Everest Team Archivi

Novel APT Operations, In-the-Wild Exploits and New 0-Days, High-Profile Compromises

APT: new operations conducted across Eurasia and the Middle East Since at least July 2025, the Russian state-sponsored group Void Blizzard (also known as Laundry Bear, CL-STA-1114, and TA488) has...

New exploit chains and exploitation activity, AI between autonomous capabilities and offensive use, cyber incidents and campaigns

27 Jul

Vulnerabilities: Pre-auth RCE exploit chain in WordPress and new evidence of in-the-wild exploitation On July 17, 2026, WordPress released versions 6.9.5 and 7.0.2 to address two core vulnerabilities, CVE-2026-63030 and...

New attacks in Italy, malware and supply chain offensives detected, data breaches reported

11 May

Italy: several malicious activities observed A phishing campaign has been detected in Italy that uses a malicious clone of the Caritas Italiana website to carry out identity theft against citizens,...

Chinese and Russian APT activity tracked, multiple breach disclosures, ShadowV2 observed and malicious npm packages identified

01 Dec

APT: updates on China- and Russia-linked adversaries Security researchers have uncovered Operation WrtHug, a campaign that in recent months has targeted SOHO devices worldwide by exploiting n-day vulnerabilities in the...

New attacks in Italy, state-sponsored activity, operations in Ukraine

17 Nov

Italy: cybercrime operations target the country During the past week, several phishing campaigns targeting Italy were identified. In one case, a fake login portal for students and staff of the...