Qilin Team Archivi

PHP2Shell, Fragnesia and new ITW exploits, APT and cyberspionage operations, the latest from Italy

Vulnerabilities: new developments concerning PHP2Shell and active exploitation of flaws in Linux, Brotli and enterprise products During the week, developments concerning CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2), collectively known as PHP2Shell,...

PHP2Shell and new ITW exploits, APT and cyberspionage operations, the latest from Italy

23 Oct

Vulnerabilities: active exploitation of vulnerabilities in PHP, Plex, Siemens, Nextcloud and BeyondTrust During the week, the landscape of vulnerabilities exploited in the wild (ITW) was marked by an intensification of...

Attacks targeting Italy, APT and cyberspionage campaigns, new vulnerabilities exploited ITW

16 Oct

Italy: DDoS attacks, ransomware and smishing operations Over the past week, the pro-Russian collective NoName057(16) once again turned its attention to Italy, targeting several portals, including: Municipality of Bari; DGS...

Italy targeted by multiple adversaries, APT and cyberspionage campaigns, breaches and AI

28 Sep

Italy: attacks from multiple threat sources detected The pro-Russian hacktivist collective NoName057(16) has once again targeted Italian portals. According to the group, the country was targeted because it had allegedly...

The latest from Italy, international cybercrime operations, updates from Tehran and Beijing

21 Sep

Italy: Revolut data breach, ransomware claims and phishing In September 2026, Revolut confirmed that it had disclosed sensitive information belonging to a limited number of customers in response to fraudulent...

New offensives in Italy, the latest from the APT landscape, international cyber operations

31 Aug

Italy: phishing attacks and ransomware claims This week, several phishing operations were identified in Italy. An email using the name and logo of the Ministry of Health, pretending to offer...

Phishing and Ransomware in Italy: Data Breach Affects Government Agencies and Cryptowallet Providers; Chinese APT Campaigns

24 Aug

Italy: phishing and ransomware campaigns Over the past week, several phishing campaigns have been detected involving fraudulent websites mimicking those of major financial and government organizations. A clone portal of...

New exploit chains and exploitation activity, AI between autonomous capabilities and offensive use, cyber incidents and campaigns

27 Jul

Vulnerabilities: Pre-auth RCE exploit chain in WordPress and new evidence of in-the-wild exploitation On July 17, 2026, WordPress released versions 6.9.5 and 7.0.2 to address two core vulnerabilities, CVE-2026-63030 and...

Italy Targeted by Multiple Adversaries, Developments in the APT Landscape, Vulnerabilities Exploited ITW

17 Jul

Italy: multiple Malicious Activities Observed Several malicious activities targeting Italy have been identified. A smishing campaign was detected leveraging the theme of a purported failed delivery in the name of...

Multiple breaches announced, vulnerabilities exploited ITW, attacks in Italy

15 Jun

Breaches: University of Oxford, World Food Programme (WFP), Tchap and ServiceNow targeted Third-party provider Group GTI, responsible for the CareerConnect platform used by the University of Oxford, informed the institution...