LUKSMENTIS
Cyber news and underlying trends: we dive into the heart of events. Our in-depth analyses bring you relevant articles and intelligence that truly matters, far beyond the ambient noise.
Deepfakes, malware that queries an LLM, espionage campaigns that are 80 to 90% autonomous, then agents attacking without any attacker asking them to. An analysis of the techniques, the actors and the risks, and a clear-eyed look at loss of control, without giving in to fantasy.
Read the study →
Voluntary certification, directive, regulation: cyber compliance frameworks do not share the same logic or the same audience. What they demonstrate, what they bring to your customers, what the data says about their effectiveness, and how structured threat intelligence feeds their requirements without exhausting your teams.
Read the study →
Tax authority, ANTS, Crous, national education, Tchap: attacks on the French public sphere keep piling up. Why is the public sector so exposed, what do the numbers really say, and how is France fighting back? A clear-eyed assessment, without doom-mongering.
Read the study →
Vulnerability exploitation just overtook stolen credentials as the top initial access vector, and edge devices (VPNs, firewalls, gateways) are driving the shift. Our KEV data quantifies the reversal: the box guarding the door has become the door.
Read the study →
Our threat intelligence report. The half-year read through our data: ransomware consolidation, the return of geopolitical cyber, the industrialisation of data theft and a shift in vulnerability doctrine.
Read the study →
Anthropic accuses Alibaba of the largest distillation attack it has ever suffered. Beyond the trade war lies a concrete cyber risk: cloning a frontier model without its guardrails. A breakdown for defenders.
Read the study →
From a representative sample of 60,000 cyber events and 13,500 reconstructed incidents, we mapped cyberattacker groups: who strikes, which countries and sectors pay the price, and what attackers really want. Data-driven, with no hand-waving on trends.
Read the study →
One breach in three now involves a third party. From the Okta-Cloudflare attack to the Salesloft Drift case, how a trusted vendor becomes the weak link, and what to do about it.
Read the study →
Top 3 worldwide for Inetum, 5th for Radware, 2nd in Europe for Check Point: France sits firmly among the most-targeted nations. A breakdown of the numbers and the causes.
Read the study →
The reflex "it's just a CVSS 5, we accept the risk" relied on a high cost of exploitation. AI dismantles that assumption: low and medium risk acceptance must be reassessed.
Read the study →
Prompt injection, system prompt leakage, over-autonomous agents, poisoned RAG, data leaking into LLMs: the 2025 OWASP Top 10 redefines application security. Overview, sovereignty, and a roadmap for CISOs.
Read the study →