About ITrust

This author has not yet filled in any details.
So far ITrust has created 141 blog entries.

Spotlight on… OGO Security, our partner for securing web infrastructures

At a time when web applications, APIs, and online services have become mission-critical assets for organizations, securing internet-exposed environments represents a vital challenge. Today, enterprises must confront increasingly sophisticated threats: DDoS attacks, zero-day vulnerability exploits, API compromises, and automated targeted attacks. To address these emerging challenges, ITrust relies on technology partners capable of combining operational efficiency, innovation, and expertise in digital sovereignty. Our partnership with OGO Security, a French firm specializing in protection and [...], is built on this shared vision.

Spotlight on… OGO Security, our partner for securing web infrastructures2026-05-25T13:41:55+02:00

Top 4 Emerging Cyber Threats in the 1st Half of 2026

The first half of 2026 confirms a profound transformation across the cybercrime ecosystem. The campaigns observed no longer rely on isolated technical feats, but rather on process industrialization, increased role specialization, and the systematic reuse of battle-tested tools. For security leaders, this evolution requires a fundamental overhaul of detection and response models. Here are the four trends identified from the Mandiant M-Trends 2026, Verizon DBIR 2026, Group-IB High-Tech Crime Trends 2026 reports, and technical analyses from our Cyber Threat Intelligence team. 1. The industrialization of data leaks and the ecosystem The [...]

Top 4 Emerging Cyber Threats in the 1st Half of 20262026-05-28T17:54:43+02:00

Spotlight on… Bitdefender, a partner for the cybersecurity of public and private organizations

At ITrust, we believe that modern cybersecurity relies on a comprehensive approach combining advanced technology, operational expertise, and trusted partners. In the face of constantly evolving threats, organizations must leverage solutions capable of delivering proactive prevention, threat detection, and incident response. This vision drives our collaboration with Bitdefender, a major European cybersecurity player internationally recognized for the performance of its technologies and its proven ability to protect critical environments across more than 170 countries. Recognized expertise dedicated to cyber resilience Bitdefender develops a unified cybersecurity platform [...]

Spotlight on… Bitdefender, a partner for the cybersecurity of public and private organizations2026-05-25T13:41:29+02:00

Threat Actor Spotlight: The Gentlemen

Emerging in 2025, The Gentlemen is a ransomware group linked to an internal split within the Qilin ecosystem. Operating on a RaaS (Ransomware-as-a-Service) model, this threat actor deploys a double-extortion strategy: data exfiltration followed by encryption of compromised systems. The group does not appear to follow a specific industry focus. Identified victims range from SMBs to larger enterprises, with operations spanning multiple geographic regions. This opportunistic approach primarily exploits internet-facing equipment and insufficiently secured environments. Massive exploitation of exposed access vectors The operations attributed to The [...]

Threat Actor Spotlight: The Gentlemen2026-05-25T16:06:34+02:00

Purple Team: when AI orchestrates defense

In April 2026, ITrust presented the findings of a research project conducted by its SOC team at the InCyber Forum (FIC). Thomas Bourthoumieux, SOC Director, and Félix Billières, Tier 3 SOC Analyst, shared the work carried out by the Tier 3 team and ITrust's broader Blue Team: embedding recent advancements in artificial intelligence into the SOC operational workflow. This initiative directly addresses a widely acknowledged industry challenge: traditional purple team cycles are too slow, fragmented, and poorly reproducible to keep pace with threat actors. The goal was to empower a [...]

Purple Team: when AI orchestrates defense2026-04-14T10:44:56+02:00

DarkSword: iOS Zero-Day Exploit Exposes Millions of Apple Devices to Hacking

In brief, as of March 2026, the barrier between nation-state exploitation capabilities and organized cybercrime has collapsed. The simultaneous disclosure of two complete iOS exploit kits, Corona and DarkSword, within a single month indicates a saturation of the mobile vulnerability market. DarkSword, a full-chain exploit written in JavaScript, allows full compromise of iOS devices (versions 18.4 to 18.7) with minimal user interaction. Leveraged by suspected nation-state actors (UNC6353) and commercial surveillance vendors (PARS Defense, UNC6748), this kit exemplifies a critical trend: the [...]

DarkSword: iOS Zero-Day Exploit Exposes Millions of Apple Devices to Hacking2026-04-14T10:05:20+02:00

Adopt the mindset of a cyberattacker with Ikare

As organizations expand their digital footprint, their exposed attack surface becomes increasingly difficult to control. Yet, externally visible assets are often the initial entry point for cyberattacks. Adopting an external perspective enables teams to rapidly identify exposed assets and evaluate associated risks. This is precisely the objective of the Ikare reputation scanner: delivering a clear, actionable overview of domain exposure based on non-intrusive scans conducted over the internet. Reconnaissance: the starting point of cyberattacks Prior to any intrusion attempt, threat actors begin by gathering public intelligence [...]

Adopt the mindset of a cyberattacker with Ikare2026-04-13T16:56:31+02:00

7 Signs It's Time to Launch a Code Audit

In many organizations, code audits are perceived as exceptional procedures reserved for critical environments or post-incident reviews. Yet, data from the OWASP Data Breach Investigations Report demonstrates that application vulnerabilities remain a major attack vector. In other words: the application attack surface has become a primary entry point for attackers. But how do you know when it is truly time to launch a code audit? Here are the indicators that should trigger action. 1. Your application is evolving fast… too fast Organizations adopting rapid delivery cycles (DevOps, CI/CD, [...]

7 Signs It's Time to Launch a Code Audit2026-04-13T16:58:33+02:00

New feature in Ikare 7.4: the reputation scanner

Among the key enhancements introduced in version 7.4 of the Ikare reputation scanner, the reputation scanner constitutes a major new feature. It allows organizations to analyze the external exposure of a domain name from the internet and gain a clear view of their externally visible attack surface. An external perspective The reputation scanner analyzes domain exposure directly from the internet. This approach identifies publicly accessible assets likely to expand an organization's attack surface. Rather than being confined to an internal assessment, the scanner highlights what is genuinely visible from the outside. [...]

New feature in Ikare 7.4: the reputation scanner2026-04-13T16:58:59+02:00
Go to Top