Latest resources

When a critical vulnerability in the Linux kernel became public this week, many organisations found themselves waiting for their vendor to release a fix. AXS Guard customers did not have to wait: we rolled out the patch to every AXS Guard appliance.

The news hit the headlines at the beginning of this week: an unidentified threat actor abused a vulnerability in the temperature controllers of freezers in multiple French supermarkets, causing perishable goods to thaw to the point where they had to be thrown away. In the night of 11 to 12 October, hundreds of stores across Intermarché/Netto, Coopérative U, Carrefour, Monoprix and Leclerc were affected. Could it happen in Belgium? Yes.

Red team and blue team are borrowed from military wargaming: attackers versus defenders. In cybersecurity, the red team runs authorised attacks, including penetration testing, while the blue team detects and responds. Approach Cyber, formed from the merger of AXS Guard and Approach Cyber, now delivers both.

True digital sovereignty is not achievable with non-European cloud providers today. US law (the CLOUD Act) and EU law (the GDPR) place conflicting obligations on any American company holding EU data – a legal catch-22 that no amount of infrastructure investment can resolve. Here is why, and what it means for choosing a cybersecurity vendor in Belgium.

Digital sovereignty is the ability of a country, organisation or individual to control their own data, software and digital infrastructure without depending on the laws or commercial interests of external, often non-European, entities. For businesses, it means knowing where data sits, which laws apply, and who ultimately manages it. Just a few years ago, the term barely appeared in business conversations. Today it comes up constantly, in board meetings, compliance reviews and supplier tenders. This is not a passing trend: it reflects a convergence of geopolitical, legal and technological developments that have gathered pace in recent years.

Setting up an out-of-office (OOO) reply is usually the last thing on your list before a holiday, so it gets written in a hurry. But a careless auto-reply can hand an attacker exactly what they need for phishing or social engineering: who is away, for how long, and who is covering for them.

Not every phishing email aims to install malware. Many are built purely to harvest credentials, and MITRE ATT&CK classifies that behaviour as Phishing for Information (T1598), not Phishing (T1566) for initial access. The distinction matters: it sharpens detection, demonstrates genuine SOC maturity, and closes gaps that a generic security awareness programme alone cannot catch.

CPS threat detection secures operational technology (OT) environments by passively monitoring network traffic, instead of forcing IT and OT teams to merge systems or standards. It gives security teams full visibility into industrial assets and threats in real time, without touching production, downtime, or existing OT processes. In a previous article, “OT-Security vs IT-Security,” we looked at the substantial differences between IT and OT. This one goes further: how do you actually strengthen OT security once you understand those differences?

Phishing is a social-engineering attack in which criminals impersonate a trusted contact, like a bank, a well-known brand or a colleague, to steal login details, payment data or other sensitive information. This article breaks down five common phishing types and shows how structured security awareness training and phishing simulation reduce the risk for your organisation.