On dissèque les pires cyberattaques avec 2 experts de AISI

On dissèque les pires cyberattaques avec 2 experts de AISI

We dissect the worst cyberattacks with 2 experts from AISI

by RISKINTEL MEDIA · View the channel on PSI

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 RISKINTEL MEDIA 👥 221K 📅 September 21, 2026 ⏱ 40 min 👁 32 📄 expert opinion 🧭 2026-09-22
Available in: English (current) Français

Keywords

cybersecuritySMEETIincident responsesovereignty

Summary

This interview features two cybersecurity experts from AISI, Miguel de Oliveira (CEO) and Rodolphe Ami (CTO), discussing the most severe cyberattacks they have faced in their decade-long experience protecting French SMEs, ETIs, and public institutions. They highlight the widening gap between large corporations and smaller entities in cybersecurity maturity, emphasizing that SMEs are now primary targets due to their lack of resources. The experts recount a typical ransomware incident where a client’s error led to a second encryption, and they stress the importance of avoiding internal handling of security alerts, advising the delegation of detection and response to a specialized MSSP. They also discuss the rationale behind their 100% French workforce policy, citing sovereignty, proximity, and reliability during crises. The conversation covers common mistakes like insufficient monitoring services and the importance of human accompaniment over automated playbooks. They conclude with a real example where a client paid a ransom of over €2 million, illustrating the industrial scale of attacks and the need for prepared response plans.

166 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information lies in its practical, field-based insights from professionals who have handled over a hundred ransomware attacks. The argumentation is grounded in concrete anecdotes, such as a client who was re-encrypted after prematurely restarting systems, and the observation that attackers operate with industrial efficiency. The reasoning is coherent, linking technical errors to business risks, and the ‘risk accelerator’ concept is clearly explained. However, the reliance on storytelling over data weakens the scientific rigor. The experts argue convincingly for sovereignty and human support, but the absence of external evidence or comparative studies limits the strength of their claims.

Scientific Rigor, Source Quality, Title Accuracy

The video lacks formal citations of scientific or official sources; the content is based solely on the experts’ personal experience. While this adds authenticity, it reduces generalizability. The description provides only links to the channel’s newsletter, LinkedIn, and website, which are not research references. The title is honest and well-aligned with the content, as the discussion indeed dissects several significant cyber incidents. No conflicting data is mentioned, but the lack of verifiable sources prevents a fully rigorous assessment.

194 words

Title / Content Match

The title accurately reflects the content: the hosts and experts dissect several major cyberattacks, focusing on real cases and lessons learned.

Quality & Reliability

6/10

The experts have over 20 years of experience and share concrete examples from real incidents, but the discussion is largely anecdotal, lacking published data or verifiable references. Some claims, such as the 50% failure rate, are presented without rigorous analysis. The presence of a commercial agenda introduces a potential bias.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Contribution & Novelties

The video provides a unique perspective from French experts focused on SMEs and ETIs, an often-overlooked segment. It offers practical lessons from real incidents, emphasizing the need for external expertise and the value of national sovereignty in security operations. The discussion of a €2 million ransom payment and the role of negotiators is rare and insightful.

Pour aller plus loin :

  • Security Operations Center (SOC) — A key concept mentioned in the context of outsourcing security monitoring.
  • Ransomware — The type of attack described in several examples; understanding its mechanics is essential.
  • NIS2 Directive — Relevant to the responsibilities of SMEs and public institutions in Europe regarding cybersecurity measures.

109 words

Radar Profile

The radar profile shows a moderate, balanced shape with slightly higher scores in quantity and technical level, and lower in reliability. This suggests the content is rich in practical detail but lacks a scientific foundation, making it useful for practitioners but not as authoritative for academic reference.

Reliability 5/10