François Manuel Billault

How does video analysis support a team’s improvement week after week? ⚽📊 Amaury Watine, video analyst at USBCO (Union Sportive Boulogne Côte d'Opale), explains how he uses Once Sport to organise match clips, highlight key moments, and create clear presentations for players and staff. From categorising actions by theme to adding drawings and annotations, Once Sport helps turn match footage into practical insights for the team. 🎥✅ 👉 Watch the video to see how Amaury brings analysis to life. #OnceSport #OnceSportAnalyser #VideoAnalysis #FootballAnalysis #USBCO

19

2 Comments

The Balancing Act: Risk vs. Resilience Why identity resilience is becoming the new fault line for European enterprises. Let’s be honest: ransomware isn’t winning because it’s sophisticated. It’s winning because too many organizations still think identity is “an IT problem. And the new 2025 Semperis Ransomware Holiday Risk Report makes that painfully clear. More than half of attacks happen when vigilance drops, holidays, weekends, after major corporate events. Translation? Attackers don’t need zero-days. They just wait for zero-defenders. But here’s where Southern Europe sends the strongest signal. 🇮🇹 Italy: • 49% of attacks hit on weekends/holidays • 57% of SOCs cut staffing by 50% or more during the most dangerous hours • 21% of organizations have no ITDR strategy at all • And Italy has the lowest SOC density among the countries analyzed 🇪🇸 Spain: • 41% of attacks occur on weekends/holidays • 95% of SOCs cut staffing by half or more • 33% openly admit they “don’t expect an attack” during those periods • Yet Spain has one of the highest rates of identity hygiene automation As someone who leads in Southern Europe, these numbers don’t surprise me, but they should concern every leadership team. They expose a pattern: Southern Europe is rich in talent, but structurally underprepared for identity-centric attacks. The most dangerous gap isn’t tools or #budget. It’s the belief that ransomware is a technical problem rather than a business risk amplified by weak identity resilience. And that’s exactly why we built this report with #Censuswide, surveying 1,500 professionals across 10 countries and 8 industries — because resilience isn’t something you “feel.” It’s something you measure. Here’s my takeaway — blunt but true: 👉 You can’t outstaff ransomware. You can’t outspend identity compromise. You can only out-prepare it. The organizations winning today are those treating identity as critical infrastructure, investing in resilience instead of firefighting, and protecting their SOC teams from #burnout , not leaving them alone when attacks are most likely. Southern Europe has the talent to lead in cybersecurity. Now it needs the strategy and identity resilience to match it. #Semperis #RansomwareReport #IdentitySecurity #ITDR #CyberResilience #SouthernEurope #CybersecurityLeadership #SOC #ActiveDirectorySecurity #CISO #CyberRisk #ResilienceEngineering #CyberStrategy #HolidayAttackPatterns

6

The recent Flax Typhoon incident shows just how far living-off-the-land techniques can take an attacker. When malicious operations blend this cleanly into routine behavior, traditional security tools won’t cut it. Defenders need visibility into how their environment actually behaves to catch what’s hiding in plain sight. Learn more from ExtraHop below. 

1

Agentic AI for the SOC has crossed an important line. It’s no longer a science experiment — it’s becoming core operational infrastructure. And that fundamentally changes the buy vs. build conversation. When teams try to build Agentic AI internally, they often underestimate: -The integration tax (every tool, every API, every vendor change) -The data problem (your SOC history alone isn’t enough) -The maintenance reality (models drift, threats evolve, logic breaks) -The people cost (your best analysts become part-time engineers) On paper, build looks great: -More control -Lower cost -A long-term advantage In practice, a lot of teams run into: -12–18 month timelines -Unclear ROI -A system that never fully leaves “pilot” Buying a production-ready Agentic AI platform flips that equation: -Weeks to value, not years -ROI measured in MTTR and analyst hours — not hope -A system designed to operate inside a real SOC, not alongside it The smartest security leaders I’m seeing aren’t asking, “Can we build this?” They’re asking: “Should we?” Curious how others are thinking about this. If build vs buy for Agentic AI is something you’re actively weighing, I’d love to compare notes. I’ll be at RSA and carving out time with SOC and security leaders who are evaluating these two paths — happy to grab 15–20 minutes and talk through what we’re seeing work (and what’s quietly failing).

13

1 Comment

If you’ve ever been pulled into a “why did this cert expire?” fire drill, you know PKI isn’t invisible infrastructure anymore. Certificates touch everything now including but not limited to apps, APIs, cloud, containers, and devices. As lifecycles get shorter, manual tracking just doesn’t hold up. I spend a lot of time with teams who are trying to shift from reactive renewals to repeatable, automated processes: knowing what you have, who owns it, when it changes, and how it gets renewed without heroics. Forrester Consulting recently published a study we commissioned that helps frame the modernization conversation in practical, business-friendly terms (risk, resilience, and operational efficiency), not just “security tooling.” If PKI is becoming a bigger topic in your org, it’s worth a read: https://okt.to/45WftP #PKI #DigitalTrust #CertificateLifecycleAutomation #CyberSecurity #ITOperations

3

“Because the Trivy application source code itself was not compromised — only the build and release workflow was — Chainguard's independent build pipeline produced a clean image.” The only way to do this is to build from source.

5

A new stability issue has been identified affecting Microsoft Purview Data Loss Prevention (DLP) environments. ControlUp has observed crashes in the mpdlpservice.exe (v4.18.26010.5) process, faulting in mpdlp.dll, across more than 130 organizations. The issue is increasing and may impact the reliability of background DLP services within Microsoft Defender. Early indicators suggest potential correlation with recent Windows updates and ongoing changes within the Microsoft Purview and Defender ecosystem. Full details: https://bit.ly/40SaA0Y If you are working with Microsoft Defender or Purview DLP, reviewing this finding may help identify or validate similar behavior in your environment. Have questions about this finding, want to go deeper, or curious how others experience such issues? Join the ControlUp Community to ask questions, learn from peers, and stay up to date on all findings and other technical deep dives. 👉 https://bit.ly/41oFCxB #Microsoft #DLP #Security #ITOperations #EndpointManagement #DEX #ControlUp #ControlUpFindings

5