Critical vulnerabilities in n8n, Italy in the crosshairs of phishing and ransomware activity, the latest from China

New attacks in Italy, data breaches reported, offensives from China

 View all
Blog

Threat Intelligence

Explore analyses, trends, and insights from the world of Cyber Threat Intelligence: from emerging attack techniques to the most effective defense strategies, CTI is a key resource for understanding, anticipating, and countering the threats that put data and digital infrastructures at risk.

Sort by:
From older
From most recent
Threat Intelligence, News
Critical vulnerabilities in n8n, Italy in the crosshairs of phishing and ransomware activity, the latest from China

n8n: critical vulnerabilities with high operational impact In recent days, the open-source workflow automation platform n8n has been in the spotlight following the disclosure and analysis of multiple critical vulnerabilities,...
Threat Intelligence, News
New attacks in Italy, data breaches reported, offensives from China

Italy: new phishing and ransomware offensives Over the past two weeks, multiple phishing campaigns have targeted Italian users. One operation abused the name and logo of Fineco Bank. In particular, a fraudulent email with the subject “Confirmation of...
Threat Intelligence
Million-euro BEC fraud at the Opera di Santa Maria del Fiore

The Opera di Santa Maria del Fiore was involved in a million-euro BEC (Business Email Compromise) fraud. The incident dates back to 2024 but was disclosed only in December of...
Threat Intelligence, News
Phishing and ransomware in Italy, offensives hit the West, new 0-days disclosed

Italy: cybercrime activity across the country A new Polizia di Stato–themed phishing campaign has been tracked in Italy. As observed in previous cases, the email abuses the name and logo...
Threat Intelligence, News
Updates on React2Shell exploitation, the latest from Beijing and Tehran, new attacks in Italy

React2Shell: EtherRAT and other malware delivered in state-sponsored and cybercrime activity During a recent attack based on the exploitation of the critical vulnerability CVE-2025-55182 (known as React2Shell), security researchers identified...
Threat Intelligence, News
Phishing and ransomware in Italy, global data breaches, new state-sponsored operations

Italy: offensive cybercrime hits the country  A new phishing campaign targeting Italian users has been identified, leveraging the name and visual identity of the Italian Government and the Presidency of...
Threat Intelligence, News
Chinese and Russian APT activity tracked, multiple breach disclosures, ShadowV2 observed and malicious npm packages identified

 APT: updates on China- and Russia-linked adversaries  Security researchers have uncovered Operation WrtHug, a campaign that in recent months has targeted SOHO devices worldwide by exploiting n-day vulnerabilities in the...
Threat Intelligence
Chinese front companies BIETA and CIII and steganography in APT operations

The cyber ecosystem sponsored by the Chinese government remains the subject of significant analysis and discoveries. In line with the numerous revelations of the last few years—detailed investigations by Intrusion...
Threat Intelligence, News
New breaches and ransomware attacks, multiple vulnerabilities fixed, and the latest from the state-sponsored landscape 

Cybercrime: attacks on Almaviva, Eurofiber France, Pajemploi and Poltronesofà A few days after the publication on an underground forum of a leak of approximately 2.3 TB containing data linked to...
Threat Intelligence, News
New attacks in Italy, state-sponsored activity, operations in Ukraine

Italy: cybercrime operations target the country During the past week, several phishing campaigns targeting Italy were identified. In one case, a fake login portal for students and staff of the...
Threat Intelligence, News
Italy targeted by multiple adversaries, new APT operations, latest developments in cybercrime

Italy: DDoS, phishing, and ransomware attacks detected, along with BadCandy distribution During the first weekend of the month, NoName057(16) continued to claim DDoS attacks against the following Italian targets: the...
Threat Intelligence, News
New attacks targeting Italy, the latest state-sponsored operations, and newly discovered malware

Italy: NoName057(16) and phishing campaigns threaten the Peninsula The hacktivist group NoName057(16) has claimed new DDoS attacks against Italian portals in protest against the preparation of the twelfth military aid...
Threat Intelligence
Parts of the Great Firewall of China may have been “exported” to other countries

A year and a half after the leak to the technology company iSoon, which shed light on an important segment of the Chinese government’s cyber ecosystem, a new data leak...
Threat Intelligence, News
APT operational developments, malware families and variants, new cybercrime ecosystems, and methods of compromise

APT: new toolkits and TTPs from state-sponsored adversaries In the state-sponsored landscape, this week saw new tactics and tools from various APTs. The Indian Bitter sent phishing emails targeting diplomatic...
Threat Intelligence, News
Recent attacks in Italy, new malware developments, Ukraine hit by malicious campaigns

Italy: New offensives hit the country The Israeli-made spyware Graphite, developed by Paragon Solutions, has reportedly infected the devices of Italian businessman Francesco Gaetano Caltagirone and UniCredit CEO Andrea Orcel....
Threat Intelligence, News
APTs between East and West, malware news, three 0-days exploited in malicious campaigns

APT: State-sponsored campaigns detected around the globe This week, multiple campaigns by various state-sponsored adversaries were tracked worldwide. In Russia, the Sandworm subgroup known as Seashell Blizzard targeted critical infrastructure...
Threat Intelligence, News
Attacks targeting Italian entities, new data breaches disclosed, vulnerabilities exploited ITW

Italy: new offensives hit the country In the past week, several malicious campaigns were tracked in Italy. Specifically, two phishing operations abused the logos of the Healthcare Card System (Sistema...
Threat Intelligence, Cybersecurity
New cyber threats made with the support of AI

Cyber threat intelligence has fully entered the age of artificial intelligence and must now take into account its use by criminals of every kind. Scenarios that, until last year, were...