbox
My analysis of cybersecurity, governance and the human factor: the essentials, no jargon, no FUD. Sent as the news unfolds, when a topic deserves it, without spamming you.
A clear read on cyber news, straight to your email. You can unsubscribe in one click, whenever you like.
What you will receive
The incidents that matter
The leaks, attacks and cases that really matter, explained plainly, with a practitioner's perspective.
What the law changes for you
NIS2, DORA, GDPR: what they mean in practice, without the consultants' jargon.
Field-tested reflexes
Governance, psychology and sound reflexes, drawn from my day-to-day as a CISO, not from theory.
A taste of the tone
The newsletter extends the work published on the site, right into your inbox. Here are the most recent pieces.
On 25 September the Académie Goncourt withdrew Thélyson Orélien's novel, four days after he was accused of having written it with an artificial intelligence. Since then, texts he signed and other people wrote have surfaced almost daily, from a 2010 poem lifted from a Zen monk to opinion pieces translated from the Philippine press. All of it could have been checked for sixteen years with a search engine and a local library, and not one of his publishers bothered.
CybersecurityThe only backup that counts is the one you have already restoredOn 15 September 2026, Amazon Web Services wrote that it could not restore access to resources and data hosted exclusively in its Bahrain region. The three availability zones of that region were damaged by Iranian strikes, in March and then in April. Its own documentation states that those zones all sit within a hundred kilometres of one another.
CybersecurityA genuine government domain was enough to obtain passports and ten years of Bitcoin historyOn 11 September 2026, Revolut customers received a message titled « Urgent security update about your Revolut account ». In it, the bank explained that it had handed over their identity documents, their verification selfie and their entire transaction history to an address operating inside the domain of a government agency. I received that notification, took it for phishing, and deleted it.
Leave your email: you will get the next edition as soon as a topic deserves it.