During the OSSIR after-work event, Guillaume Lopes gave a report on SSTIC 2015.
The media are available:
Intrinsec thanks OSSIR for the invitation.
Key findings: "Credential stuffing" is a simple but effective attack that involves testing
The average cost of a data breach in France in 2025 is €3.59 million.
Phishing is a fraud where scammers impersonate legitimate entities.
This summer 2025, Microsoft finalized a security update against a path
Key findings Multiple intrusion sets, that we believe with a high level of confidence to be
Offensive security – TL;DR: The use of GPOs to perform lateral movement has become more common during recent assessments. One key aspect of this process is targeting. You don't want to deploy your configuration on a high number of assets without control. Several methods exist: Security Filtering, Item-level targeting and script based targeting.
