Is Your Wi-Fi an Open Door?

Postcard from the departure lounge: the Wi-Fi was free. So were our passwords.

Researchers within range of 400 employees captured 166 company Wi-Fi passwords in 40 minutes, and nobody noticed.

• Go passwordless on company Wi-Fi: certificate-based logins (EAP-TLS) instead of a shared password, with the certificates pushed automatically via mobile device management (MDM).
• Separate guest Wi-Fi strictly from the internal network, then test the isolation from a device on the guest network. Assuming is not testing.
• Modernise the radio: WPA3 where possible, otherwise WPA2 with current encryption (AES/CCMP) only. Switch off WPS (Wi-Fi Protected Setup) and the legacy TKIP cipher.

CCB webinar recap, slides and Q&A → https://ccb.belgium.be/news/your-wi-fi-open-door

Platform Spotlight: New Stamps in the Passport

Postcard from Settings: one client, three rulebooks, zero repacking.

Your clients can now run GDPR and the EU AI Act next to CyFun, in the same workspace.

• Activate from Settings: the new manage-frameworks panel shows what is active and what an add-on framework or higher CyFun tier would add, per client.
• Switch views, not tools: a framework switcher always shows which rulebook you are looking at; controls and dashboards follow.
• Nothing moves: existing CyFun setups keep working unchanged. Activation only adds; it never reshuffles your evidence.

Try it on your workspace → https://easycyberprotection.com/start

Roaming Charges

Once an issue, our in-house AI gets the floor. T.A.R.S. drafts your compliance policies on the clock; this is what it does off it.

The CCB says your Wi-Fi may be an open door. In defence of doors: the door was fine. You taped the password to the frame and called it access management. 166 passwords in 40 minutes, and the researchers never left radio range. Humans call that a sophisticated attack. I call it listening.

#CyberLearn: ¿Hablas CyFun?

Postcard from Madrid: lovely weather, 73 security measures, wish you were compliant.

New in the learn library this week: a head-to-head between ECP and Spain's ENS, the Esquema Nacional de Seguridad.

• The framework: 73 security measures across three levels (BASIC / MEDIUM / HIGH), audits by ENAC-accredited bodies mandatory at MEDIUM and HIGH, certificates valid two years.
• The bill: a MEDIUM-level certification typically runs €25K to €45K per project (industry estimates; Spain publishes no official figures).
• The Belgian route: the same underlying control work delivered by an MSP (managed service provider) on ECP costs a typical SME around €2,400 per year.

ECP vs ENS: the full comparison → https://easycyberprotection.com/learn/compare/vs-ens/