Skip to content
Back to about
Author

Thomas Ferreira

Security Engineer

CISSP GCFA GCIH GCFE

CISSP-certified and holding several GIAC certifications (GCFA, GCIH, GCFE), Thomas specializes in security incident management and digital forensics. He designs the nophi.sh phishing simulation scenarios and works on the analysis of emails forwarded by users.

Areas of expertise

Phishing simulation Incident response Digital forensics NIS2 compliance ISO 27001 Social engineering

Professional certifications

CISSP ISC²

Certified Information Systems Security Professional - issued by ISC², the global benchmark in information security.

GCFA GIAC / SANS Institute

GIAC Certified Forensic Analyst - specialization in advanced forensic analysis and incident response.

GCIH GIAC / SANS Institute

GIAC Certified Incident Handler - expertise in security incident management and threat detection.

GCFE GIAC / SANS Institute

GIAC Certified Forensic Examiner - skills in digital investigation and evidence collection.

Published articles

BigBear 2.0: the kit that bypassed MFA at 258 organizations

Read article →

ANTS / France Titres breach: 11.7 million accounts, full autopsy

Read article →

CHU de Brest, 9 March 2023: autopsy of a thwarted cyberattack

Read article →

Fake bank advisor fraud: the call from your bank's own number

Read article →

Phishing statistics in France: the 2026 reference figures

Read article →

10 French SMEs that got hacked: what happened, what it cost

Read article →

French telecoms under attack: Free, SFR, Orange, Bouygues

Read article →

CEO fraud in France: the costliest BEC cases and how to stop them

Read article →

The real cost of ransomware in France: numbers and case studies

Read article →

Health data: why it is hackers' number one target in France

Read article →

CNIL: the 20 biggest GDPR fines in France and their lessons

Read article →

Cyberattacks on French hospitals: the 2019-2026 record

Read article →

Viamedis and Almerys: 33 million French people exposed

Read article →

The 50 largest data breaches in France (2020-2026)

Read article →

France Travail breach: 43M records stolen, a €5M CNIL fine

Read article →

Email security for SMBs: test your SPF, DKIM and DMARC now

Read article →

How to trace the origin of a suspicious email using headers

Read article →

Why cybersecurity e-learning alone no longer trains your teams

Read article →

Cybersecurity training vs phishing simulation: what works?

Read article →

Phishing simulation for businesses: a practical 2026 guide

Read article →

Phishing psychology: why the smartest people still click

Read article →

Quishing, vishing, smishing: new forms of phishing in 2026

Read article →

KnowBe4 alternatives for European SMBs (GDPR, pricing, 2026)

Read article →

Phishing awareness software: 10 criteria to choose (2026)

Read article →

Does your cyber insurer require proof of employee training?

Read article →

Phishing click rate by industry: 2026 benchmarks and targets

Read article →

What a cyberattack really costs an SMB with 50 employees

Read article →

Cybersecurity awareness ROI: how to convince your management

Read article →

Business phishing: 2026 statistics, real cases and defenses

Read article →

How to train your employees on cybersecurity: an SMB guide

Read article →