What will I find here?

Three formats, always dated and sourced: the analysis of a threat or a news item and what it changes for a regulated organization; the breakdown of a regulatory requirement or deadline and how to prepare for it; and anonymized lessons from our engagements. Every article cites its primary sources and gives our reading, signed Sentrix.

How do I follow new articles?

Through the blog's RSS feed, in French or English, or by following Sentrix on LinkedIn, where every article is posted. The Watch page complements the blog: it gathers the official advisories of Québec, Canada, the United States and Europe, refreshed every thirty minutes, while the blog takes the time to analyze.

ExposureIdentityAwarenessCritical systemsLaw 25MunicipalitiesHealth dataComplianceDefenceRansomwareFraudCyber insuranceNERC CIPCRAThird-party riskNIS2CPCSCISO 27001DORAVulnerabilitiesSoftware supply chainTGVIncidentsCloudAIPrivacyFinanceDefenseAnalysisRegulatory breakdownField notesExposureIdentityAwarenessCritical systemsLaw 25MunicipalitiesHealth dataComplianceDefenceRansomwareFraudCyber insuranceNERC CIPCRAThird-party riskNIS2CPCSCISO 27001DORAVulnerabilitiesSoftware supply chainTGVIncidentsCloudAIPrivacyFinanceDefenseAnalysisRegulatory breakdownField notes

DefenseFinancePrivacyAICloudIncidentsTGVSoftware supply chainVulnerabilitiesDORAISO 27001CPCSCNIS2Third-party riskCRANERC CIPCyber insuranceFraudRansomwareDefenceComplianceHealth dataMunicipalitiesLaw 25Critical systemsAwarenessIdentityExposureField notesRegulatory breakdownAnalysisDefenseFinancePrivacyAICloudIncidentsTGVSoftware supply chainVulnerabilitiesDORAISO 27001CPCSCNIS2Third-party riskCRANERC CIPCyber insuranceFraudRansomwareDefenceComplianceHealth dataMunicipalitiesLaw 25Critical systemsAwarenessIdentityExposureField notesRegulatory breakdownAnalysis

Blog · Dated, sourced analyses

The Sentrix blog

Short, dated analyses of threats, regulatory obligations and compliance practice, written by the Sentrix team with their primary sources cited every time.

latest on October 5, 2026RSS feed

FeaturedAnalysis · ExposureOctober 5, 20264 min read

NetScaler: three exploited flaws in eight days

From September 27 to October 4, 2026, three NetScaler flaws entered the KEV catalog. Fixed builds, patch cadence, and the edge inventory it takes.

Read the article →

Analysis

A threat or a news item, what it changes for a regulated organization, and what we think about it.

Regulatory breakdown

A requirement or a deadline, explained plainly, with how to prepare for it.

Field notes

A lesson from an engagement, anonymized, with what we would do again and what we would avoid.

This week in the watchCanada321Québec97United States62Europe351See the watch by region →

The blog publishes what the team learns in contact with threats, frameworks and auditors: a threat that changes the game, a regulatory deadline to prepare for, a lesson from the field. Every article is dated, cites its primary sources and ends with what we think at Sentrix. For official advisories in continuous time, the Watch page does the rest.

All articles

Frequently asked questions

What will I find here?: Three formats, always dated and sourced: the analysis of a threat or a news item and what it changes for a regulated organization; the breakdown of a regulatory requirement or deadline and how to prepare for it; and anonymized lessons from our engagements. Every article cites its primary sources and gives our reading, signed Sentrix.
How do I follow new articles?: Through the blog's RSS feed, in French or English, or by following Sentrix on LinkedIn, where every article is posted. The Watch page complements the blog: it gathers the official advisories of Québec, Canada, the United States and Europe, refreshed every thirty minutes, while the blog takes the time to analyze.