Chargement…
Independent press · Cybersecurity, governance & the human factorContactSearchNewsletterThe book ▸EN · FR
Cyber revue · Governance & the human factor
Edition of 13 September 2026 · No. 148Independent pressGran Canaria · Bilingual FR·EN
Section
Leadership & Economy
Governance, decision-making and the economics of security, seen from the boardroom, not just the SOC.
CybersecurityA genuine government domain was enough to obtain passports and ten years of Bitcoin historyOn 11 September 2026, Revolut customers received a message titled « Urgent security update about your Revolut account ». In it, the bank explained that it had handed over their identity documents, their verification selfie and their entire transaction history to an address operating inside the domain of a government agency. I received that notification, took it for phishing, and deleted it.
Cybersecurity153 million identity documents for sale, and not one stolen from a careless userA criminal service put the licence scans of 153 million Americans and Canadians up for sale this week. Not one of those documents came out of a phishing campaign: they were produced by routine checks, required by professionals, in situations where everyone did what they were asked. The theft comes at the end of this story, and everyone is looking at the end.
PoliticsCybersecurity must not become an election issueThe summer of 2026 gave France a glimpse of what a digitised administration produces when it is not secured. The political year is opening, the presidential campaign is starting, and cybersecurity is finally going to find its place in public debate. That is exactly what worries me.
CybersecurityA week of data breaches in France: the file nobody wantedBetween 15 and 22 August 2026, some thirty disclosed incidents assembled a file on French citizens that no authority would have approved. Why it is happening, why now, and what to fear next.
CybersecurityFrance's tax authority knew in late June. You found out on 13 AugustIn February, the French tax authority had 1.2 million records stolen from FICOBA, the national register of French bank accounts, using one officer's credentials. In late June, it had 678,000 tax files stolen using one officer's credentials. In between, the Prime Minister announced 200 million euros for the state's cybersecurity.
PoliticsThe century turns on technology. Our politicians invent a tax by the gigabyte.The Socialist program's tax on data flows is not just a bad idea. It is the confession of a political class that, faced with the technological shift of the century, found nothing better than its oldest reflex: look for what is not yet taxed, and tax it.
CybersecurityFrance's worst data breaches of 2026: the ranking (spoiler: you're in it)6,167 data breaches in 2025, a record, and 2026 is already doing better. From the Almerys brother-in-law nobody ever introduced you to, to the teenager who cracked open the ANTS vault by changing one digit in a URL, here is the ranking of France's worst breaches of the…
CybersecurityI can't listen to CISO podcasts anymoreYesterday I started one, I cut it off after eight minutes. I already knew everything. And the worst part is that I know exactly why it's like this, because I'm often on the other side of the mic, being a CISO myself.
CybersecurityMicrosoft held two opposite positions in a single week. That is the flaw.While the industry re-litigates responsible disclosure, a flaw that bypasses BitLocker is still sitting unpatched. And Microsoft, which wrote the rules of the game, just proved it only follows them when the mood takes it.
CybersecurityAI and chatbots tell you you're right. That's the worst service they can do you.Chatbots are built to tell you you're right. Researchers at MIT have shown that even a perfectly rational reasoner falls into the trap. When your job is to spot what's wrong, that's a problem.
CybersecurityYou have 29 minutes. You are already losing 20 of them. And Mythos is not the problemYou are a CISO. It is 9:14 on a Tuesday morning. Your SIEM has just flagged a lateral movement alert. Twenty minutes later, you launch your first containment action. The attacker, meanwhile, needed only 29 minutes to move across your network.
CybersecurityDelve: when compliance "in a few clicks" turns out to be hot airA 300-million-dollar startup accused of fabricating compliance certifications. Hundreds of companies potentially exposed. And a lesson the cybersecurity world stubbornly refuses to learn.
SocietyData breach at MédecinDirect: when digital health forgets what matters mostThe cyberattack that hit MédecinDirect, disclosed in early December, affects up to 323,000 patients. The number is already enormous. But that is not what should worry us the most.
SocietyFree transport, stolen data: the scammers travel first classIt is yet another Facebook scam, but one that works far too well. For several weeks now, hundreds of French people have been falling for a tempting promise: a free or heavily discounted pass for public transport. And the catch?
CybersecurityFine for X, offensive against Telegram: Europe is waging war on digital freedomOn Friday 5 December 2025, the European Commission fined X, Elon Musk's platform, 120 million euros. On the surface: a simple slap on the wrist for failing to comply with the Digital Services Act (DSA). In reality?
CybersecurityThey refuse to pay a ransom... and fund cybersecurityCybersecurity: your company is paralyzed by a cyberattack. Stolen data, locked systems, a ransom demanded. Panic, stress, media pressure. A
CybersecurityBlack Friday, Christmas, Sales: Cybercriminals Are Waiting for YouEvery year, at the same time, the queues move to virtual carts. Promotions explode, ads flash, "must-have" deals multiply... and in the shadows, cybercriminals are rubbing their hands.
EconomyAI doesn't replace us, it weakens us... if we let itWhat if AI didn't make us stupid... but forced us to become smarter?EconomyAI in tourism: connected to everything... except the reality of the risks?Tourism is rushing into generative AI: customer service, CRM, booking engine. It gets plugged into everything, but into no framework at all. Notes from an audit, and the risks almost nobody is looking at.
LeadershipIt's not a question of motivation. It's a question of decision.People often ask me how I manage so many things at once. Work, family, music, sport, talks, articles, public speaking, threat watch, reading, meetings, passing it on…, And the answer almost always disappoints…
CybersecurityTraining executives in cybersecurity? Fine. But not like this.Today, some top business schools pride themselves on adding a cybersecurity module to their management programmes. EM Lyon, HEC, ESCP: they have all understood that digital security is now a strategic subject. Good.
CybersecurityWhy French SMEs are still stuck in 1980 (and why that's partly their own fault)Let me be blunt: you can't ask cybersecurity to move forward if some companies refuse to leave the minitel behind. And that's exactly what we still see today in most French SMEs. Yes, threats are evolving.
EconomyBanking: the overdraft is no longer a safety valve. It is becoming a financial product.For decades, the bank overdraft was a kind of silent pact between the customer and the bank. A safety valve. A buffer between two due dates. Not an ideal solution, but a human reality: life does not wait for the date of the transfer.
EconomyAnother attack on family holding companies? How long are we going to keep flying blind?Once again, France is going after the people who build, pass things on and organise.
CybersecurityThe AWS incident: it was not an outage, it was a reality checkVenmo, Fortnite, Snapchat, Zoom, Coinbase... everything started to crash. Not because of ransomware, a large-scale attack or a geopolitical conflict.
LeadershipLeadership and chaos: 5 mistakes we always see in a cyber crisisThere are moments when everything speeds up. An alert goes off. A service collapses. Nothing responds anymore. And then everyone turns to "management".
Newsletter
Don't miss the next analysis