About ITrust

This author has not yet filled in any details.
So far ITrust has created 143 blog entries.

Cybersecurity: Occitanie companies put under scrutiny

In cybersecurity, one question frequently arises: what can an attacker truly see before even attempting an intrusion? The answer can sometimes be surprising. Without privileged access, a cybercriminal can already harvest a substantial amount of information about an organization simply by observing what is exposed on the Internet. Forgotten servers, expired certificates, unmanaged subdomains, misconfigured services, or insufficient email protections: all of these represent potential entry points. It is precisely to help organizations assess this exposure that ITrust has developed Security Rating, an attack surface assessment solution [...]

Cybersecurity: Occitanie companies put under scrutiny2026-09-08T09:01:29+02:00

Cybersecurity: the French State strengthens its digital resilience

The cybersecurity posture of the French State is pivoting. Faced with the surge of cyberattacks targeting public administrations, the SGDSN and ANSSI unveiled their 2026-2027 cyber roadmap to durably strengthen the digital resilience of the State. The document sets several concrete priorities for the next two years: reinforcing cyber governance, securing access, enhancing threat detection, and preparing for post-quantum cryptography. This new strategy comes in the wake of several incidents that affected ministries and public institutions in 2025, revealing persistent vulnerabilities within certain information systems. [...]

Cybersecurity: the French State strengthens its digital resilience2026-05-25T17:19:31+02:00

Spotlight on… OGO Security, our partner for securing web infrastructures

At a time when web applications, APIs, and online services have become mission-critical assets for organizations, securing internet-exposed environments represents a vital challenge. Today, enterprises must confront increasingly sophisticated threats: DDoS attacks, zero-day vulnerability exploits, API compromises, and automated targeted attacks. To address these emerging challenges, ITrust relies on technology partners capable of combining operational efficiency, innovation, and expertise in digital sovereignty. Our partnership with OGO Security, a French firm specializing in protection and [...], is built on this shared vision.

Spotlight on… OGO Security, our partner for securing web infrastructures2026-05-25T13:41:55+02:00

Top 4 Emerging Cyber Threats in the 1st Half of 2026

The first half of 2026 confirms a profound transformation across the cybercrime ecosystem. The campaigns observed no longer rely on isolated technical feats, but rather on process industrialization, increased role specialization, and the systematic reuse of battle-tested tools. For security leaders, this evolution requires a fundamental overhaul of detection and response models. Here are the four trends identified from the Mandiant M-Trends 2026, Verizon DBIR 2026, Group-IB High-Tech Crime Trends 2026 reports, and technical analyses from our Cyber Threat Intelligence team. 1. The industrialization of data leaks and the ecosystem The [...]

Top 4 Emerging Cyber Threats in the 1st Half of 20262026-05-28T17:54:43+02:00

Spotlight on… Bitdefender, a partner for the cybersecurity of public and private organizations

At ITrust, we believe that modern cybersecurity relies on a comprehensive approach combining advanced technology, operational expertise, and trusted partners. In the face of constantly evolving threats, organizations must leverage solutions capable of delivering proactive prevention, threat detection, and incident response. This vision drives our collaboration with Bitdefender, a major European cybersecurity player internationally recognized for the performance of its technologies and its proven ability to protect critical environments across more than 170 countries. Recognized expertise dedicated to cyber resilience Bitdefender develops a unified cybersecurity platform [...]

Spotlight on… Bitdefender, a partner for the cybersecurity of public and private organizations2026-11-02T16:47:35+01:00

Threat Actor Spotlight: The Gentlemen

Emerging in 2025, The Gentlemen is a ransomware group linked to an internal split within the Qilin ecosystem. Operating on a RaaS (Ransomware-as-a-Service) model, this threat actor deploys a double-extortion strategy: data exfiltration followed by encryption of compromised systems. The group does not appear to follow a specific industry focus. Identified victims range from SMBs to larger enterprises, with operations spanning multiple geographic regions. This opportunistic approach primarily exploits internet-facing equipment and insufficiently secured environments. Massive exploitation of exposed access vectors The operations attributed to The [...]

Threat Actor Spotlight: The Gentlemen2026-05-25T16:06:34+02:00

Purple Team: when AI orchestrates defense

In April 2026, ITrust presented the findings of a research project conducted by its SOC team at the InCyber Forum (FIC). Thomas Bourthoumieux, SOC Director, and Félix Billières, Tier 3 SOC Analyst, shared the work carried out by the Tier 3 team and ITrust's broader Blue Team: embedding recent advancements in artificial intelligence into the SOC operational workflow. This initiative directly addresses a widely acknowledged industry challenge: traditional purple team cycles are too slow, fragmented, and poorly reproducible to keep pace with threat actors. The goal was to empower a [...]

Purple Team: when AI orchestrates defense2026-04-14T10:44:56+02:00

DarkSword: iOS Zero-Day Exploit Exposes Millions of Apple Devices to Hacking

In brief, as of March 2026, the barrier between nation-state exploitation capabilities and organized cybercrime has collapsed. The simultaneous disclosure of two complete iOS exploit kits, Corona and DarkSword, within a single month indicates a saturation of the mobile vulnerability market. DarkSword, a full-chain exploit written in JavaScript, allows full compromise of iOS devices (versions 18.4 to 18.7) with minimal user interaction. Leveraged by suspected nation-state actors (UNC6353) and commercial surveillance vendors (PARS Defense, UNC6748), this kit exemplifies a critical trend: the [...]

DarkSword: iOS Zero-Day Exploit Exposes Millions of Apple Devices to Hacking2026-04-14T10:05:20+02:00

Adopt the mindset of a cyberattacker with Ikare

As organizations expand their digital footprint, their exposed attack surface becomes increasingly difficult to control. Yet, externally visible assets are often the initial entry point for cyberattacks. Adopting an external perspective enables teams to rapidly identify exposed assets and evaluate associated risks. This is precisely the objective of the Ikare reputation scanner: delivering a clear, actionable overview of domain exposure based on non-intrusive scans conducted over the internet. Reconnaissance: the starting point of cyberattacks Prior to any intrusion attempt, threat actors begin by gathering public intelligence [...]

Adopt the mindset of a cyberattacker with Ikare2026-04-13T16:56:31+02:00
Go to Top