Evangeline - Trescudo Blog

Evangeline

New Enterprise Attack Vector

Voice assistants like Siri & Alexa are a new enterprise attack vector. Our analysis covers the "Dolphin Attack," malicious skills, and a CISO playbook for this emerging threat.

Sep 19, 2025

Cybersecurity Strategy

Weekly Threat Analysis (Sep 9–16, 2025)

JLR production halt, critical VMware vCenter flaws, and a surge in QR-code phishing. See what your threat detection must catch—and what to fix in 48 hours.

Sep 16, 2025

Threat Analysis

FEMA Cybersecurity Case Study

A deep-dive into the FEMA cybersecurity scandal. Discover the 'four embarrassing failures' that led to a mass firing and the urgent lessons for government agencies worldwide.

Sep 15, 2025

Breach Analyses

The Jaguar Land Rover Breach

Analysis of the Jaguar Land Rover breach, a stark lesson in cybersecurity governance. See how the attack shut down assembly lines, costing millions daily, and the implications for NIS2.

Sep 11, 2025

Breach Analyses

Weekly Threat Analysis (September 2-9, 2025)

Trescudo's analysis of the Salesloft supply chain breach & Sitecore zero-day. Learn the lessons from this week's top cyber threats for Benelux businesses under NIS2.

Sep 10, 2025

Threat Analysis

The Whopper of All Vulnerabilities

Analysis of the Burger King hack. Discover how a Broken Object Level Authorisation (BOLA) flaw in their API exposed customer data and what it teaches us about app security.

Sep 08, 2025

Breach Analyses

NIST CSF's Blueprint for AI Security

NIST's new concept paper outlines a framework for AI security using the NIST CSF. Discover the new AI attack surface and the gold standard for securing your innovative assets.

Sep 08, 2025

Products & Solutions

Anatomy of a Healthcare Breach

Deep-dive analysis of the Dutch cervical cancer screening breach. Trescudo covers the third-party risk, Nova RaaS tactics, and the lessons for Benelux businesses.

Sep 02, 2025

Breach Analyses

What Your Threat Detection Must Catch

This week: Nevada ransomware, TransUnion 4.4M breach, Citrix NetScaler zero-day, and WhatsApp zero-click—plus a 48-hour threat detection plan.

Sep 01, 2025

Threat Analysis

Weekly Threat Analysis (Aug 19–26, 2025)

Weekly threat analysis: Orange Belgium breach, OAuth/Salesforce campaign, Cisco FMC CVE-2025-20265, Apple zero-day—plus a 48-hour CISO playbook and hunt tips.

Aug 26, 2025

Threat Analysis

Threat Analysis: The Triple Threat Landscape

Benelux threat detection briefing: Orange Belgium breach, Russian “Static Tundra” Cisco exploits, and an Apple zero‑day—actions boards can take in 48 hours.

Aug 22, 2025

Threat Analysis

Creeper to AI Hyperautomation

From a college prank that shut down the internet to AI-powered defences, discover the fascinating history of cybersecurity and what it means for your business today.

Aug 21, 2025

Dutch Cervical Cancer Screening Breach (2025)

Nearly 485,000 women affected in a Dutch cervical screening data breach tied to a lab supplier. What was exposed, timeline, GDPR/NIS2 angle, and next steps.

Aug 11, 2025

Breach Analyses

WinRAR Zero-Day Exploited by RomCom

RomCom (Storm-0978) weaponised a WinRAR zero-day to plant backdoors. See TTPs, NIS2 exposure, and a patch-first detection plan tailored for Benelux teams.

Aug 11, 2025

Threat Analysis

Air France–KLM Data Breach 2025

Learn how the Air France KLM data breach exposed loyalty data via a third-party SaaS, the GDPR/NIS2 penalties, and 7 steps Benelux CISOs must take now.

Aug 07, 2025

Breach Analyses

NIS2 vs. NIST CSF

Compare NIS2 and NIST CSF for IT Security Benelux leaders. See overlap, gaps, fines, and a 5-step decision guide for sustainable cyber-resilience.

Aug 06, 2025

Compliance & Risk

Plague PAM Backdoor

The new Plague PAM backdoor evaded AV for a year. Learn its TTPs, IOC list and a threat-detection blueprint to secure your Linux servers in 2025.

Aug 04, 2025

Breach Analyses

Salt Typhoon Hits Orange

French telecom Orange S.A. suffered a Salt Typhoon APT attack on 25 July 2025. Learn the TTPs, business impact, NIS2/DORA exposure and concrete defence steps.

Jul 30, 2025

Breach Analyses

The Human Perimeter

Clorox lost $380 M when hackers duped a help‑desk agent. Discover how human error, not malware, drives breaches—and how to fortify your human perimeter.

Jul 29, 2025

Breach Analyses

SharePoint Under Siege

A critical SharePoint vulnerability (CVE-2025-53770) is here. Learn why a "patch-and-pray" strategy is not enough and how to build true cyber resilience.

Jul 22, 2025

Breach Analyses

Data Security: AI Personas

What if the person you're talking to isn't real? Discover how AI personas create new insider threats and why Data Security with DLP and XDR is your best defence.

Jul 19, 2025

Cybersecurity Strategy

The Digital Honey Trap

A romance scam can turn a trusted employee into an insider threat. Learn how the 'Digital Honey Trap' works and how DLP, XDR, and Zero Trust can protect your data.

Jul 16, 2025

Products & Solutions

Zero‑Trust Security Architecture

Learn how zero‑trust security architecture, micro‑segmentation and identity‑centric security stop lateral movement, meet DORA/NIS2, and cut breach costs by 40 %.

Jul 15, 2025

Cybersecurity Strategy

Mastering Risk Management

In uncertain times, mastering cyber risk is key. This guide offers four essential strategies for resilience, from understanding your attack surface to incident response.

Jul 15, 2025

Compliance & Risk

Trescudo Blog

New Enterprise Attack Vector

Weekly Threat Analysis (Sep 9–16, 2025)

FEMA Cybersecurity Case Study

The Jaguar Land Rover Breach

Weekly Threat Analysis (September 2-9, 2025)

The Whopper of All Vulnerabilities

NIST CSF's Blueprint for AI Security

Anatomy of a Healthcare Breach

What Your Threat Detection Must Catch

Weekly Threat Analysis (Aug 19–26, 2025)

Threat Analysis: The Triple Threat Landscape

Creeper to AI Hyperautomation

Dutch Cervical Cancer Screening Breach (2025)

WinRAR Zero-Day Exploited by RomCom

Air France–KLM Data Breach 2025

NIS2 vs. NIST CSF

Plague PAM Backdoor

Salt Typhoon Hits Orange

The Human Perimeter

SharePoint Under Siege

Data Security: AI Personas

The Digital Honey Trap

Zero‑Trust Security Architecture

Mastering Risk Management

Salt Typhoon Hits Orange

The Human Perimeter