Lessons learned from the field on cyber resilience
by Julien Mousqueton, Field CISO @ Cohesity
I migrated one of my email domain from ProtonMail to a self-hosted Mailcow instance on OVH, mainly to get proper control over spam filtering with Spamhaus as an RBL, and set up the full DNS stack: SPF, DKIM, DMARC, BIMI, MTA-STS and TLS-RPT.
Read More
Kaspersky has released an updated study on real-world password strength, analyzing 231 million unique passwords from dark web leaks collected between 2023 and 2026. The results are grim: 48% of passwords can be cracked in under a minute, and 60% fall within an hour
Read MoreWith the growing number of frameworks published by MITRE, it is easy to lose track of their respective purposes and how they relate to one another. In this post, I aim to clarify the role of each framework and explain how they fit together to support modern cyber defense, incident response, and resilience.
Read More
The latest Version 29 of the Ransomware Ecosystem Map from Orange Cyberdefense updates and expands the visual representation of ransomware groups, their variants, and relationships, reflecting the evolving threat landscape from 2015 to 2026. This release adds numerous new actors and refines existing connections, providing security teams and researchers with a clearer, up-to-date view of ransomware operations and trends.
Read More
Let’s Encrypt has officially launched IP‑based TLS certificates, enabling secure HTTPS connections directly to IPv4 and IPv6 addresses — no domain name required. These certificates are short‑lived valid for just 160 hours (about 6 days).
Read More
The Global Risks Report 2026, published by the World Economic Forum (WEF) with contributions from partners such as Marsh Risk and Zurich Insurance, provides a comprehensive overview of the main risks facing public and private decision-makers in 2026 and beyond.
Read More
Sometimes, the most unexpected opportunities come from sharing your passion with the community. For me, that happened at BSides Bournemouth in August 2025.
Read More
Yet-Another-Blog is a modern multilingual blog engine, built with Python (Flask) and SQLite to make writing, scheduling, and publishing content in multiple languages easier – currently English, French, and German.
Read More
PizzINT, also known as the Pentagon Pizza Index, is a real-time dashboard that monitors activity at six pizzerias around the Pentagon in Washington, D.C. It uses publicly available data from Google Maps’ “Popular Times” feature to generate an activity index inspired by DEFCON readiness levels.
Read More
LinkedIn modernized its traffic management infrastructure by using HAProxy to improve scalability, security, and the performance of its services in response to a massive growth in traffic volume
Read More