Blog

A data leak refers to the unauthorized disclosure of personal or sensitive information belonging to an organization or its users. These disclosures can involve millions of records, including personal data such as social security numbers, contact details, or other confidential inf…

In cybersecurity, the collective imagination often brings to mind sophisticated attacks, organised cybercriminal groups, or novel vulnerabilities discovered by researchers. Yet, the reality in the field is often more prosaic. This is something we observe every day at Board of Cyb…

In a context where digital exchanges are at the core of business processes, securing application traffic and APIs is no longer optional but an operational requirement. This article explains to CISOs, CIOs, and security leaders why the TLS protocol and strict management of X.509 c…

Pentest vs EASM: how effective are they at detecting cyber vulnerabilities? Faced with growing cyber risks, CISOs are looking to improve the detection of threats to their information systems. Analysis of the external attack surface (EASM) and implementing pentests make it possibl…

The Verizon Data Breach Investigations Report (DBIR) 2026 ranks vulnerability exploitation as the leading initial access vector. It accounts for 31% of the compromises analysed, ahead of credential theft. At the same time, the median time to remediate a vulnerability known to be …

ISO/IEC 27001 certification is a recognised benchmark for organisations seeking to structure their information security management. It is based on a risk-based approach, documented policies, appropriate controls and a continuous improvement process. However, certification alone d…