The Cybersecurity Basics You’re Still Getting Wrong

What if the cybersecurity fundamentals you implemented years ago are still the things putting your organization at risk today? In this episode of Trust Issues, Bruno Lecoq, CISO at BEMO, sits down with Laura Arce, Content Marketing Specialist at BEMO, to revisit his original 2022 “9 Tips for Preventing Cyber Attacks” and explore how these practices hold up in 2026. From MFA and password vaults to AI agent governance, just-in-time access, and the security risks hiding in your logs, Bruno breaks down what SMBs need to prioritize in an increasingly complex threat landscape. The biggest takeaway? You don’t always need more tools. Sometimes, you need to get the basics right and make sure they’re actually working.

Cybersecurity has changed significantly since BEMO first shared its nine tips for preventing cyberattacks in 2022. Yet, even as new technologies and AI-driven threats emerge, organizations continue to face challenges implementing the fundamentals consistently.

In this episode of Trust Issues, host Bruno Lecoq sits down with Laura Arce to revisit the cybersecurity practices businesses need to take seriously in 2026. They explore why multi-factor authentication remains one of the most effective ways to reduce account compromise risks, how passkeys are changing authentication, and why password vaults and timely software updates remain essential.

The conversation also examines the growing challenge of managing access in an environment where employees, administrators, and AI agents may all require different levels of permission.

A particularly memorable example demonstrates how a fake hotel Wi-Fi network can trick unsuspecting users into connecting to the wrong network, illustrating how easily everyday habits can create security vulnerabilities.

What You’ll Learn

Why multi-factor authentication remains one of the most important safeguards against account compromise.
How passkeys can reduce reliance on traditional passwords.
Why password vaults support stronger password habits.
How delayed software updates can leave organizations exposed to known vulnerabilities.
Why access permissions should be limited to what each person or system actually needs.
How AI agents introduce new questions around access, ownership and governance.
Why just-in-time administrative access can reduce unnecessary privilege exposure.
Why collecting security logs is not enough without reviewing them.
How fake public Wi-Fi networks can expose users to security risks.
How backups and phishing simulations contribute to a stronger security posture.
Why employee awareness and consistent security practices matter as much as technology.

Episode Chapters:

00:00 - Welcome
02:27 - Revisiting BEMO’s Cybersecurity Tips in 2026
02:47 - MFA and Passkeys: Strengthening Authentication
05:21 - Password Vaults and Stronger Password Habits
08:51 - Why Software Updates Shouldn’t Be Delayed
11:04 - Access Control and the New Challenge of AI Governance
14:29 - Just-in-Time Access: Limiting Administrative Privileges
18:13 - Endpoint Protection and Why Log Reviews Matter
21:52 - The Public Wi-Fi Trap: A Social Engineering Demonstration
25:59 - Data Backups and Understanding Your Responsibilities
27:39 - Phishing Simulations and Employee Security Awareness
30:32 - Three Cybersecurity Priorities for Businesses
31:32 - Closing Thoughts

Quotes:

"If you have MFA enabled, you already remove a 90% chance of being hacked."

"You have the logs, but are you reviewing it?"

"MFA is putting a key on your identity."

"By default, no one in the company has global admin. By default, you have to always request access"