Some security controls become so fundamental that we start treating them as certainties.
Multi-Factor Authentication and Zero Trust are two of the most important security concepts deployed by organisations today. Neither is obsolete, and both remain essential. But attackers, and technology, are changing the assumptions on which we have built them.
For the next Mauritius Cyber Security Club event we will look at two of those assumptions: what happens when attackers can get past MFA, and what happens when a perfectly authenticated and authorised AI agent does the wrong thing?
MU.SCL S03E06 – Catch Me If You Can will take place on Tuesday, 6 October 2026 6pm at the Flying Dodo in Bagatelle (Mauritius)
Talk 1 – Life After MFA
Sylvain Martinez – ElysiumSecurity
Multi-Factor Authentication has long been one of the closest things cybersecurity has had to a sil...
>>[READ MORE]
{elysiumsecurity} 
Cyber Protection & Response
Conferences News (24 Posts)
World Quantum Readiness Day: The Q-DAY Deadline
NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here.
While a written post cannot fully reproduce the depth, examples and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.
Earlier this month, at our latest Mauritius Cyber Security Club event, I gave a presentation on Post-Quantum Cryptography with a deliberately practical objective: not to explain every detail of quantum physics, but to answer a much more useful question for organisations:
What do we need to do now to make sure that information which must still be secret tomorrow remains protected?
The presentation therefore focused...
>>[READ MORE]
Earlier this month, at our latest Mauritius Cyber Security Club event, I gave a presentation on Post-Quantum Cryptography with a deliberately practical objective: not to explain every detail of quantum physics, but to answer a much more useful question for organisations:
What do we need to do now to make sure that information which must still be secret tomorrow remains protected?
The presentation therefore focused...
>>[READ MORE]
MU.SCL S0305 – A Kind of Magic: Post-Quantum Cryptography and AI Agent Security
Some technologies look like magic, AI and Quantum more than qualify to that group!
For the next Mauritius Cyber Security Club event, MU.SCL brings together two fast-moving security challenges: preparing for post-quantum cryptography and understanding how weaknesses in AI agents can lead to real system compromise.
MU.SCL S03E05 – A Kind of Magic will take place on Tuesday, 1 September 2026, at the Flying Dodo in Bagatelle (MAURITIUS)
Talk 1 – Post-Quantum Cryptography
Sylvain Martinez – ElysiumSecurity
Quantum computers capable of breaking today’s widely used public-key cryptography are not yet available at the required scale. However, organisations cannot afford to wait until they are.
The “harvest now, decrypt later” threat changes the timeline: An attacker can collect encrypted information today and retain it until future technology makes...
>>[READ MORE]
For the next Mauritius Cyber Security Club event, MU.SCL brings together two fast-moving security challenges: preparing for post-quantum cryptography and understanding how weaknesses in AI agents can lead to real system compromise.
MU.SCL S03E05 – A Kind of Magic will take place on Tuesday, 1 September 2026, at the Flying Dodo in Bagatelle (MAURITIUS)
Talk 1 – Post-Quantum Cryptography
Sylvain Martinez – ElysiumSecurity
Quantum computers capable of breaking today’s widely used public-key cryptography are not yet available at the required scale. However, organisations cannot afford to wait until they are.
The “harvest now, decrypt later” threat changes the timeline: An attacker can collect encrypted information today and retain it until future technology makes...
>>[READ MORE]
Cyber Security controls that actually matters
NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here. While a written post cannot fully reproduce the depth, examples, and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.
Cyber security does not fail because organisations lack frameworks, standards or good advice. In fact, the opposite is often true. There are more frameworks, control catalogues, maturity models, vendor recommendations, regulatory expectations and best-practice documents than most organisations can realistically absorb. The real problem is not the lack of guidance. The problem is deciding what matters most, in the context of a real organisation, with real constraints....
>>[READ MORE]
Cyber security does not fail because organisations lack frameworks, standards or good advice. In fact, the opposite is often true. There are more frameworks, control catalogues, maturity models, vendor recommendations, regulatory expectations and best-practice documents than most organisations can realistically absorb. The real problem is not the lack of guidance. The problem is deciding what matters most, in the context of a real organisation, with real constraints.
>>[READ MORE]
Ransomware: Inside the Criminal Enterprise
NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here. While a written post cannot fully reproduce the depth, examples, and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.
Ransomware is no longer just malware. It is now a criminal business model, supported by developers, affiliates, brokers, negotiators, laundering services, help desks, data leak sites and a clear operating process. That was the main message behind our recent MU.SCL presentation, "Ransomware 2026: Inside the Criminal Enterprise", which looked at how the ransomware economy works, why victims still pay, and what organisations can do to reduce both the risk and the impact of an attack.
The first point to understand is scale. Chainalysis estimates that ransomware p...
>>[READ MORE]
Ransomware is no longer just malware. It is now a criminal business model, supported by developers, affiliates, brokers, negotiators, laundering services, help desks, data leak sites and a clear operating process. That was the main message behind our recent MU.SCL presentation, "Ransomware 2026: Inside the Criminal Enterprise", which looked at how the ransomware economy works, why victims still pay, and what organisations can do to reduce both the risk and the impact of an attack.
The first point to understand is scale. Chainalysis estimates that ransomware p...
>>[READ MORE]
Your Digital Ghost and why it matters
NOTE: In this series of posts, we revisit recent presentations delivered at MU.SCL and provide additional context around the slide decks shared here. While a written post cannot fully reproduce the depth, examples, and discussion of a live session, it should help readers better understand the topic, the key messages, and the practical points behind the slides.
Most organisations still think of a cyber attack as something that starts when an attacker touches their systems. A phishing email arrives, a VPN login fails, a scanner appears in the firewall logs, or an endpoint alert is triggered. At that point, security teams start investigating and everyone agrees that something has begun.
But in many cases, the attack started earlier.
Not in a way that generated logs or triggered an alert, but in the attacker's preparation. Before the first malicious packet reaches the perimeter, the attacker may already know...
>>[READ MORE]
Most organisations still think of a cyber attack as something that starts when an attacker touches their systems. A phishing email arrives, a VPN login fails, a scanner appears in the firewall logs, or an endpoint alert is triggered. At that point, security teams start investigating and everyone agrees that something has begun.
But in many cases, the attack started earlier.
Not in a way that generated logs or triggered an alert, but in the attacker's preparation. Before the first malicious packet reaches the perimeter, the attacker may already know...
>>[READ MORE]
MAURITIUS SECURITY CLUB IS BACK - MU.SCL Season 3!
After many years, we are finally back!
We are happy to confirm our new meeting for the Mauritius Cyber Security Club: MU.SCL.
This FREE to attend meeting will take place at the Flying Dodo Brewing Company in Bagatelle. In there conference room upstairs.
In this new event, the following two talks will be presented:
- Talk1 - 2025 LESSONS FOR 2026 (Sylvain Martinez - ELYSIUMSECURITY): The first talk will provide an overview of the main security stories (horrors) or 2025 and what we can learn about them to make 2026 more secured.
- Talk2 - AI, ENABLER OR THREAT? (Sylvain Martinez - ELYSIUMSECURITY): The second talk will look at the latest news related to Artificial Intelligence, how it is used to enhance security protections but also used to facilitate more sofisticated attacks. We will also touch on what it may means for our future security jobs/roles!
>>[READ MORE]
Programming and Cyber Security
The Mauritius Python User Group kindly asked me to do a presentation on programming and Cyber Security.
In this presentation, I provide an overview of why knowing programming can make you a better cyber security professional, a look at the most popular languages and some pitfalls to avoid.
You can find the slides to this presentation on slideshare here.
And there was also a video recording available on Youtube.
>>[READ MORE]
NATIONAL CYBER SECURITY DRILL 2019
ELYSIUMSECURITY was asked to participate in the 2019 Mauritius National Cyber Drill
where we presented on Incident Response in front of Mauritian organisations that are critical to the operation of the country.
We took this opportunity to introduce the core concepts of the NIST SP 800-61 Incident Response framework.
We also provided a high level view of the ELYSIUMSECURITY Incident Response framework, which is a practical implementation of the NIST SP 800-61 Incident Response frameworkand the FIRST CSIRT services Framework
The updated presentation slides are available in our DOWNLOAD section...
>>[READ MORE]
THE MAURITIUS SECURITY CLUB IS BACK!
We are delighted to announce the second season of the Mauritius Security Club (MU.SCL) is now on!
It has been a busy year for us in 2018, and 2019 looks open for some great opportunities.
Please join on the Wednesday 27th of February from 18:30 (6.30pm for those english out there!).
We will start with a talk revisiting how you traditionally use IDS into something more offensive when conducting Penetration Testing or Red Team exercises.
This will be followed by a discussion where it is your chance to shape the content of the MU.SCL for 2019! You can register here: EVENTBRITE REGISTRATION
>>[READ MORE]