# Blog : NDR, NIS2 et sécurité réseau

> Articles pratiques sur le Network Detection and Response, les obligations NIS2 et la sécurité réseau pour les équipes IT des ETI, par l'équipe NetSenX.

Source page: https://netsenx.com/fr/blog

## [AI agents may have more access than employees](https://netsenx.com/fr/blog/2026-11-13_ai-agent-access-permissions)

Employees get onboarding, approvals and access reviews. AI agents, automations and API integrations often get broad access with none of that.

2026-11-13 · [Markdown](https://netsenx.com/fr/blog/2026-11-13_ai-agent-access-permissions.md)

## [The biggest cyber risk is what you fail to see](https://netsenx.com/fr/blog/2026-11-12_biggest-risk-what-you-fail-to-see)

More layers of protection create a feeling of control. Real control needs visibility into what happens between systems, users and suppliers.

2026-11-12 · [Markdown](https://netsenx.com/fr/blog/2026-11-12_biggest-risk-what-you-fail-to-see.md)

## [A crypto inventory from network traffic](https://netsenx.com/fr/blog/2026-11-12_cryptographic-inventory-from-network-traffic)

How much of a cryptographic inventory (CBOM) you can build passively from TLS and SSH handshakes, what stays invisible, and how to fill the gaps.

2026-11-12 · [Markdown](https://netsenx.com/fr/blog/2026-11-12_cryptographic-inventory-from-network-traffic.md)

## [How to find shadow AI in your company](https://netsenx.com/fr/blog/2026-11-12_find-shadow-ai-in-your-company)

A seven-step inventory of the AI services your company really uses: contracts, admin consoles, OAuth grants, DNS and network traffic, devices and people.

2026-11-12 · [Markdown](https://netsenx.com/fr/blog/2026-11-12_find-shadow-ai-in-your-company.md)

## [ML-KEM and ML-DSA explained in plain words](https://netsenx.com/fr/blog/2026-11-12_ml-kem-ml-dsa-explained)

What ML-KEM (FIPS 203) and ML-DSA (FIPS 204) do, how they replace RSA and elliptic curves, hybrid X25519MLKEM768 in TLS, and why key size matters.

2026-11-12 · [Markdown](https://netsenx.com/fr/blog/2026-11-12_ml-kem-ml-dsa-explained.md)

## [Post-quantum readiness: where to start](https://netsenx.com/fr/blog/2026-11-12_post-quantum-readiness-guide)

The EU PQC roadmap, NSA CNSA 2.0 and NIS2 start with a cryptographic inventory. Harvest now, decrypt later, ML-KEM in plain words, and a plan.

2026-11-12 · [Markdown](https://netsenx.com/fr/blog/2026-11-12_post-quantum-readiness-guide.md)

## [Shadow AI: what it is and how to find it](https://netsenx.com/fr/blog/2026-11-12_shadow-ai-guide)

What shadow AI is, why it matters under GDPR, the AI Act and NIS2, how to find it from the network without an agent on each device, and a checklist.

2026-11-12 · [Markdown](https://netsenx.com/fr/blog/2026-11-12_shadow-ai-guide.md)

## [Evidence: the next cybersecurity category](https://netsenx.com/fr/blog/2026-11-11_evidence-next-cybersecurity-category)

After an incident, green dashboards and approved policies answer nothing. Why the ability to prove what happened is becoming a category of its own.

2026-11-11 · [Markdown](https://netsenx.com/fr/blog/2026-11-11_evidence-next-cybersecurity-category.md)

## [Quantum risk is already hidden in your network](https://netsenx.com/fr/blog/2026-11-10_quantum-risk-hidden-in-network)

Quantum risk starts when a company does not know which cryptography protects its data. How certificates, keys and old protocols hide in the network.

2026-11-10 · [Markdown](https://netsenx.com/fr/blog/2026-11-10_quantum-risk-hidden-in-network.md)

## [Quantum is a signal that we need to see more](https://netsenx.com/fr/blog/2026-11-09_quantum-signal-to-see-more)

Quantum computing is moving from labs into strategy. For companies, the first step is not new algorithms but seeing where cryptography is used.

2026-11-09 · [Markdown](https://netsenx.com/fr/blog/2026-11-09_quantum-signal-to-see-more.md)

## [Your network has a memory](https://netsenx.com/fr/blog/2026-11-08_network-has-memory)

Every connection, supplier login and data flow leaves a trace. Why reading your network's history turns scattered signals into context and evidence.

2026-11-08 · [Markdown](https://netsenx.com/fr/blog/2026-11-08_network-has-memory.md)

## [PRTG, Auvik or NDR for a small business network?](https://netsenx.com/fr/blog/2026-11-07_network-monitoring-software-small-business)

Performance monitoring and threat detection answer different questions. PRTG, Auvik and NDR compared from public sources, for a small IT team.

2026-11-07 · [Markdown](https://netsenx.com/fr/blog/2026-11-07_network-monitoring-software-small-business.md)

## [The next breach may not look like an attack](https://netsenx.com/fr/blog/2026-11-07_next-breach-looks-normal)

A supplier connection, a service account or an AI tool reading documents can all look normal. Why the next breach may hide inside legitimate activity.

2026-11-07 · [Markdown](https://netsenx.com/fr/blog/2026-11-07_next-breach-looks-normal.md)

## [NIS2 in Germany: what the BSIG asks of networks](https://netsenx.com/fr/blog/2026-11-07_nis2-germany-bsig)

Germany's NIS2 law has applied since 6 December 2025: who it covers, BSI registration, the 24-hour reporting chain and what it means for monitoring.

2026-11-07 · [Markdown](https://netsenx.com/fr/blog/2026-11-07_nis2-germany-bsig.md)

## [NIS2 in Poland: what the amended KSC act means](https://netsenx.com/fr/blog/2026-11-07_nis2-poland-ksc)

Poland's amended KSC act has transposed NIS2 since 3 April 2026: who it covers, the reporting chain, the risk-management measures and network monitoring.

2026-11-07 · [Markdown](https://netsenx.com/fr/blog/2026-11-07_nis2-poland-ksc.md)

## [NIS2 in Spain: where transposition stands](https://netsenx.com/fr/blog/2026-11-07_nis2-spain-status)

Spain has not yet transposed NIS2: the draft cybersecurity law, the Commission's referral to the Court of Justice, what applies today and what to prepare.

2026-11-07 · [Markdown](https://netsenx.com/fr/blog/2026-11-07_nis2-spain-status.md)

## [Your cryptography is already a business risk](https://netsenx.com/fr/blog/2026-11-06_cryptography-business-risk)

Certificates, VPNs, keys and legacy protocols used to be invisible to boards. Post-quantum migration makes cryptography a business risk to manage now.

2026-11-06 · [Markdown](https://netsenx.com/fr/blog/2026-11-06_cryptography-business-risk.md)

## [sshole (CVE-2026-123158) : vérifiez votre réseau](https://netsenx.com/fr/blog/2026-11-06_sshole-cve-2026-123158)

Contournement de mot de passe OpenSSH sur Linux musl sans PAM (Alpine) : qui est touché, un contrôle de 10 minutes, le correctif et ce que voit le réseau.

2026-11-06 · [Markdown](https://netsenx.com/fr/blog/2026-11-06_sshole-cve-2026-123158.md)

## [A green dashboard is not security](https://netsenx.com/fr/blog/2026-11-05_green-dashboard-not-security)

No critical alerts and no open incidents can mean the tools see nothing, not that nothing happens. Why a green dashboard is a dangerous comfort signal.

2026-11-05 · [Markdown](https://netsenx.com/fr/blog/2026-11-05_green-dashboard-not-security.md)

## [Quantum computers already exist](https://netsenx.com/fr/blog/2026-11-04_quantum-computers-already-exist)

Quantum computers are real, even if they are not in offices yet. What that means for cryptography, long-lived data and business planning today.

2026-11-04 · [Markdown](https://netsenx.com/fr/blog/2026-11-04_quantum-computers-already-exist.md)

## [Post-quantum starts today](https://netsenx.com/fr/blog/2026-11-03_post-quantum-starts-today)

Treating post-quantum cryptography as a distant problem is the biggest mistake. Why inventory, migration planning and supplier questions start now.

2026-11-03 · [Markdown](https://netsenx.com/fr/blog/2026-11-03_post-quantum-starts-today.md)

## [Cybersecurity versus digital trust](https://netsenx.com/fr/blog/2026-11-02_cybersecurity-vs-digital-trust)

Customers and regulators do not ask about protocols. They ask whether their data was safe. How cybersecurity becomes digital trust you can prove.

2026-11-02 · [Markdown](https://netsenx.com/fr/blog/2026-11-02_cybersecurity-vs-digital-trust.md)

## [Does Europe need its own digital trust layer?](https://netsenx.com/fr/blog/2026-11-01_europe-trust-layer-ai-pqc)

AI, cybersecurity and post-quantum readiness all rest on trust. Why European companies need verifiable evidence rather than vendor promises.

2026-11-01 · [Markdown](https://netsenx.com/fr/blog/2026-11-01_europe-trust-layer-ai-pqc.md)

## [Can a factory see an attack before it stops?](https://netsenx.com/fr/blog/2026-10-31_factory-attack-before-production-stops)

OT attacks begin with small changes: a workstation calling a new service, a supplier logging in at night. How passive monitoring can spot them early.

2026-10-31 · [Markdown](https://netsenx.com/fr/blog/2026-10-31_factory-attack-before-production-stops.md)

## [AI-powered attacks may outpace your visibility](https://netsenx.com/fr/blog/2026-10-30_ai-powered-cyberattacks-speed)

AI lets attackers automate reconnaissance, phishing and lateral movement. Why detection that waits for a known signature falls behind.

2026-10-30 · [Markdown](https://netsenx.com/fr/blog/2026-10-30_ai-powered-cyberattacks-speed.md)

## [Quantum exposure before the first attack](https://netsenx.com/fr/blog/2026-10-29_quantum-exposure-before-attack)

Quantum-era attacks may look like ordinary encrypted traffic. Why companies can be exposed long before any breach, and what to inventory first.

2026-10-29 · [Markdown](https://netsenx.com/fr/blog/2026-10-29_quantum-exposure-before-attack.md)

## [The next cyber risk is what you cannot see](https://netsenx.com/fr/blog/2026-10-28_next-cyber-risk-what-you-cannot-see)

The costliest moment after an incident is not the alert but the answer “we do not know what happened.” Why visibility and evidence decide the outcome.

2026-10-28 · [Markdown](https://netsenx.com/fr/blog/2026-10-28_next-cyber-risk-what-you-cannot-see.md)

## [Quantum risk begins with data collected today](https://netsenx.com/fr/blog/2026-10-27_harvest-now-decrypt-later)

Harvest now, decrypt later: encrypted data captured today may be readable once quantum computers mature. Why long-lived secrets need a plan now.

2026-10-27 · [Markdown](https://netsenx.com/fr/blog/2026-10-27_harvest-now-decrypt-later.md)

## [AI Act, NIS2, DORA, CRA: what is coming](https://netsenx.com/fr/blog/2026-10-26_ai-act-nis2-dora-cra)

Four EU laws reach business owners through audits, customers, suppliers and everyday AI use. What the AI Act, NIS2, DORA and the CRA mean in practice.

2026-10-26 · [Markdown](https://netsenx.com/fr/blog/2026-10-26_ai-act-nis2-dora-cra.md)

## [AI in a company does not start with a strategy](https://netsenx.com/fr/blog/2026-10-25_ai-starts-with-employee-data)

It starts with an employee pasting a contract or customer data into a chat tool. Why shadow AI is a data-protection issue before it is a strategy.

2026-10-25 · [Markdown](https://netsenx.com/fr/blog/2026-10-25_ai-starts-with-employee-data.md)

## [How to protect a company from ransomware](https://netsenx.com/fr/blog/2026-10-24_ransomware-protection)

Ransomware does not start with encryption. It starts days earlier with access, reconnaissance and lateral movement. Where to look before the ransom note.

2026-10-24 · [Markdown](https://netsenx.com/fr/blog/2026-10-24_ransomware-protection.md)

## [Will the attack start with you or your supplier?](https://netsenx.com/fr/blog/2026-10-23_attack-starts-with-supplier)

IT providers, integrators and maintenance partners connect to your network every day. Why supplier access is a common way in, and how to watch it.

2026-10-23 · [Markdown](https://netsenx.com/fr/blog/2026-10-23_attack-starts-with-supplier.md)

## [Does your company have alerts or evidence?](https://netsenx.com/fr/blog/2026-10-22_alerts-or-evidence)

Charts of alert counts impress in a board meeting but answer none of the questions after an incident. The difference between alerts and evidence.

2026-10-22 · [Markdown](https://netsenx.com/fr/blog/2026-10-22_alerts-or-evidence.md)

## [The worst answer after an incident: we don't know](https://netsenx.com/fr/blog/2026-10-21_worst-answer-we-dont-know)

When the board asks what happened, “we don't know” is the costliest answer. What a company needs to reconstruct an incident and report it on time.

2026-10-21 · [Markdown](https://netsenx.com/fr/blog/2026-10-21_worst-answer-we-dont-know.md)

## [A quiet network does not mean a safe company](https://netsenx.com/fr/blog/2026-10-20_silence-in-network-not-safe)

No red screens and no ransom note do not prove that nothing is happening. How modern incidents start with small changes, and how to notice them early.

2026-10-20 · [Markdown](https://netsenx.com/fr/blog/2026-10-20_silence-in-network-not-safe.md)

## [Not another alert: who sees the risk first](https://netsenx.com/fr/blog/2026-10-19_who-sees-risk-first)

Companies rarely lose because they had no tools. They lose because they saw too late. Why early visibility, not alert volume, decides an incident's cost.

2026-10-19 · [Markdown](https://netsenx.com/fr/blog/2026-10-19_who-sees-risk-first.md)

## [Security, or just a sense of security?](https://netsenx.com/fr/blog/2026-10-18_security-or-sense-of-security)

A firewall, antivirus, backups and an IT provider can create a feeling of control without real visibility. How to tell the difference in your company.

2026-10-18 · [Markdown](https://netsenx.com/fr/blog/2026-10-18_security-or-sense-of-security.md)

## [Is the board liable for an undetected attack?](https://netsenx.com/fr/blog/2026-10-17_board-responsibility-undetected-attack)

NIS2 makes management bodies accountable for cybersecurity measures. What that means when an attack goes undetected, and what boards should ask for.

2026-10-17 · [Markdown](https://netsenx.com/fr/blog/2026-10-17_board-responsibility-undetected-attack.md)

## [Is your customers' data really secure?](https://netsenx.com/fr/blog/2026-10-16_customer-data-security)

When a major client asks whether their data is safe with you, “we have a firewall” is not an answer. What evidence customers now expect to see.

2026-10-16 · [Markdown](https://netsenx.com/fr/blog/2026-10-16_customer-data-security.md)

## [Your systems work. But are they secure?](https://netsenx.com/fr/blog/2026-10-15_infrastructure-works-but-is-it-secure)

Production runs and invoices go out while an intruder may already be mapping the network. Why “it works” is not evidence of security, and what is.

2026-10-15 · [Markdown](https://netsenx.com/fr/blog/2026-10-15_infrastructure-works-but-is-it-secure.md)

## [Blockbuster, Netflix and your cyber risk](https://netsenx.com/fr/blog/2026-10-14_blockbuster-netflix-cyber-risk)

Blockbuster had stores, customers and a working model, and still lost to a change it did not take seriously. The same blind spot applies to cyber risk.

2026-10-14 · [Markdown](https://netsenx.com/fr/blog/2026-10-14_blockbuster-netflix-cyber-risk.md)

## [What the telephone teaches about cybersecurity](https://netsenx.com/fr/blog/2026-10-13_telephone-lessons-cybersecurity)

New technologies often lose early because they are judged by the old world's standards. What that means for firms that think a firewall is enough.

2026-10-13 · [Markdown](https://netsenx.com/fr/blog/2026-10-13_telephone-lessons-cybersecurity.md)

## [Mid-sized company, big risk](https://netsenx.com/fr/blog/2026-10-12_mid-market-postpones-cybersecurity)

Mid-sized firms hold real data, customers and integrations but rarely a security team. Why the mid-market still postpones cybersecurity, and at what cost.

2026-10-12 · [Markdown](https://netsenx.com/fr/blog/2026-10-12_mid-market-postpones-cybersecurity.md)

## [You cannot manage risk you cannot see](https://netsenx.com/fr/blog/2026-10-11_cannot-manage-risk-you-cannot-see)

Risk management built on documents and procedures misses what happens in the network today. Why visibility is the precondition for managing cyber risk.

2026-10-11 · [Markdown](https://netsenx.com/fr/blog/2026-10-11_cannot-manage-risk-you-cannot-see.md)

## [How does a company operate during an attack?](https://netsenx.com/fr/blog/2026-10-10_operating-during-cyberattack)

An attack rarely stops everything at once. How companies keep operating during an incident, and why early visibility decides how much is lost.

2026-10-10 · [Markdown](https://netsenx.com/fr/blog/2026-10-10_operating-during-cyberattack.md)

## [Cybersecurity the board can understand](https://netsenx.com/fr/blog/2026-10-09_cybersecurity-for-the-board)

Boards do not need more acronyms or red dashboards. They need answers about business impact, evidence and responsibility. How to translate cyber risk.

2026-10-09 · [Markdown](https://netsenx.com/fr/blog/2026-10-09_cybersecurity-for-the-board.md)

## [Your supplier has a key to your company](https://netsenx.com/fr/blog/2026-10-08_supplier-access-risk)

IT providers, integrators and SaaS tools hold access to your systems. Why supplier access is part of your own risk, and how to see what it does.

2026-10-08 · [Markdown](https://netsenx.com/fr/blog/2026-10-08_supplier-access-risk.md)

## [Who must report a cyber incident?](https://netsenx.com/fr/blog/2026-10-07_who-must-report-cyber-incident)

Under NIS2 and GDPR, reporting clocks start when you become aware of an incident. Who must report, to whom, and why detection decides the timeline.

2026-10-07 · [Markdown](https://netsenx.com/fr/blog/2026-10-07_who-must-report-cyber-incident.md)

## [Small company, big cyber responsibility](https://netsenx.com/fr/blog/2026-10-06_small-company-cyber-responsibility)

Small firms are links in larger supply chains, so customers and regulators increasingly expect them to show real security, not just a firewall.

2026-10-06 · [Markdown](https://netsenx.com/fr/blog/2026-10-06_small-company-cyber-responsibility.md)

## [AI agents are new employees. Who monitors them?](https://netsenx.com/fr/blog/2026-10-05_ai-agent-new-employee)

AI agents read documents, call APIs and trigger processes without a manager. Why they need the same oversight as staff, and what monitoring should show.

2026-10-05 · [Markdown](https://netsenx.com/fr/blog/2026-10-05_ai-agent-new-employee.md)

## [Does your company fall under new EU cyber rules?](https://netsenx.com/fr/blog/2026-10-04_new-eu-cyber-regulations-scope)

NIS2, DORA, the CRA and the AI Act reach further than many boards expect, often through customers and suppliers. How to tell whether they apply to you.

2026-10-04 · [Markdown](https://netsenx.com/fr/blog/2026-10-04_new-eu-cyber-regulations-scope.md)

## [Logistics under the pressure of cyber evidence](https://netsenx.com/fr/blog/2026-10-03_logistics-cyber-evidence)

Logistics runs on APIs, scanners, TMS, WMS and partner portals. Why customers and NIS2 now expect logistics firms to show what happens in their networks.

2026-10-03 · [Markdown](https://netsenx.com/fr/blog/2026-10-03_logistics-cyber-evidence.md)

## [Who is really inside your network?](https://netsenx.com/fr/blog/2026-10-02_who-is-inside-your-network)

Guests, suppliers, IoT devices, remote staff and cloud services share one network. Why many companies no longer know who is actually connected.

2026-10-02 · [Markdown](https://netsenx.com/fr/blog/2026-10-02_who-is-inside-your-network.md)

## [The silent attack: when nothing looks wrong](https://netsenx.com/fr/blog/2026-10-01_silent-cyberattack)

The most dangerous attacks do not start with a ransom note. How silent intrusions grow for days or weeks, and why you must be able to reconstruct them.

2026-10-01 · [Markdown](https://netsenx.com/fr/blog/2026-10-01_silent-cyberattack.md)

## [The hotel as digital infrastructure of trust](https://netsenx.com/fr/blog/2026-09-30_hotel-cybersecurity-trust)

Guest data, payments, Wi-Fi, booking systems and suppliers: why a hotel is now digital infrastructure, and what network visibility means for trust.

2026-09-30 · [Markdown](https://netsenx.com/fr/blog/2026-09-30_hotel-cybersecurity-trust.md)

## [Cyber evidence: the new language of trust](https://netsenx.com/fr/blog/2026-09-29_cyber-evidence-trust-europe)

Certificates and supplier questionnaires no longer settle trust between European companies. Why verifiable cyber evidence is a competitive advantage.

2026-09-29 · [Markdown](https://netsenx.com/fr/blog/2026-09-29_cyber-evidence-trust-europe.md)

## [Shadow IT: what the documentation does not show](https://netsenx.com/fr/blog/2026-09-28_shadow-it-network-monitoring)

Documentation rarely matches the network that actually runs. How shadow IT appears, why it matters under NIS2 and how network monitoring shows the gap.

2026-09-28 · [Markdown](https://netsenx.com/fr/blog/2026-09-28_shadow-it-network-monitoring.md)

## [Network monitoring and European cyber resilience](https://netsenx.com/fr/blog/2026-09-27_network-monitoring-eu-cyber-resilience)

Why continuous network monitoring is becoming a layer of European cyber resilience next to firewalls, EDR and backups, and what NIS2 changes.

2026-09-27 · [Markdown](https://netsenx.com/fr/blog/2026-09-27_network-monitoring-eu-cyber-resilience.md)

## [Cybersecurity is no longer just an IT problem](https://netsenx.com/fr/blog/2026-09-26_cybersecurity-beyond-it-department)

A firewall, antivirus and backups no longer answer what boards, customers and regulators ask. Why cyber risk has become a management responsibility.

2026-09-26 · [Markdown](https://netsenx.com/fr/blog/2026-09-26_cybersecurity-beyond-it-department.md)

## [Breached days ago, and still nobody knows](https://netsenx.com/fr/blog/2026-09-25_network-breach-detection-gap)

An intruder can move through a network for days before anyone notices. Why detection speed decides whether you can meet the NIS2 24- and 72-hour clocks.

2026-09-25 · [Markdown](https://netsenx.com/fr/blog/2026-09-25_network-breach-detection-gap.md)

## [Combien coûte un NDR ? Modèles de prix](https://netsenx.com/fr/blog/2026-09-24_ndr-pricing-models)

Le NDR se facture par appareil, IP, bande passante ou volume de données. Comment marche chaque modèle, ce que publient Darktrace, Vectra AI et ExtraHop.

2026-09-24 · [Markdown](https://netsenx.com/fr/blog/2026-09-24_ndr-pricing-models.md)

## [NDR, EDR, SIEM, XDR, MDR : les différences](https://netsenx.com/fr/blog/2026-09-24_ndr-vs-edr-vs-siem)

En quoi NDR, EDR et SIEM diffèrent : ce que chacun voit et manque, où se placent XDR et MDR, et par quoi commencer sans SOC.

2026-09-24 · [Markdown](https://netsenx.com/fr/blog/2026-09-24_ndr-vs-edr-vs-siem.md)

## [Surveillance réseau NIS2 : la check-list](https://netsenx.com/fr/blog/2026-09-24_nis2-network-monitoring-checklist)

Check-list pratique de surveillance réseau NIS2 pour les équipes IT des ETI : ce qu'exigent les articles 21 et 23, quoi surveiller, quelles preuves garder.

2026-09-24 · [Markdown](https://netsenx.com/fr/blog/2026-09-24_nis2-network-monitoring-checklist.md)

## [Introducing NetSenX, NDR for the EU mid-market](https://netsenx.com/fr/blog/2026-05-21_netsenx_launch)

Why we built NetSenX: behavioural network detection that explains every alert, keeps data in the EU and tracks NIS2 reporting deadlines.

2026-05-21 · [Markdown](https://netsenx.com/fr/blog/2026-05-21_netsenx_launch.md)