These days, scams linked to Booking.com have become harder to spot because they no longer rely solely on generic, poorly written or randomly sent emails. In many cases, attackers use genuine booking details, such as…
28 July 2026
Tech Blog
CERT Posts
The Hugging Face incident demonstrates that datasets, loaders, and AI pipelines must be treated as active attack surfaces. A system of autonomous AI agents exploited two code execution paths within the dataset processing pipeline. The…
21 July 2026
To organise a cybersecurity tabletop exercise, you need to start with a realistic scenario, involve IT, management, legal, communications and critical suppliers, define roles and escalation procedures, simulate decision-making under pressure, and conclude with an…
14 July 2026
In early July 2026, several Joomla websites suddenly displayed the same claim page: “Hacked by Antonkill”. At first glance, it may look like a classic case of digital vandalism, one of those attacks that simply…
6 July 2026
FortiBleed is not just another story about exposed Fortinet credentials. It is a far more concrete sign: access to FortiGate firewalls is becoming a commodity on the criminal market. In incidents of this kind, the…
26 June 2026
For those working in cyber security, there is a feeling that has now become a daily reality. Firewalls, EDRs and network segmentation remain essential, of course. But the most dangerous front is no longer the…
23 June 2026
For years, cybercrime was described as a linear sequence: a vulnerability, malware, unauthorised access, an encrypted system, a ransom demand. It was a common simplification, of course, but it worked. Not anymore. According to data…
15 June 2026
A post on a Russian underground forum is worth noting. The user “betway”, who is already active in sections known for the buying and selling of databases and material for spam campaigns, is offering a…
18 May 2026
In recent years, the phone we always carry in our pockets has become the favourite target of cybercriminals; not so much for the device itself, but for the relationship of trust we have with it….
12 May 2026
In recent months, many people have found themselves caught up in the same scam: a seemingly official letter, a purported administrative notice, and the belief that they have actually done something wrong. Then comes the…
4 May 2026
Tech Updates
Network Intrusion Detection Systems (NIDS) are fundamental tools in contemporary computer security, designed to identify malicious activity and security policy violations through continuous monitoring of network traffic. The primary objective of a NIDS is to…
18 March 2025
In the cybersecurity landscape, the focus has often been on identifying threats, which is crucial but not sufficient to ensure a comprehensive defence. The Cyberoo team has observed a growing need to improve remediation management,…
28 November 2024
In recent months CYBEROO has launched Cypeer Agent X: an advanced agent designed to enhance the Cypeer MDR (Managed Detection and Response) with an in-depth analysis of the company’s security posture. In this article, we…
23 October 2024
In recent months, we have released a new module for the MDR Cypeer: CypeerPOT. This new functionality further enriches the capabilities of our Managed Detection and Response (MDR), offering an advanced way to identify ongoing…
13 September 2024
Realized a new Dashboard for immediate horizontal correlation of alerts The introduction of the new alert management dashboard represents a significant step forward in the way companies monitor and manage internal security. In fact, this…
11 March 2024
CSI (Cyber Security Intelligence) is CYBEROO’s Threat Intelligence service, based on Open Source Intelligence. Its goal is to detect, collect and analyze sensitive information and data found in the Deep and Dark Web to protect…
18 January 2024
CYBEROO’s continuous investment in R&D has made possible the release of important updates to the Cypeer module, with the implementation of advanced Adaptive AI and Machine Learning technologies that enable improved analysis and stronger security…
29 November 2023
Incident Response Reports
Ransomware is no longer just a topic for conferences or polished slides. It is a concrete threat that stops real companies, halts production and puts entire business models at risk. To understand how devastating an…
3 March 2026
In recent weeks, a company in Italy fell victim to a double ransomware compromise. This case demonstrates how the lack of a structured DFIR (Digital Forensics & Incident Response) approach can lead to a second…
7 October 2025
In the world of cybersecurity, incident response is a crucial process that requires precision and expertise. A significant example of an effective intervention by Cyberoo Incident Response Team is the case of a well-known consultancy…
15 November 2024
Infostealers: silent thieves in the digital world Infostealers are a particularly insidious type of malware, designed to steal personal and sensitive information stealthily and often unnoticed. These malicious programmes operate in the background, collecting data…
9 October 2024
Knowing how to read a log and recognizing a behavioral anomaly, especially on non-working days and times, will inevitably reduce the risk of impairment. Recently, Cyberoo’s Incident Response team was engaged after a total Ransomware…
17 June 2024
We often talk about data protection and how to protect against exfiltration as malware and ransomware attacks of different types continue to proliferate. Nevertheless, the reality is that companies are still doing too little. Cyberoo’s…
27 May 2024
The statistics speak for themselves: the increase in ransomware attacks turns out to be across different organizations, regardless of their industry. This phenomenon can be attributed to several factors, including lack of adequate investment in…
24 April 2024
It often happens to work with companies that have signed contracts with ICT service providers that turn out to be inefficient when needed. In today’s business environment, Cybersecurity management must be configured as a multidimensional…
25 March 2024
It is common to have to deal with IT incidents and be faced with undesirable situations, not because of the type or severity of the incident, but rather because of the lack of organization of…
8 March 2024
Recently, a company in northern Italy was victim of a serious cyber attack that resulted in the compromise of its infrastructure and the interruption of operations. The perpetrators of the malicious attack gained unauthorized access…
25 May 2023
