Latest Blogs

In today’s AI-driven threat landscape, the SOC of the future won’t be autonomous—it will be human-led and AI-augmented. Based on insights from Grant Paling, Product Management Director at Orange Cyberdefense, this article explores how AI enhances analyst workflows, boosts SOC efficiency, and supports better decision-making—without replacing human oversight. Learn how to build a modern, trusted, […]

A remarkable rise in the number of connected devices owned by each consumer By the end of 2029, there will be 9 billion consumer electronic devices in the hands of consumers.1 The average number of devices owned per person globally increased from 2.4 to 3.6 between 2018 and 2023. More specifically, in North America, the average

The CVE Turmoil: a Tremor or an Earthquake? For 25 years, the CVE program, managed by the U.S.-based nonprofit MITRE Corporation under the delegation of the Cybersecurity and Infrastructure Security Agency (CISA), has been the cornerstone of global vulnerability management. It provides a standardized system for identifying and tracking security flaws across digital infrastructures.  However,

Your essential quantum cybersecurity update Post-quantum cryptography: a paradigm shift in cybersecurity The advent of large-scale quantum computers by 2030–2035 threatens to break the cryptographic foundations that currently secure digital communications. This shift fundamentally alters the cybersecurity landscape. Cryptography, a cornerstone of data protection and identification management, must evolve now to remain relevant. Here’s what

TL; DR Note: The analysis cut-off date for this report was June 03, 2025.  Introduction In March 2025, our Managed Threat Detection teams in Belgium identified a malicious infection chain leading to the delivery of a Remote Access Trojan (RAT) impacting one of our clients. Upon further analysis from Orange Cyberdefense CERT, a larger campaign impacting

Technical Breakdown Timeline Initial access The threat actors started their email bombing against the target user in the morning with a peak of around 200 emails within 30 minutes. Similar to the approach reported by Microsoft, the threat actors contacted the user and established a Quick Assist session. During the analysis, the session could be tracked

Cyber Threat Intelligence – sounds fancy, right? But ask ten people what it means, and you’ll get answers that range from “super technical hacker stuff” to “some dashboard I never open.” The truth? CTI can be complex (or we make it complex) – definitions fly from A to Z, from Paris to Tokyo. But at

In today’s evolving threat landscape, traditional Security Operations Centers (SOCs) are no longer enough. Based on insights from Niklas Klotz, Product Management Director at Orange Cyberdefense, this article explores what it takes to build a modern SOC: one that consolidates tools, automates processes, and improves mean time to respond (MTTR). Discover how organizations can reduce

As cyber threats evolve, so must the Security Operations Center (SOC). In this third installment of the Modern SOC Series, Nicholas King, Global Product Manager at Orange Cyberdefense, shares how External Attack Surface Management (EASM) is transforming the way modern SOCs operate. From continuous discovery of unknown assets to reducing blind spots and enabling proactive

In case you missed it: Read blog #1,  blog #2  and blog #3 of the Modern SOC Series.As cyber regulations tighten, compliance becomes a core pillar of the modern Security Operations Center (SOC). In this final installment of the Modern SOC Series, Markus Thiel, Senior Business Manager at Orange Cyberdefense, shares how frameworks like DORA, NIS2, and the ISO 27001-aligned ISMS are reshaping