Phishing & Cybersecurity: Analysis for SMBs
Trends, analysis, and tips to protect your business against phishing.
BigBear 2.0: the kit that bypassed MFA at 258 organizations
BigBear 2.0 (Evilginx2, AiTM) bypassed MFA at 258 organizations and stole 5,137 credentials; France was the 2nd-most-hit country, per CloudSEK.
Read articleANTS / France Titres breach: 11.7 million accounts, full autopsy
Deep dive into the ANTS (France Titres) breach: 11.7M accounts exposed, a 15-year-old suspect, and the phishing ecosystem the leak now fuels.
Read articleCHU de Brest, 9 March 2023: autopsy of a thwarted cyberattack
Deep dive into the thwarted 2023 Brest hospital cyberattack: credentials stolen by an infostealer, a FIN12 intrusion, contained before encryption.
Read articleFake bank advisor fraud: the call from your bank's own number
Deep dive into France's fake bank advisor vishing fraud: the Cour de cassation ruling of 23 October 2024, the 2026 Paris trial and OSMP fraud figures.
Read articlePhishing statistics in France: the 2026 reference figures
Every verified phishing statistic for France: ANSSI, Cybermalveillance, CESIN, Verizon DBIR, IBM, Hiscox. Each figure with its source, year and link.
Read article10 French SMEs that got hacked: what happened, what it cost
Lise Charmel, Clestra, Camaieu, Manutan: 10 French SMEs hit by ransomware or phishing, what it cost them and what they should have done.
Read articleFrench telecoms under attack: Free, SFR, Orange, Bouygues
Breaches at Free (19.2M customers), SFR, Orange, Bouygues and La Poste Mobile: timeline, stolen data, IBAN fraud, SIM swapping and how to protect yourself.
Read articleCEO fraud in France: the costliest BEC cases and how to stop them
Pathé (EUR 19.2M), Vallourec (EUR 22M) and other costly CEO fraud cases in France: techniques, case law, and how to protect your business from BEC.
Read articleThe real cost of ransomware in France: numbers and case studies
Ransomware costs in France line by line: direct, operational, legal, reputational and hidden costs, with Manutan, Sopra Steria, Saint-Gobain and CHSF.
Read articleHealth data: why it is hackers' number one target in France
A medical record sells for up to $1,000 on the dark web, a credit card for $5. Viamedis, AP-HP, Corbeil-Essonnes, the CaRE program and what to do.
Read articleCNIL: the 20 biggest GDPR fines in France and their lessons
The 20 largest CNIL fines in France, from Google (150M euros) to Darty (100K euros): GDPR articles violated, mistakes made, and lessons for SMBs.
Read articleCyberattacks on French hospitals: the 2019-2026 record
From Rouen University Hospital to Cannes: cyberattacks on French hospitals, their cost, patient impact, the role of phishing and the State's response.
Read articleViamedis and Almerys: 33 million French people exposed
In February 2024, health data of 33 million French people leaked via Viamedis and Almerys. Timeline, stolen data, consequences and lessons for businesses.
Read articleThe 50 largest data breaches in France (2020-2026)
From France Travail (43M) to Viamedis (33M): the 50 largest data breaches in France, with timeline, figures, sectors hit and lessons for your business.
Read articleFrance Travail breach: 43M records stolen, a €5M CNIL fine
Deep dive into the France Travail breach: 36.8M victims, social engineering via Cap Emploi, a €5M CNIL fine (SAN-2026-003), and lessons for SMEs.
Read articleEmail security for SMBs: test your SPF, DKIM and DMARC now
Most SMBs have no DMARC policy set to reject, so anyone can send email pretending to be them. How to test your domain and fix the problem.
Read articleHow to trace the origin of a suspicious email using headers
Email headers reveal the real sender, the path taken, and authentication results. A step-by-step practical guide to analyzing the headers of a phishing email.
Read articleWhy cybersecurity e-learning alone no longer trains your teams
20% real completion, 6-week retention, little behavior change: why traditional e-learning fails against phishing and what works instead.
Read articleCybersecurity training vs phishing simulation: what works?
E-learning, in-person workshops, phishing simulation: an objective comparison of security awareness methods with effectiveness data and ROI for SMBs.
Read articlePhishing simulation for businesses: a practical 2026 guide
How to plan, run, and measure a phishing simulation campaign. Methodology, templates, timing, and results analysis for SMBs.
Read articlePhishing psychology: why the smartest people still click
The cognitive biases exploited by phishing: authority, urgency, social proof. Why intelligence doesn't protect you and how to train real reflexes.
Read articleQuishing, vishing, smishing: new forms of phishing in 2026
Quishing, deepfake vishing, smishing, AI phishing: the 5 new threats bypassing traditional defenses. How to recognize them and protect yourself.
Read articleKnowBe4 alternatives for European SMBs (GDPR, pricing, 2026)
KnowBe4 vs French and European alternatives for SMBs: public pricing, GDPR and data hosting, French-language content, support and features.
Read articlePhishing awareness software: 10 criteria to choose (2026)
10 objective criteria for evaluating phishing simulation platforms. Scoring grid, pitfalls to avoid, and a comparison of leading solutions on the market.
Read articleDoes your cyber insurer require proof of employee training?
Cyber insurers now demand proof of security awareness training. How your training program lowers premiums and protects your claims.
Read articlePhishing click rate by industry: 2026 benchmarks and targets
Average phishing click, report and credential-entry rates by industry, with dated sources, plus realistic targets at 3, 6 and 12 months.
Read articleWhat a cyberattack really costs an SMB with 50 employees
Detailed breakdown of the true cost of a cyberattack for a French SMB: direct costs, indirect costs, hidden costs, and comparison with the cost of prevention.
Read articleCybersecurity awareness ROI: how to convince your management
How to calculate cybersecurity awareness ROI: average incident cost, the formula, worked examples by SMB size, and a business case template for your board.
Read articleBusiness phishing: 2026 statistics, real cases and defenses
Phishing is the #1 initial attack vector (16%, IBM 2025). 2026 statistics, attack types, real-world examples from France, and solutions to protect your SMB.
Read articleHow to train your employees on cybersecurity: an SMB guide
A practical guide to building an effective cybersecurity awareness program. KPIs, frequency, budget, and mistakes to avoid for small and mid-sized businesses.
Read article