01
October 7, 2026
The next cyber generation: what a 16-year-old learns from CTFs and bug bounty
At 16, Mohamed Reda Mejhed explains how CTFs and bug bounty teach him method, responsibility and respect for authorized testing boundaries.
02 SECTION / CYBERCORIA
Cloud & audit
Read cloud security posture beyond a score and place every finding in its technical and business context.
STARTING POINT
Cloud audits, CSPM/CNAPP, IAM, exposure, logging, encryption, remediation and architecture choices.
A posture audit has value only when its scope, assumptions and priorities are explicit. This section covers configuration, identity, exposure, logging, dependencies and remediation.
Questions we are trying to answer
- What was actually audited?
- How should findings be prioritised?
- Which controls matter beyond configuration?
- How should remediation be tracked over time?
01 / Cloud & audit
A score is not a risk
A posture score summarises controls according to a particular method. On its own it does not describe asset exposure, data sensitivity, identity privilege or lateral-movement possibilities. Cybercoria therefore starts with scope and context before prioritising findings.
02 / Cloud & audit
Collection scope is the first audit control
Accounts, projects, subscriptions, regions and services that are not covered create blind spots. Before comparing scores, an audit should explain what was observed, when it was observed, which permissions were used and where collection has limits.
03 / Cloud & audit
Remediation should be tracked as a change to the system
Fixing a finding can alter flows, roles, dependencies or cost. The objective is not merely to close an alert: teams should verify the result, document justified exceptions and detect whether the issue returns over time.
ANALYSES
5 publications
02
September 29, 2026
Multi-cloud: risk sometimes lives between the clouds
A multi-cloud environment can be well secured provider by provider while remaining fragile at the interfaces. IAM, logs, data and change need a cross-cloud view.
03
September 7, 2026
Sovereign cloud: the eight dimensions that finally make sovereignty measurable
The European Commission's Cloud Sovereignty Framework turns sovereignty into measurable criteria across eight dimensions and SEAL assurance levels.
04
August 28, 2026
Frontier AI: why cyber defence needs a different tempo
ENISA, the ESRB and European supervisory authorities are converging on one point: advanced AI models are shortening the time available between discovery, exploitation and response.
05
August 24, 2026
Cloud security posture audits: what to check beyond the score
A global score can help track cloud posture, but it is not enough. Scope, identity, exposure, logging and remediation need to be analysed in context.
PUBLICATION CRITERION
A page is published only when it contributes information, a method, a synthesis or a verifiable angle that justifies its existence beyond a search-ranking objective.