SafeHorizon newsroom
Latest News

Data Harvesting for CaaS Detection: Turning Digital Clues into Actionable Intelligence
Data harvesting for CaaS detection is about gathering signals from multiple layers of the digital environment - network traffic, dark web fora, malware telemetry, social platforms, and encrypted communication channels - and transforming them into operational intelligence.

Spain blackout: uncovering unknowns with Hypothesis Competition Analysis
On April 28, 2025, a blackout hit the Iberian Peninsula, leaving Spain and Portugal powerless for hours. The GiCP used this event to conduct a practical exercise in structured intelligence analysis, aiming to uncover insights and better understand the incident.

RansomHouse: The Rising Sophistication of Ransomware Toolkits
Recent analysis reveals significant advancements in the encryption capabilities of RansomHouse, a ransomware-as-a-service (RaaS) operation carried out by a group known as Jolly Scorpius.

Join the GroundUp Hackathons: create innovations for Real-World CBRNE Challenges
Malware - short for malicious software - remains one of the most pervasive threats in cyberspace, encompassing various types of malicious code designed to disrupt, damage, or gain unauthorised access to computer systems.

Decentralized Crime, Centralized Response: Why LEAs Need Blockchain Intelligence Platforms
Blockchain brings financial freedom and innovation, but also new criminal challenges. Law Enforcement Agencies are turning to blockchain intelligence platforms to track and combat crypto-enabled crime.

Profiling of CSAM offenders
A new systematic review in Sexual Medicine Reviews (2026) analyzes 35 studies to profile those who create demand for Child Sexual Abuse Material (CSAM), helping us understand how to stop its spread.

Initial Access Brokers and why they matter
Initial Access Brokers (IABs) are specialised cybercriminals who access/infiltrate networks and then sell that access to others, therefore acting as brokers of information (and entry points) in the cybercriminal economy.

RansomHouse: The Rising Sophistication of Ransomware Toolkits
RansomHouse RaaS now uses multi-layered encryption and double extortion, hitting critical sectors and showing the need for proactive, adaptive cyber defense.

CTI good practices with hyperlinks
Working with CTI means handling risky data safely, use defanging, secure channels, encryption (PGP/E2EE), OPSEC, proper file handling and sandboxing.

Malware-as-a-Service (MaaS): a new business model
MaaS turns cybercrime into a paid service, letting even low-skill actors launch sophisticated attacks at scale, driving over half of recent malware threats worldwide.
Events

Privanova Presents SafeHorizon at UNODC
The SafeHorizon Project EU was recently presented at the UNODC Constructive Dialogue on Technical Assistance and International Cooperation by Farhan Sahito, partner at Privanova.

SafeHorizon Project featured at CERIS
Sara Degli-Esposti from GICP - Cybersecurity and Privacy Protection Research Group presented the latest findings from the SafeHorizon Project at the CERIS Project to Policy Seminar in Brussels.

SafeHorizon featured at IEEE Conference on Blockchain and Cryptocurrency (CryptoEx 2025)
Jon Ander Medina López from Vicomtech presented groundbreaking research at the 3rd IEEE International Workshop on Cryptocurrency Exchanges (CryptoEx 2025), part of the IEEE Conference on Blockchain and Cryptocurrency!

SafeHorizon Project featured at EuroDIG 2025
The SafeHorizon Project was featured at EuroDIG 2025 by Farhan Sahito, Partner at Privanova. He highlighted Privanova’s LEA Projects Cluster and its members, including SafeHorizon, showcasing their role in advancing security and governance across Europe.

IMTrustSec: International Workshop on Incident Management, Trusted Computing, Open Hardware, and Advanced Security Attacks
GICP - Cybersecurity and Privacy Protection Research Group is organising IMTrustSec 2025 – The International Workshop on Incident Management, Trusted Computing, Open Hardware, and Advanced Security Attacks, in collaboration with Diana Berbecaru.

Workshop on Cryptographic Tools for Blockchain
Join us in Madrid for the Workshop on Cryptographic Tools for Blockchain, affiliated with Eurocrypt 2025! Organised by top experts, including David Arroyo (CSIC/GICP, SafeHorizon Project partner), this one-day event will explore cutting-edge cryptographic innovations for DLT ecosystems.

GiCP at RootedCon 2025
GICP attended RootedCon 2025 – the information security conference held in Madrid on March 6–8. This event brings together most of Spain’s cybersecurity community in its various facets.

Research and Science Conference 2024/2025 (CEPOL)
The Vicomtech team will participate in the European Union Agency for Law Enforcement Training (CEPOL) Research and Science Conference 2024/2025 in Rome (25–27 March 2025).

SafeHorizon Project at DATAMITE Meet-Up Event
Constantinos Patsakis, our project coordinator, participated in the panel discussion at the DATAMITE Meet-Up Event on 6 February 2025. This event gathered top innovators, researchers, and industry leaders to bridge research and industry in EU-funded innovation.

SafeHorizon and Tampere University host Hands-On Workshop #1: The Dark Web
The SafeHorizon Project EU and Tampere University are hosting an online hands-on workshop on Dec 17th 2024.


