PHP2Shell, Fragnesia and new ITW exploits, APT and cyberspionage operations, the latest from Italy
Vulnerabilities: new developments concerning PHP2Shell and active exploitation of flaws in Linux, Brotli and enterprise products During the week, developments concerning CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2), collectively known as PHP2Shell,...
Read morePHP2Shell and new ITW exploits, APT and cyberspionage operations, the latest from Italy
Vulnerabilities: active exploitation of vulnerabilities in PHP, Plex, Siemens, Nextcloud and BeyondTrust During the week, the landscape of vulnerabilities exploited in the wild (ITW) was marked by an intensification of...
Read moreAttacks targeting Italy, APT and cyberspionage campaigns, new vulnerabilities exploited ITW
Italy: DDoS attacks, ransomware and smishing operations Over the past week, the pro-Russian collective NoName057(16) once again turned its attention to Italy, targeting several portals, including: Municipality of Bari; DGS...
Read moreItaly targeted by multiple adversaries, new cyberspionage and cybercrime campaigns, law enforcement operations and security incidents
Italy: attacks from multiple threat actors detected Over the past week, the pro-Russian hacktivist collective NoName057(16) renewed its focus on Italy, targeting the country over its military support for Ukraine...
Read moreThe latest from Italy, ITW exploits and new 0-days, Oxygen Forensics, breaches and arrests
Italy: phishing, hacktivism and new ransomware claims A “documents”-themed phishing campaign has been identified in Italy, exploiting the name and logo of the National Research Council (CNR) to exfiltrate employees’...
Read moreItaly targeted by multiple adversaries, APT and cyberspionage campaigns, breaches and AI
Italy: attacks from multiple threat sources detected The pro-Russian hacktivist collective NoName057(16) has once again targeted Italian portals. According to the group, the country was targeted because it had allegedly...
Read moreAttacks in Italy, several breaches announced, new state-sponsored operations
Italy: spyware, breaches, ransomware and DDoS WhatsApp notified approximately 200 users, primarily in Italy, that they had been targeted through a counterfeit version of its iPhone application containing spyware. Those...
Read moreWar in Iran and cyber operations, offensive activity in Italy, iOS threats, and phishing campaigns
Iran: cyber offensives linked to the conflict In the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a relevant operational space,...
Read moreThe Milan-Cortina 2026 Olympic and Paralympic Games: an unprecedented test of cyber resilience
The Milan-Cortina 2026 Olympic and Paralympic Games were a paradigmatic and unprecedented global event due to certain distinctive characteristics, such as the fragmented geographical distribution of the competitions and the...
Read moreCyber operations in the Iranian conflict, attacks in Italy, developments in the APT landscape
Iran: cyberattacks in the context of the conflict Within the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a significant operational...
Read more