Intercert France: Cybersecurity Incident Response and Threat Landscape Insights

The video features Thibaut Binetruy, president of Intercert France, an association federating 137 cybersecurity incident response teams (CERTs/CIRTs) across France, split into three colleges: internal (defending their own perimeter), commercial (third-party providers), and institutional (e.g., ANSSI, ministries). Founded in 2021, Intercert France facilitates confidential threat intelligence sharing, public awareness campaigns, and an incubator program to help organizations build their own CERTs, covering topics from forensics to incident handling. Key productions include fiches réflexes (practical incident response guides), an annual incidentology report analyzing attack trends, and a study on psychosocial risks for cybersecurity professionals, highlighting chronic stress, exposure to disturbing content, and lack of work-life separation. The 2024 threat landscape shows persistent ransomware (though declining for well-defended organizations), increased espionage detection, and pre-positioning attacks—where adversaries maintain access for future geopolitical leverage. Industrial control systems (ICS/OT) remain vulnerable, with thousands of exposed Modbus devices in France alone, though mass exploitation has yet to occur.