Qilin Team Archivi

New exploit chains and exploitation activity, AI between autonomous capabilities and offensive use, cyber incidents and campaigns

Vulnerabilities: Pre-auth RCE exploit chain in WordPress and new evidence of in-the-wild exploitation On July 17, 2026, WordPress released versions 6.9.5 and 7.0.2 to address two core vulnerabilities, CVE-2026-63030 and...

Italy Targeted by Multiple Adversaries, Developments in the APT Landscape, Vulnerabilities Exploited ITW

17 Jul

Italy: multiple Malicious Activities Observed Several malicious activities targeting Italy have been identified. A smishing campaign was detected leveraging the theme of a purported failed delivery in the name of...

Multiple breaches announced, vulnerabilities exploited ITW, attacks in Italy

15 Jun

Breaches: University of Oxford, World Food Programme (WFP), Tchap and ServiceNow targeted Third-party provider Group GTI, responsible for the CareerConnect platform used by the University of Oxford, informed the institution...

Italy targeted by multiple adversaries, novel APT operations, emerging threats, and supply chain compromises

03 Jun

Italy: New ransomware claims The pro-Russian hacktivist collective NoName057(16) has resumed targeting Italian websites following the allocation of an additional €10 million in support of Ukraine for the restoration of...

New attacks in Italy, malware and supply chain offensives detected, data breaches reported

11 May

Italy: several malicious activities observed A phishing campaign has been detected in Italy that uses a malicious clone of the Caritas Italiana website to carry out identity theft against citizens,...

Updates in cybercrime, the latest from Italy, several ITW exploits emerged

04 May

Cybercrime: several global campaigns reported A group called UNC6692 conducted a multi-stage intrusion campaign – based on social engineering techniques and a modular suite of custom malware called SNOW –...

New attacks in Italy, novel APT operations, reported data breaches

20 Apr

Italy: multiple malicious activities observed A phishing campaign has been detected in Italy leveraging the name of the Agenzia delle Entrate–Riscossione with the aim of stealing login credentials belonging to...

Attacks in Italy, several breaches announced, new state-sponsored operations

07 Apr

Italy: spyware, breaches, ransomware and DDoS WhatsApp notified approximately 200 users, primarily in Italy, that they had been targeted through a counterfeit version of its iPhone application containing spyware. Those...

War in Iran and cyber operations, offensive activity in Italy, iOS threats, and phishing campaigns

30 Mar

Iran: cyber offensives linked to the conflict In the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a relevant operational space,...

Cyber operations in the Iranian conflict, attacks in Italy, developments in the APT landscape

16 Mar

Iran: cyberattacks in the context of the conflict Within the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a significant operational...