Our Blog

Technology & Innovation

AI at Work: Opportunity, Risk, and the August Deadline Your IT Team Cannot Ignore

Enterprise AI adoption has outrun governance — and attackers have noticed the gap. From the first AI-aware malware to a 14x phishing surge and the EU AI Act's 2 August deadline, here is what Luxembourg IT teams need to act on now.

Philippe Parage · 3 months ago

8 min read

Read more about AI at Work: Opportunity, Risk, and the August Deadline Your IT Team Cannot Ignore

Compliance & Regulation

EU Cyber Resilience Act: Reporting Starts 11 September 2026

From 11 September 2026, the EU Cyber Resilience Act requires manufacturers to report actively exploited vulnerabilities and severe product-security incidents through ENISA's Single Reporting Platform. Here is what product teams need in place now.

Philippe Parage · 3 months ago

12 min read

Read more about EU Cyber Resilience Act: Reporting Starts 11 September 2026

Technology & Innovation

The 2026 Midyear Intelligence Brief: What the Latest Breach Data Means for Your Luxembourg Business

The Verizon 2026 Data Breach Investigations Report just landed — and the numbers should reshape how every Luxembourg business thinks about risk, technology investment, and daily operations. Vulnerability exploitation has overtaken stolen credentials as the leading breach vector. Ransomware now touches half of all confirmed breaches. Shadow AI has tripled in one year. And Luxembourg itself just completed a major cross-border cyber exercise targeting transport infrastructure. Here is what the data means and what to do next.

Philippe Parage · 4 months ago

15 min read

Read more about The 2026 Midyear Intelligence Brief: What the Latest Breach Data Means for Your Luxembourg Business

Security Operations

When the Watchman Falls: Supply Chain Lessons from the 2026 European Commission Breach

In March 2026, attackers poisoned the EU Commission's own open-source security scanner and walked away with 340 GB of data from 71 European institutions. Five days passed before anyone noticed. Here is what Luxembourg businesses must learn — and do — before the same playbook is used against them.

Philippe Parage · 4 months ago

11 min read

Read more about When the Watchman Falls: Supply Chain Lessons from the 2026 European Commission Breach

Technology & Innovation

Zero Trust Architecture: The Business Case Every CTO Should Read in 2026

Eighty-one percent of organisations plan to implement zero trust, yet fewer than 10% have mature programmes in place. The gap is costing companies an average of $1.76 million more per breach than their better-prepared peers. This practical guide covers what zero trust actually means, why 2026 is the year to act, where implementations stall, and how to build a roadmap that works in Luxembourg's specific regulatory and operational context.

Philippe Parage · 4 months ago

13 min read

Read more about Zero Trust Architecture: The Business Case Every CTO Should Read in 2026

Technology & Innovation

Cloud Data Sovereignty in 2026: What the EU's New Rules Mean for Luxembourg Businesses

The EU Data Act came into force in September 2025. The EU-US Data Privacy Framework is under appeal at the CJEU. GDPR fines hit €7.1 billion. The European Commission awarded a €180 million sovereign cloud contract in April 2026 — and a Luxembourg provider was part of the winning consortium. For businesses operating in Luxembourg, cloud strategy has never been more directly shaped by regulation. Here is what you need to understand, and what to do about it.

Philippe Parage · 4 months ago

16 min read

Read more about Cloud Data Sovereignty in 2026: What the EU's New Rules Mean for Luxembourg Businesses

Technology & Innovation

Wazuh vs OpenVAS: Why You Probably Need Both

Wazuh and OpenVAS get compared as rivals, but they solve different problems: one is a SIEM, the other a vulnerability scanner. Here is what each actually does, where they overlap, and why most security stacks run both.

Philippe Parage · 4 months ago

7 min read

Read more about Wazuh vs OpenVAS: Why You Probably Need Both

Technology & Innovation

Wazuh Alternatives: The Best Open-Source SIEM Options

Wazuh is the default open-source SIEM, but it is not the only one and not always the right one. Here is an honest look at Security Onion, Graylog, Elastic Security, and OSSIM, with when each fits and when it does not.

Philippe Parage · 4 months ago

10 min read

Read more about Wazuh Alternatives: The Best Open-Source SIEM Options

Technology & Innovation

MISP vs OpenCTI: Choosing a Threat Intelligence Platform

MISP and OpenCTI both call themselves threat intelligence platforms, but they were built for different jobs: one shares indicators, the other models knowledge. Here is what each actually does, how they differ, and why many teams run both.

Philippe Parage · 4 months ago

9 min read

Read more about MISP vs OpenCTI: Choosing a Threat Intelligence Platform