Energy, water, transport, industry: attacks on the systems essential services depend on.
17 articles
Attacks on internet-exposed refrigeration controllers moved from French supermarkets in October to stores across Europe in November. Exposure halved after CERT-FR's alert, yet more than 3,100 hosts stayed reachable. For boards, facility devices need a named owner, evidence of exposure and a place in continuity and third-party governance.
Every unmanaged network connection is a hidden doorway into your business, quietly exposing critical services and customer data to risks most organizations never see coming until it’s too late. Discover how overlooked links, forgotten devices, and unchecked access points can erode operations and undermine the trust your customers place in you, and learn where to start closing those gaps.
Edge devices like load balancers and reverse proxies sit at the front door of your network, and when they’re compromised, attackers gain a privileged foothold that often goes unnoticed. This post examines how a backdoor in HAProxy-based infrastructure exposes that risk, why these systems are so attractive to attackers, and what security teams should be checking now.
European infrastructure faces an increasing barrage of cyberattacks, spotlighting vulnerabilities within critical systems. As tensions rise, there’s speculation about Russia’s strategic positioning in these digital offensives. Discover the evolving landscape of cybersecurity challenges and the geopolitical implications of these threats.
MITRE has launched ESTM 3.0, an advanced framework designed to bolster cybersecurity measures for embedded systems integral to critical infrastructure. This latest iteration aims to address emerging threats by enhancing security protocols and improving system resilience, offering vital insights for industries reliant on these technologies.
Poland’s critical infrastructure has come under attack from the elusive hacking group known as Static Tundra. This cyber assault has raised alarms about national security, highlighting vulnerabilities in the country’s digital defenses. As experts scramble to counter this threat, the implications for economic and operational stability are severe. Discover how Poland is responding to safeguard its…
A recent cyberattack on Poland’s energy grid has highlighted significant vulnerabilities within critical infrastructure. The incident raises concerns about the resilience of essential services in the face of increasingly sophisticated cyber threats. As investigators delve into the breach, questions emerge regarding the security measures in place to protect national utilities from future attacks.
As cyber-physical threats intensify, industrial control systems (ICS) are under increasing scrutiny, particularly at the field level with sensors and PLCs. Outdated security measures leave these systems vulnerable amidst rising connectivity and sophisticated cyber adversaries. A blend of advanced visibility tools, AI-driven defenses, and inbuilt security designs is crucial to counter these…
The 2025 Electric Report highlights the pressing need for energy utilities to shift their focus towards comprehensive cybersecurity training to combat digital threats. As interconnected devices multiply, traditional approaches fall short, necessitating a skillset revamp in data analytics and cybersecurity. The report, reflecting feedback from over 500 U.S. energy leaders, reveals a move away…
The FBI has issued warnings about a cyber espionage threat linked to Russia’s FSB, specifically targeting vulnerabilities in Cisco equipment. Despite patches for these vulnerabilities, many devices remain exposed. The sophisticated group, known for deploying malware and adapting its strategies, has been active for over a decade, focusing on sectors including telecommunications and manufacturing…
The operational technology (OT) sector faces growing threats from AI-driven social engineering, which can disrupt critical infrastructures like energy and manufacturing. Unlike traditional IT breaches, these attacks can lead to operational and safety incidents. As AI tools lower the barriers for attackers, experts urge a rethink of security strategies, emphasizing insider threat monitoring and…
The cybersecurity risks facing operational technology (OT) systems are escalating, with potential financial exposures reaching $329 billion annually. A recent study outlines various risk scenarios, emphasizing indirect costs from operational disruptions. Manufacturing, chemical, and utility sectors are notably vulnerable. The report advocates for specific OT cybersecurity controls, like incident…
Our digital infrastructure faces rising threats from sophisticated cyberattacks, with industrial control systems increasingly targeted. A recent breach at a Norwegian dam facility highlights vulnerabilities in critical infrastructures, emphasizing the need for robust security measures. As operational technology environments merge with IT, they open pathways for cyber threats, demanding a shift…
As smart factories embrace IT-OT convergence and IoT integration, they unlock significant opportunities for efficiency but also face heightened cyber threats. Organizations must address the unique challenges of blending IT and OT, where traditional security priorities differ, by adopting holistic security strategies and standardized practices. Emphasizing robust access controls, regular asset…
The increasing cyber threats targeting European water systems raise alarm due to their significant implications for public health and safety. Despite the urgency, robust cybersecurity measures are lacking, leaving these critical infrastructures vulnerable. The integration of Industrial Control Systems with IT networks heightens efficiency but also risks exploitation by cybercriminals. To…
A recently identified critical security flaw in PTC’s license server software poses a significant threat to industrial organizations, creating potential avenues for lateral movement within networks.
In September 2024, attackers from the Scattered Spider collective broke into Transport for London’s network. Services kept running, but customer data was accessed and recovery cost tens of millions of pounds.
The design
Builds security into the design (Zero Trust, IAM/PAM, PKI), starting from the risks and the target governance.
Explore Trusted ArchitectureProof: Public transport operator
Within the architecture team of a major public transport operator, Blooo assesses, designs and maintains the security of the applications with the highest cybersecurity requirements.
25 application architectures secured
Tell us about your context: an expert will get back to you.
or write directly to trust@blooo.io
Your e-mail is sent from your own mail client: blooo.io stores nothing. We only use your details to reply to you. Privacy policy.