Groups, campaigns and attack techniques: what you need to know to assess your exposure.
17 articles
AI can now interpret keyboard sounds with alarming accuracy, turning everyday typing into a potential enterprise data leak and raising new concerns for workplace privacy and security.
Cybercriminals are using fake AI installers and malicious ads in trusted search results to compromise enterprise endpoints. Learn how these threats spread and what security teams should watch for.
Encrypted DNS improves privacy, but it doesn’t eliminate metadata exposure. Explore why DNS encryption still leaves visibility gaps and what that means for cyber resilience.
Cybercrime is accelerating across Asia-Pacific, with phishing, ransomware, and AI-enabled fraud testing every layer of business defense. Discover why resilience now belongs on the board agenda.
Fake GitHub repositories are luring retro gaming fans with malware posing as homebrew tools, putting systems and personal data at risk.
A recent breach exploiting a critical vulnerability in GeoServer has sent shockwaves through the tech community, underscoring the urgent necessity for robust cybersecurity measures. This incident highlights potential risks and the need for organizations to proactively protect their systems against emerging threats.
Recent events in Russia have spotlighted the vulnerabilities in connected vehicle technology, particularly with Porsche’s malfunctioning satellite security systems that left hundreds of vehicles immobile. This incident underscores the dependency of modern cars on technology and the potential disruptions when these systems fail. The root cause was linked to a failure in the Vehicle Tracking…
DragonForce, initially emerging in 2023, has rebranded as a ransomware cartel. Using Conti’s architecture, it collaborates with groups like Scattered Spider to launch complex global cyberattacks. Their strategic evolution now allows affiliates to create unique ransomware variants, expanding their influence in the cybercrime ecosystem. With over 200 victims across varied industries, DragonForce…
Russian state-backed hacking group Sandworm has escalated cyber warfare, targeting Ukraine’s grain industry with data-wiping malware. These attacks, occurring in June and September 2025, aim to destabilize Ukraine’s economy by disrupting grain exports—a crucial revenue source. Known for previous malware like PathWiper and HermeticWiper, Sandworm’s strategy now includes focused assaults on…
Curly COMrades, a cyber threat group, has developed a sophisticated method to evade detection by exploiting Windows Hyper-V environments. By activating the Hyper-V role on selected systems, they deploy lightweight virtual machines to host malware, thereby bypassing traditional security measures. Their operations include malware like CurlyShell and CurlCat for command and data execution, and they…
Attackers use AI to generate malware, orchestrate phishing campaigns and crack passwords, even if the widely quoted claim that 80% of ransomware attacks use AI came from a paper that was later withdrawn. Combating these threats requires not just AI-driven defenses, but also a strategic approach that blends human oversight and technology. Organizations must focus on automated…
A sophisticated phishing campaign targeting Booking.com users has been uncovered, exploiting the Japanese hiragana character “ん” to mimic legitimate URLs. This clever tactic takes advantage of visual similarities between the character and a forward slash, misleading users into visiting fake websites. These deceptive URLs appear authentic, challenging traditional security measures and emphasizing…
Recent ransomware attacks, such as the Qilin incident affecting the UK’s NHS, highlight the dire need for enhanced cybersecurity in critical sectors like healthcare. These attacks not only cause service disruptions but also pose life-threatening risks, underscoring the urgency for robust defense measures. The incident emphasizes the importance of updated security systems, employee training, and…
In a recent high-profile case, the FBI successfully gained access to the mobile phone of Thomas Matthew Crooks, the suspect involved in an assassination attempt on former President Donald Trump during a rally.
Recent developments in cyber warfare have seen a surge in Distributed Denial of Service (DDoS) attacks targeting French websites, highlighting potential risks for the upcoming Paris Olympics.
The U.S. Department of Commerce has made a significant move by prohibiting Kaspersky Lab, Inc., a subsidiary of the Russian cybersecurity company Kaspersky Lab, from providing its software and services to U.S. customers. This action is part of the broader efforts to safeguard national security and protect sensitive information from foreign threats.
Pegasus spyware has emerged as a significant threat targeting journalists and opposition figures, with recent incidents highlighting its use against Russian- and Belarusian-speaking media based in Europe.
The baseline
A security roadmap your management decides on and can defend, built on the gap between what it expects, what is required and what your teams declare is in place.
Explore Trusted AssessmentProof: French public financial institution
Replacement of the vulnerability scanning tool, management of the service centre for 350 applications and more than 2,000 servers, automated reporting, then handover to the internal teams.
2,000 + servers scanned
Tell us about your context: an expert will get back to you.
or write directly to trust@blooo.io
Your e-mail is sent from your own mail client: blooo.io stores nothing. We only use your details to reply to you. Privacy policy.