Hello everyone! I'm Cédric Thibault, a cybersecurity and cloud security specialist based in Quebec City, Canada. This blog focuses primarily on Cloud Security and GenAI.

Amazon Bedrock: why attackers take an interest from the moment of compromise

Amazon Bedrock: why attackers take an interest from the moment of compromise

Attempts to reach Bedrock happen very early in an intrusion. What that access really allows, what public incidents establish, and the IAM, SCP and detection controls to verify.

Clairic and Jev: structured data for better decisions

Clairic and Jev: structured data for better decisions

Clairic extracts data, Jev evaluates choices: a practical vulnerability management workflow and the conditions for more predictable automation.

Cybersecurity After Mythos: What Matters Now Is Not More Controls, but How We Execute Them

Cybersecurity After Mythos: What Matters Now Is Not More Controls, but How We Execute Them

Cyber fundamentals still hold, but their execution model must change as autonomous discovery and exploitation accelerate.

The Best Model Will Not Save Your AI Initiative

The Best Model Will Not Save Your AI Initiative

Frontier models still matter, but the success of AI projects now depends primarily on AI Engineering, operational integration, and effective governance.

Agentic Recon: When AI Agents Become a Discoverable Attack Surface

Agentic Recon: When AI Agents Become a Discoverable Attack Surface

Exposed AI agents are no longer just chatbots: they are connected, tool-enabled applications that can sometimes be discovered from the Internet. A new offensive reconnaissance discipline is emerging to identify, map, and exploit their capabilities.

The New Threats of AI Agents: Beyond Prompt Injection

The New Threats of AI Agents: Beyond Prompt Injection

Autonomous AI agents drastically expand the attack surface. Discover agentic AI vulnerabilities and how to protect against them.