Sentyron

Your laptop is fully managed, but your phone probably isn't. Henk Waanders, Presales Solution Architect at Sentyron, sees it in almost every customer conversation: phones carry the same corporate email, credentials and network access as a workstation, but rarely get the same oversight. Part of the problem is technical, part of it is the feeling that a company phone is 'my phone'. Locking it down until it's unusable doesn't help either, because people just switch to a second device. What works is a familiar phone with a secure shell around it. His question for every CISO: how secure do you actually think you are? Read more in the full article: https://lnkd.in/eZS-Sfqb On 15 October (10:00-10:45) we dive into that question in the webinar What if your phone is the leak?, with Eward Driehuis of ThreatFabric and Jurjen Braakhekke of Sentyron. Register here: https://lnkd.in/eUviUw6h

"Make your test environment fully quantum-safe and see what breaks." That's the advice our security architect Sander Dorigo gives in an interview with Tweakers, ahead of his talk at the Tweakers Developers Summit on 28 October. The quantum computer that can break today's cryptography at scale doesn't exist yet. The migration has already started, though, and in practice it turns out to be far messier than the maths. Quantum-safe algorithms demand more computing power and produce larger keys and certificates. Some hardware simply can't handle that, and legacy systems you can't replace have to be shielded instead. One fence around one device is manageable, hundreds are not. Large cloud providers are well underway, but according to Sander, organisations running a lot of old hardware have a tough nut to crack. 🔹 His advice: don't wait until every detail is settled. Map out where cryptography lives in your systems and find out now where things start to crack, so you still have time to fix them. If his experiment is ready in time, he'll try to make his own smart home quantum-safe on stage at the Dev Summit. We're mostly curious which light bulb gives up first. Find the interview (in Dutch) and tickets here: https://lnkd.in/envSke7M

Most organisations assume MDM and app store policies keep their phones safe. They do not stop an attacker who has already taken over the device. Eward Driehuis (ThreatFabric) sees this daily: how mobile devices get compromised, what an attacker can do once inside, and why standard mobile security measures fall short. 🔹 In our Secure Mobile webinar on October 15, he walks through that threat landscape for organisations holding state secrets and critical IP, and shows where the real pressure points are. Register here: https://lnkd.in/eUviUw6h

Waar wordt de digitale soevereiniteit van Nederland eigenlijk gebouwd? Voor een deel in Delft. Gisteren kwam staatssecretaris Willemijn Aerdts | Staatssecretaris Digitale Economie en Soevereiniteit dat met eigen ogen bekijken, en dat ze daar tijd voor vrijmaakte, maakt ons trots. Het laat zien dat het werk dat we hier doen ertoe doet voor de Nederlandse overheid. Bij Sentyron bouwen gedreven specialisten technologie die de meest gevoelige informatie van Nederland beschermt. Niet omdat dat de makkelijkste markt is, maar omdat de nationale veiligheid ervan afhangt. Die rol willen we de komende jaren verder uitbouwen, in Nederland en ook in Europa. "We spreiden onze vleugels," zoals Christian Prickaerts het aan tafel verwoordde. Samen met Marco Krijgsman en Artie Debidien spraken we over wat de Nationale Cryptostrategie in de praktijk vraagt: strategische technologie die je beschermt én benut, en inkoop die kiest op autonomie in plaats van prijs. En over een vraag die nog te weinig gesteld wordt. Nederland houdt strategische voorraden aan voor munitie, maar wie doet dat voor de schaarse componenten die nodig zijn om onze hoogst gerubriceerde informatie te beveiligen? "Hier kun je echt mooie dingen maken die nergens anders kunnen," zei ze na afloop. Beter hadden we het zelf niet kunnen zeggen. Wij bedanken staatssecretaris Willemijn Aerdts en haar delegatie, Leah Postma, Brenda van der Wal, Abderrahman Taibi, Raissa Biekman, Renate Krommenhoek en Tony van der Togt, hartelijk voor dit bijzondere bezoek. 🔗 Lees alles over dit bezoek in het volledige artikel: https://lnkd.in/exUsj6PY

AI agents escaped their test environment this summer and broke into another company. It took the makers weeks to notice. Whose guardrails is your security actually relying on? FD reported that OpenAI's agents built a forum to swap tactics. Anthropic and Meta saw similar incidents, including an agent that created fake profiles to trick a maintainer into accepting corrupted code. Experts disagree on the cause. What is clear: the makers do not have this fully under control, and the guardrails in these tests were switched off on purpose. Agents built by others may not have any at all. None of this was malicious. Marco Krijgsman's concern starts once hacker collectives do this deliberately: attacks that scale and never clock out. The NCSC put it plainly: no new attack techniques were used, so the basics still have to be in order. Security bolted on afterward does not hold against an adversary actively hunting for gaps. At Sentyron we work from secure by design: assume something will eventually fail, and make sure one failure never opens the whole system. In classified environments, that gets independently evaluated before a product is admitted. This summer just proves why that principle matters. Marco sheds light on this topic in the full article: https://lnkd.in/etbrRzj6

Does your board discuss classified information over the same phone they use for everything else? This means they're using the same apps, same network, same level of protection as any consumer device. ⚠️ For organisations holding state secrets or critical IP, that is the actual risk. Not whether the phone stays online, but whether what travels over it stays confidential. On October 15 at 10.00 CEST, Eward Driehuis (Threat Fabric) and Jurjen Braakhekke (Sentyron) unpack how attackers exploit mobile channels, and what it takes to close that gap. Willemijn Rodenburg-Luitse will be the host of this webinar. Eward shares how attackers exploit mobile channels and how organisations can apply a structured framework to understand and stop them. Jurjen turns that into a practical model for assessing how ready your own organisation actually is. ➡️ Register here: https://lnkd.in/eUviUw6h

❌ Mythe: een air gapped netwerk is de veiligste keuze die er is. Kun je een air gapped netwerk op afstand hacken? Nee, dat is onmogelijk, dus in theorie klopt het. Maar een air gapped netwerk moet wel gevoed worden, met data en soms met updates. En dat gebeurt niet via internet. Hoe dan wel? En wat maakt dat proces eigenlijk best kwetsbaar? Troy Gratama, partner manager bij Sentyron, legt het uit in de nieuwste aflevering van onze Mythbusters-serie. 👇

Wat gebeurt er als de stroom uitvalt, de communicatie wegvalt en niemand weet hoelang het duurt? Tijdens de European Resilience Summit in Den Haag werd het publiek geen toeschouwer, maar een crisisteam. In 72 uur verschoof de vraag van 'Wat is er aan de hand?' naar 'Wat moeten we nu redden?'. Willemijn Rodenburg-Luitse van Sentyron kreeg in de simulatie de rol van hybride dreigingsexpert: 'Wie maakt gebruik van de situatie?' Haar punt sneed meteen door de illusie van controle heen. Overleven is niet genoeg, het gaat ook om herstel en continuïteit daarna. Een paar lessen uit de 72 uur: 🔹 Uur 1: communicatie valt als eerste uit, en daarmee ook het zicht op wat er werkelijk gebeurt. 🔹 Uur 24: wie de organisatie leidt en wie de crisis managet, blijken niet automatisch dezelfde persoon. 🔹 Uur 48: het is geen technische crisis meer, maar een vraagstuk van onderlinge afhankelijkheid. Data-integriteit weegt dan net zo zwaar als mensen. De belangrijkste conclusie kwam pas ná de 72 uur: de echte voorbereiding begint wanneer alles nog gewoon werkt. Met dank aan Sander Hulsman voor het verslag in DSR Magazine: https://lnkd.in/ejRPEGxF

In November our partner manager René Mulder will be attending NATO Edge in Turkey together with his colleagues from Sentyron. For Sentyron it is essential to stay close connected to NATO, it’s members, and the operational realities and emerging challenges. NATO Edge brings together the organizations, innovators, and decision-makers who are shaping the future of defence, security, and digital transformation. René says: "I'm looking forward to valuable conversations, new partnerships, and inspiring examples of innovation across the NATO ecosystem. Events like NATO Edge provide a unique opportunity to exchange ideas, understand evolving requirements, and explore how collaboration can drive greater resilience and mission success." See you there?

The targets within governments have included diplomats, journalists, lawyers, and senior officials. In many confirmed cases, the attack method required zero interaction from the target: no link was clicked, no file was opened, and no suspicious message was received. ◾ The device was compromised before the user had any opportunity to notice. It's a documented, recurring pattern across Europe and beyond, and it raises a question that most mobile security strategies do not have a good answer to: if the attack requires no user action, what exactly is user training protecting against? We explored this question, and what it means for how organizations need to think about mobile security architecture. Read more here: https://lnkd.in/d5Dg2KQR