Our Blog

Technology & Innovation

Wazuh vs Elastic Security: Which SIEM Fits Your Team?

Wazuh offers a more opinionated security stack; Elastic Security offers a broader analytics platform. Compare architecture, detection, cost and operating effort.

Philippe Parage · 2 days ago

3 min read

Read more about Wazuh vs Elastic Security: Which SIEM Fits Your Team?

Technology & Innovation

OpenCTI Alternatives: The Best Open-Source Options in 2026

OpenCTI is powerful, but MISP, IntelOwl, Yeti or a smaller STIX/TAXII pipeline may fit better. Compare the options by workflow, team and operating effort.

Philippe Parage · 2 days ago

3 min read

Read more about OpenCTI Alternatives: The Best Open-Source Options in 2026

Technology & Innovation

OpenAEV vs MISP: Different Tools That Work Better Together

OpenAEV validates security controls through adversary exercises; MISP manages and shares threat intelligence. They are not substitutes—here is where each fits.

Philippe Parage · 2 days ago

3 min read

Read more about OpenAEV vs MISP: Different Tools That Work Better Together

Security Operations

Your Second Factor Is Being Stolen in Real Time. Microsoft's Passkey Deadline Is a Good Reason to Fix It.

You rolled out multi-factor authentication years ago and ticked the box. Attackers have since stopped trying to defeat the code and started stealing the session it produces. From 1 September, Microsoft begins turning on passkeys by default in Entra ID, and from 1 February 2027 it stops delivering SMS and voice codes altogether. Here is what actually changed, and how to run the migration rather than have it run over you.

Philippe Parage · 1 week ago

11 min read

Read more about Your Second Factor Is Being Stolen in Real Time. Microsoft's Passkey Deadline Is a Good Reason to Fix It.

Training & Exercises

NIS2 Made Staff Training a Legal Duty. The Evidence Says Most of It Does Not Work.

Luxembourg's NIS2 law obliges management bodies to be trained and entities to train their staff. The largest controlled study of enterprise phishing training ever run found it reduced click rates by 1.7 percentage points, and that recent annual awareness training made no measurable difference at all. Here is how to build a training programme that satisfies the ILR and actually reduces your risk, rather than one that only does the first.

Philippe Parage · 4 weeks ago

10 min read

Read more about NIS2 Made Staff Training a Legal Duty. The Evidence Says Most of It Does Not Work.

Technology & Innovation

When the Outage Is the Incident: Why IT and Security Can No Longer Be Separate Budgets

A summer of hyperscaler outages, a wave of critical vulnerabilities in the tools running your infrastructure, and Luxembourg's NIS2 self-registration deadline all landed within weeks of each other. None of it is coincidence: it is what happens when IT operations and security are managed as separate problems. Here is what the last few months actually mean for your business, and where to start.

Philippe Parage · 1 month ago

9 min read

Read more about When the Outage Is the Incident: Why IT and Security Can No Longer Be Separate Budgets

Technology & Innovation

The Vulnerability Flood: Why AI Is Breaking Traditional Patch Management

Chrome fixed more security bugs in two releases this year than in the previous two years combined, and it is not an outlier. AI is accelerating vulnerability discovery on both sides of the fence faster than most patch cycles can keep up. Here is what that means in practice for your technology, security, and training programmes.

Philippe Parage · 1 month ago

9 min read

Read more about The Vulnerability Flood: Why AI Is Breaking Traditional Patch Management

Technology & Innovation

AI Technical Debt: Why Rushed AI Projects Are Costing Businesses More Than They Save

Most AI pilots launched in 2025 never reached production, and many that did are now the most expensive line in the IT budget. Here is where AI technical debt actually hides, why it accumulates so fast, and what it takes to build AI systems that keep paying off instead of quietly draining your margins.

Philippe Parage · 1 month ago

8 min read

Read more about AI Technical Debt: Why Rushed AI Projects Are Costing Businesses More Than They Save

Technology & Innovation

Your Company Now Has More AI Agents Than Employees. Who Owns Their Identities?

Machine identities now outnumber human employees by well over 100 to 1 in many organisations, and AI agents are the fastest-growing category. Most companies cannot say how many non-human identities they have, who owns them, or what would happen if one were compromised. Here is why that gap has become a business-critical problem, not just a security footnote, and what a practical governance programme looks like.

Philippe Parage · 1 month ago

12 min read

Read more about Your Company Now Has More AI Agents Than Employees. Who Owns Their Identities?