Chargement…
Independent press · Cybersecurity, governance & the human factorContactSearchNewsletterThe book ▸EN · FR
Cyber revue · Governance & the human factor
Edition of 1 November 2026 · No. 155Independent pressGran Canaria · Bilingual FR·EN
Topic
Dirigeants
16 analyses on this topic, from the most recent to the oldest.
CybersecurityWe fix whatever makes noiseOn 21 October, PHP rushed out fixes for two critical flaws, and organisations you normally have to push into patching asked to do it. That same month, a Node.js flaw with identical consequences, the compromised keys of a certification authority and the controllers running supermarket cold rooms drew nothing like the same urgency. When we want to, we can, and what we want to fix now depends on the noise.
LeadershipWe accept cyber risk the way we pick the plant in receptionOn the night of 11 to 12 October 2026, attackers forced the defrosting of refrigerated units in around 700 French supermarkets, through refrigeration controllers reachable from the internet, many of which had not been updated in years. A flaw in those boxes had been reported to Danfoss in February 2023, and the remedy published three months later fitted on one line: restrict network access. A cyber risk is a business risk, and we accept it roughly the way we pick the plant in reception.
LeadershipParliament has never been your CISOOn 6 October 2026, the French National Assembly pulled from its agenda the bill that is meant to transpose NIS2, two years after the deadline set by Brussels. Within the hour, professional networks were calling it a disaster for small and medium businesses, abandoned by politicians who are not doing their job. Not one of the measures that law will require needs it in order to be applied on Monday morning.
CybersecurityI can't listen to CISO podcasts anymoreYesterday I started one, I cut it off after eight minutes. I already knew everything. And the worst part is that I know exactly why it's like this, because I'm often on the other side of the mic, being a CISO myself.
CybersecurityMythos is no surprise. Here is what I was saying nine months ago.99% of the vulnerabilities Mythos found are still open. The patching debt does not date from April 2026, it just stopped being invisible.
CybersecurityYou have 29 minutes. You are already losing 20 of them. And Mythos is not the problemYou are a CISO. It is 9:14 on a Tuesday morning. Your SIEM has just flagged a lateral movement alert. Twenty minutes later, you launch your first containment action. The attacker, meanwhile, needed only 29 minutes to move across your network.
CybersecurityDelve: when compliance "in a few clicks" turns out to be hot airA 300-million-dollar startup accused of fabricating compliance certifications. Hundreds of companies potentially exposed. And a lesson the cybersecurity world stubbornly refuses to learn.
CybersecurityThey refuse to pay a ransom... and fund cybersecurityCybersecurity: your company is paralyzed by a cyberattack. Stolen data, locked systems, a ransom demanded. Panic, stress, media pressure. A
CybersecurityCybersecurity: small businesses are not ready. And it will cost them.Talk to five owners of small businesses and you get the picture: cybersecurity is still a vague, distant, almost abstract idea. As long as no ransomware freezes the screen of Chantal in accounting, everyone carries on as before.
CybersecurityOpen letter to Emmanuel Macron. Cybersecurity is not a technical subject. It is a duty of the State.Mr President Macron. I am not writing to plead a cause. I am writing because it is time to stop pretending.
LeadershipIt's not a question of motivation. It's a question of decision.People often ask me how I manage so many things at once. Work, family, music, sport, talks, articles, public speaking, threat watch, reading, meetings, passing it on…, And the answer almost always disappoints…
CybersecurityTraining executives in cybersecurity? Fine. But not like this.Today, some top business schools pride themselves on adding a cybersecurity module to their management programmes. EM Lyon, HEC, ESCP: they have all understood that digital security is now a strategic subject. Good.
CybersecurityWhy French SMEs are still stuck in 1980 (and why that's partly their own fault)Let me be blunt: you can't ask cybersecurity to move forward if some companies refuse to leave the minitel behind. And that's exactly what we still see today in most French SMEs. Yes, threats are evolving.
EconomyAnother attack on family holding companies? How long are we going to keep flying blind?Once again, France is going after the people who build, pass things on and organise.
Artificial IntelligenceBack from Barcelona: AI, crisis and leadershipI spent a few days in Barcelona running a workshop on AI and crisis management in cybersecurity. A packed room, very different profiles, and one shared observation: the fog. Too much information, too many tools, not enough bearings.
LeadershipLeadership and chaos: 5 mistakes we always see in a cyber crisisThere are moments when everything speeds up. An alert goes off. A service collapses. Nothing responds anymore. And then everyone turns to "management".
Newsletter
Don't miss the next analysis