Latest resources

Stay up to date with all our news!

NIS2 in Belgium: From updating to long-term compliance

The European NIS2 Directive requires affected organisations to demonstrate a high and sustained level of cybersecurity. The key deadlines have now passed, including the 18 April 2026 deadline for critical entities.

Beyond the inbox: Turning your employees into a Human Firewall

In an exclusive webinar hosted by Approach Cyber in partnership with KnowBe4, security experts broke down why traditional security awareness programs fail and how organisations can build an impenetrable “Human Firewall.”

How an exposed server became a weapon, findings of our own experiment

At Approach Cyber/AXS Guard, we don’t just rely on theory. We want to understand our adversaries. As an experiment we put a ‘vulnerable’ innocent looking service online and left it there to see who would find it. What happened next was a good reminder of how the internet really works: it doesn’t take long for an exposed service to become someone else’s weapon.

Digital sovereignty: What’s the fuss about?

Three years ago, no one was talking about it, and now it feels like the term “digital sovereignty” is popping up everywhere. That’s no coincidence. It’s not a sudden hype, but the result of a storm of geopolitical, legal, and technological developments that have gained momentum in recent years.

Threat modeling & secure development: Risk assessment is now a legal requirement – Is your team ready?

For years, threat modeling was the mark of a mature security team: valuable, recommended, but ultimately optional. That era is over. With the EU Cyber Resilience Act and NIS2 now shaping how software must be built across Europe, threat modeling has quietly become a compliance obligation. The question is no longer whether your team should do it. It’s whether your team is equipped to do it well.

NIS2: Deadlines are approaching. Is your organisation ready?

Across Belgium, the NIS2 directive is no longer a distant regulatory change, it is becoming a concrete operational obligation. With the Belgian transposition now in force and the first compliance milestones already activated, organisations must ensure they are not only aware of the upcoming deadlines but actively preparing to demonstrate progress.

AI for Secure Development: Where it helps and what to watch

Artificial Intelligence is rapidly transforming secure software development. From code generation to testing and threat modeling, AI in software security can accelerate development cycles and improve consistency across teams. However, using AI without proper oversight can also introduce new security risks.

Anonymisation as Strategy: Unlock data innovation while reducing risk

Anonymisation isn’t just a compliance tactic — it’s a strategic enabler that reduces risk, builds trust, and unlocks data for innovation. In this practical guide, our Data protection expert Ana-Maria Luca explains why anonymisation matters, how it strengthens smarter data governance, and how organisations can get started through a phased approach.

AI is here to stay, and so is its regulation

The EU AI Act is changing how organisations can deploy AI — depending on the risk level and their role in the value chain. Our GRC expert Kevin Lavrijssen provides a clear overview of what’s coming, when it applies, and how to take the first steps toward compliance and stronger AI governance. 

The parallel between firefighting and incident response

Managing an IT security incident isn’t so different from fighting a fire. Both demand rapid assessment, tight coordination, decisive action, and constant feedback. Drawing on backgrounds in cyber security, incident response, forensics, and volunteer firefighting, we use this analogy to show how crisis management principles apply across both worlds.

When ransomware hits: Inside a real Qilin attack

A Qilin ransomware attack froze an industrial company within minutes. Encrypted systems, stolen data, operations halted. Approach Cyber’s technical and legal teams moved fast, contained the threat, met GDPR duties, and restored control in under 48 hours. This case study shows how coordinated response drives rapid recovery.

When hackers pretend to be the law: The fake police case

Cybercriminals exploited human trust, not systems, to trick an employee into leaking sensitive client data. This case shows how DFIR, GDPR expertise, and coordinated crisis communication contained the breach across France and Switzerland.

From Firefighting to Cyber Resilience

What begins as a cyber security nightmare ends as a transformation story. This real-life case shows how one retail organisation, with Approach Cyber’s help, turned a ransomware attack into the catalyst for lasting resilience.

Cyber Crisis Management: Brussels Airport Paralysed

A ransomware attack on Brussels Airport’s key IT supplier brought flights to a halt and stranded thousands. This is the new face of supply chain risk—where one compromised vendor can paralyse critical infrastructure across Europe.

The Cyber Resilience Act: What Belgian Businesses Need to Know

The European Union’s Cyber Resilience Act (CRA) entered into force on December 10, 2024, and will fundamentally reshape how businesses approach cyber security for products with digital elements. Unlike NIS2, which focuses on organizational security measures, the CRA targets the products themselves.

Benchmarking Secure Development Maturity for CRA and NIS2 Compliance

In 2025, the secure development landscape is at a turning point. Critical regulations like the EU’s Cyber Resilience Act are forcing organisations to shift from optional best practices to mandatory secure-by-design strategies. But are organisations truly ready?

Hacking Cyber Security Myths: A Business Leader’s Wake-Up Call

Cyber security isn’t just IT’s problem — it’s a business advantage. Explore stories that expose the myths and show how smart security drives growth.

Threat Modeling: A gate to secure development culture

Threat modeling isn’t just a technical step, it’s a mindset. It empowers development teams to think like attackers, ask the right questions early, and embed security from the start. By making security collaborative, practical, and developer-friendly, it lays the foundation for resilient, trusted software delivery.

Dark Web Monitoring: Your Data was already exposed

“Everything we needed to take control was already online.” That’s not fiction, it’s a real case from a recent penetration test. Cybercriminals often don’t need to hack in, they log in using credentials and data already exposed on the Dark Web.

Cyber Threat Landscape: Threats, Trends & Strategic Response

As the threat landscape grows more complex, organisations face rising pressure from AI-driven attacks, ransomware-as-a-service, and stricter regulations like NIS2 and DORA. In this article, we examine how businesses can shift from reactive defence to proactive strategy.

Cybersecurity for FinTechs: From compliance to confidence

Dorian Pacquet shares how FinTechs can move beyond compliance to build true cyber confidence through proactive risk management and resilience.

Data Loss Prevention: World Backup Day is a reality check

Discover why regular, tested backups are crucial to protect your data from cyber-attacks, hardware failures, and human error—this World Backup Day.

Cyber security in Wallonia: key insights

In an interview for Dynam!sme, the digital magazine for Union Wallonne des Entreprises (UWE), David Vanderoost, CEO at Approach Cyber, discusses the Walloon cyber security landscape. 

NIS2 Directive: strengthening cyber security in Europe

Find out more about the NIS2 Directive in our guide. Approach Cyber can help you comply! 

Annual Pentest Report 2024

Stay on top of cyber security trends with our Annual Pentest Report. Get unmatched insights and practical advice to defend your digital assets.

Cyber security: a core element of defence strategies

Cyber security’s vital role in defence is highlighted as Approach Cyber supports in enhancing EU’s cyber defence strategies amid global tensions.

Navigating the dynamic landscape of cyber security

Explore the dynamic world of cyber security! Experts highlight public-private collaboration, multi-factor authentication, and the business opportunities it presents.

Annual Pentest Report 2023

Discover the latest trends and vulnerabilities in application security with our third edition of the annual penetration testing statistic report. This report focuses on the detection of unique business logic flaws, which can cause significant damage if left undetected.

Hackable Intelligence Revisited

Download our updated whitepaper on Hackable Intelligence. Discover potential attacks against machine learning based solutions and how to assess your security level.

Our customer testimonials: ISO 27001 certification

Hear from our customers about their ISO 27001 certification journeys and learn from their experience. 

How can an SSO login simplify the authentication process?

SSO (Single Sign-On) allows an organisation’s users to easily and securely access web applications without having to remember multiple login credentials. Discover the benefits.

How to efficiently implement ISO 27001 for cloud-based companies?

ISO 27001 is a great business enabler, and cloud-based companies may benefit from a smooth and easy ISMS implementation, while reducing significantly cyber security risks in today’s digital world.

Pentest Report 2022 – Discover the Top 10 API vulnerabilities

Bolster your cyber defences with our two deception techniques

Discover how two of the most commonly used deception techniques can improve your security at low cost.

Who is the security champion in your developers’ team?

Identify a volunteer within your developers team willing to support the integration of security earlier in the development lifecycle and avoid delays due to vulnerabilities.

5 psychological hints to build efficient cyber security awareness

How to use psychology to improve your security? Watch the replay and get the answers from our expert.

Prepare your organisation to reduce the impact of cyber criminals

The best cyber-security strategy is a layered one. The most important aspect is to be prepared for any eventuality and be ready to react immediately when a cyber-attack happens.

Security Operations Centre FAQ

What is a SOC and what is its purpose? In this FAQ, we are demystifying the SOC and answering some important questions about it including who needs one.

Shift-left testing, what are the benefits for your application?

When an organisation adopts the shift-left principle, they reduce their costs and their time to market while improving security of their application and customer experience.

The real value of a Business Continuity Plan

When a company is compromised by a cyber-attack, recovery time is front of mind. How safe are your critical assets? Learn more

Why perform pentests on your web applications?

How secure are your web applications? Performing pentests allows vulnerabilities to be detected quickly and efficiently in order to fix them.

Website hosting – How to ensure your back-ups are secure?

How to avoid an incident with your website hosting provider from causing critical data loss and business disruptions?

Pentest Report – Top 10 vulnerabilities in web applications

Our ethical hacking team is sharing statistics based on the pentests they performed in 2020 on web applications. Get your copy.

ISO 27701 standard, a great tool to drive your privacy compliance

Get tips on how to initiate a sustainable privacy compliance program within your organisation.

Sofico tell us about their ISO 27001 certification journey

An inspiring interview for any organisations looking to get certified.

The Top 3 GDPR offences in Europe – are you at risk?

Do you know what the TOP 3 GDPR infractions in Europe are? Our privacy consultants have highlighted the trends and share some recommendations.

Walloon Region chèques-entreprises for SMEs – FAQ

Comment obtenir des subventions pour vos projets de cybersécurité auprès du gouvernement wallon? Retrouvez toutes les informations dans notre FAQ.

Building trust to stop phishing – Belnet article

Reduce the exposure, facilitate the detection, and train our users: these are the steps we take to decrease the risk of successful phishing attacks. Is it enough? Read more.

Get a grant for your IT security projects in Brussels

Improve your defence capabilities with OSINT – white paper

Get concrete applications from our pentesters to limit your attack surface by using functionalities of Search Engines. Read more. 

How to deal with phishing? Download our cyber security story

Throughout our story, we will share advices and show how human can be the strongest link to face phishing attacks.  Discover more!

How to facilitate the detection of phishing emails?

Humans have limited resources and energy when it comes to threat detection. Check out our fourth chapter to discover more.

Human is the strongest link! Cyber security story #3

Find out why humans can be considered the strongest security link in our third chapter!

Reduce exposure and impact of phishing attacks.

Chapter two of our cyber security story!  How will our experts reduce the impact of the phishing attack?

How to deal with phishing? Cyber security story #1

Two security experts face a phishing attack but the story ends as a dark day for one of them … Discover the first chapter of our cyber security story!

VLAIO subsidies for SMB cyber security projects – FAQ

Hoe uw subsidies voor uw cyber security projecten aan de Vlaamse Overheid aanvragen?  Vind alle informatie terug in onze FAQ.

Hackable Intelligence – white paper

Why security shouldn’t be overlooked when implementing Artificial Intelligence solutions.  Learn more in our white paper – request your copy! 

How to overcome your application security challenges?

Let’s have a closer look at the typical ways for a product owner, a developer team and a CISO to interact during a software development project and see how frustrating it can be…

Keep your IBAN secret, it could be easily abused!

National press coverage: Approach has discovered a critical flaw in major online shops relating to IBAN

E-Signature – FAQ

Learn everything about the technical and legal aspects of Electronic Signature on our FAQ.

Web Application Firewalls: where do we stand?

Approach has been invited by ISACA Belgium to write a technical briefing about the WAF technology. Download the Tech Brief!

What are the common pitfalls during an ISO 27001 implementation?

Fourth chapter of our ISO 27001 story written by our experts. What are the common pitfalls during an ISO 27001 implementation?

What are the typical roadblocks to ISO 27001?

Third chapter of our ISO 27001 story. Look at the typical roadblocks encountered during an ISO 27001 certification project.

Why should your organisation go for ISO 27001 certification?

Second chapter of our ISO 27001 story presented by our experts. Learn why obtaining the ISO 27001 certificate can be a fantastic business-enabler.

What does ISO 27001 certification really mean?

First chapter of ISO 27001 by our experts. Let’s have a look to the meaning of the certification and discover what the next chapters will talk about !

How do you deal with low risk level vulnerabilities?

Nothing should be left behind when speaking in terms of security…  A story by David Bloom, Cyber-Security Consultant at Approach.

The mechanism of a targeted phishing attack

Several cases of targeted phishing by email have been reported by some of our clients. Download our white paper to learn more about the mechanism of such an attack.

itsme®: What level of security and privacy does it offer?

With the emergence of digital and online services, using a trusted digital identity for your users, collaborators, partners has become even more important and challenging.

Approach, one of the key players behind Itsme

Approach est l’une des discrètes chevilles ouvrières derrière la solution d’identification sécurisée Itsme, dévoilée récemment. Interview de Régional-IT.
Load More

Clients who trust us

Handicap International logo
Ores logo
VIB logo
Serco logo
MCI Group logo
itsme logo
University of Copenhagen logo
Cefic logo

Perimeter Security and Access Management: Why a “Secure by Design” Architecture makes the difference

In the cybersecurity sector, we regularly see incidents where the very devices meant to protect networks become the targets themselves. A recent example involves concerns around publicly accessible firewalls where configuration flaws or exposed credentials (such as default admin accounts) were leaked onto the internet via external portals.

Is your product subject to the EU Cyber Resilience Act?

The EU Cyber Resilience Act (CRA) is coming, and for many organisations, the first and most urgent question is simply: does this apply to us, and if so, where do we start?

Approach Cyber launches its 5th Pentest Annual Report – 2026

Our 2026 Pentest Report offers an unfiltered look into our Success Stories, Latest Trends and Key Statistics of the past year.

Belgian cyber security specialist Approach Cyber focuses on integrated cyber resilience

Approach Cyber combines strategic advice, in-house technology and managed services in a unique Belgian cyber security offering.

Approach Cyber, partner of the European FACT Defence Project

Approach Cyber is not only delivering cyber serenity to its customers through its services and products, but also through several collaborative projects at both European and Belgian levels. One of these initiatives is the Federated Advanced Cyber-Physical Test Range (FACT) project, where Approach Cyber is proud to be one of the consortium partners.

Tech Alerts – April 2026

Welcome to the Tech Alerts. Every day, our Security Operations Center (SOC) monitors a complex variety of digital signals, emerging vulnerabilities, and tactical shifts.
Load More
Explore our services
Ask for an audit
Facebook-f Linkedin-in Youtube