Latest resources

The news hit the headlines at the beginning of this week: an unidentified threat actor abused a vulnerability in the temperature controllers of freezers in multiple French supermarkets, causing perishable goods to thaw to the point where they had to be thrown away. In the night of 11 to 12 October, hundreds of stores across Intermarché/Netto, Coopérative U, Carrefour, Monoprix and Leclerc were affected. Could it happen in Belgium? Yes.

Red team and blue team are borrowed from military wargaming: attackers versus defenders. In cybersecurity, the red team runs authorised attacks, including penetration testing, while the blue team detects and responds. Approach Cyber, formed from the merger of AXS Guard and Approach Cyber, now delivers both.

Setting up an out-of-office (OOO) reply is usually the last thing on your list before a holiday, so it gets written in a hurry. But a careless auto-reply can hand an attacker exactly what they need for phishing or social engineering: who is away, for how long, and who is covering for them.

Not every phishing email aims to install malware. Many are built purely to harvest credentials, and MITRE ATT&CK classifies that behaviour as Phishing for Information (T1598), not Phishing (T1566) for initial access. The distinction matters: it sharpens detection, demonstrates genuine SOC maturity, and closes gaps that a generic security awareness programme alone cannot catch.

CPS threat detection secures operational technology (OT) environments by passively monitoring network traffic, instead of forcing IT and OT teams to merge systems or standards. It gives security teams full visibility into industrial assets and threats in real time, without touching production, downtime, or existing OT processes. In a previous article, “OT-Security vs IT-Security,” we looked at the substantial differences between IT and OT. This one goes further: how do you actually strengthen OT security once you understand those differences?

Phishing is a social-engineering attack in which criminals impersonate a trusted contact, like a bank, a well-known brand or a colleague, to steal login details, payment data or other sensitive information. This article breaks down five common phishing types and shows how structured security awareness training and phishing simulation reduce the risk for your organisation.