Author and publication manager
A senior cybersecurity consultant at Orange Cyberdefense, Frédéric LENQUETTE previously worked as a CISO, consultant, penetration testing engineer and trainer. Based in the Aix-Marseille area, he founded Cyberiack to share verified, practical news on cybersecurity and AI.
Cyberiack is a personal, independent project: the analyses published reflect only the author’s views, not those of his employer.
Frédéric LENQUETTE founded Cyberiack and sets its editorial line. Articles are prepared by AI-assisted monitoring, then checked by a second AI model that verifies the facts against primary sources. He reviews, corrects and approves those that carry his byline, writes or reviews the in-depth guides, and is responsible for all published content, including content put online automatically.
How articles are selected, verified, published and corrected is described in the editorial policy.
On October 16 at the Hexacon conference, the firm Calif showed a persistent jailbreak of iOS 27.0.1. The flaws have not been published and no patch is known. Here's what it means for users.
Eighteen months after the attack, the Legal Aid Agency has revised its assessment: 250,000 records predating 2007 and probation data were in the haul. The question for every organization: why keep them?
Singapore's cybersecurity agency detailed its migration timeline on October 14 and opened a grant. The milestones are set by guidance, not by law: here is what is expected, and when.
In an op-ed published by Le Monde on October 15, Arthur Mensch calls betting on applications alone a "fundamental" mistake. Here are his arguments, his figures and what his critics say.
The fiber operator detected possible access to its Waza partner platform on October 14. Why this data can fuel bank-detail change fraud, and the steps to take.
According to Anthropic and the accompanying paper, the circuit designed by Claude needs 17 times fewer gates than one rival design, but more than another. Nothing changes for your post-quantum migration.
Browsers, VPNs, cloud, secure boot: MITRE measured where post-quantum migration stands across eight technology families. Here is what you can already enable, and where you will have to wait.
On October 17, DeepSeek released V4.1-Flash-1017 under an MIT license, along with a web search API. Here is what its scores really say, who still leads, and what it takes to run the model yourself.
The database has been for sale since October 16, and the published sample includes minors, one of them 6 years old. The publisher has confirmed nothing. Here is what the data contains and how to protect your children.
On October 16, Reflection AI released the weights of Beam, a 501-billion-parameter model, under the Apache 2.0 license. How far the efficiency promise holds up, and the hardware needed to run it.
Spotted on October 13 in the community AUR repository, packages imitating yay and paru, two widely used install tools, ran a downloaded script. Here is how to check whether you were affected.
A hacker has leaked 16,556 documents tied to Malakoff Humanis policyholders. The group confirms an attack on its administrator IGA, discovered on August 11, which would affect about 2,000 people.
Data intercepted today could be decrypted tomorrow by a quantum computer. Where standards stand, what ANSSI, France's national cybersecurity agency, recommends, and where a French organization can start.
The NIS2 directive extends cybersecurity obligations to about 15,000 entities in France, including SMEs and local authorities. As of October 12, 2026, the law meant to implement it has not been passed. What is certain, what remains open, and where to start.
Prompt injection hijacks an AI assistant or agent with instructions hidden in what it reads. Definition, documented examples, reference frameworks and the measures an organization should take, in priority order.
AI assistants that browse, run code and act on your systems open up new risks. This guide covers the threats, documented incidents, frameworks and measures to take, for CIOs, CISOs and executives.
Attackers lock your files, steal your data and demand a ransom. This guide explains how these attacks work, the most active groups, your legal obligations, and what to do before, during and after. For SMEs, local authorities and hospitals.
Launched in late 2023, the CaRE program funds cybersecurity for hospitals and clinics, and later for social and medico-social facilities. Domains, funding, timeline and status as of October 12, 2026, for CIOs, CISOs and vendors.
