PHP2Shell and new ITW exploits, APT and cyberspionage operations, the latest from Italy
Vulnerabilities: active exploitation of vulnerabilities in PHP, Plex, Siemens, Nextcloud and BeyondTrust During the week, the landscape of vulnerabilities exploited in the wild (ITW) was marked by an intensification of...
Read moreItaly targeted by multiple adversaries, new cyberspionage and cybercrime campaigns, law enforcement operations and security incidents
Italy: attacks from multiple threat actors detected Over the past week, the pro-Russian hacktivist collective NoName057(16) renewed its focus on Italy, targeting the country over its military support for Ukraine...
Read moreBlueMoon used in espionage campaigns, the latest developments on the APT front, global cybercrime activity and operations targeting Italy
BlueMoon: 0-day exploit kit rapidly adopted in espionage campaigns Between late August and early September 2026, BlueMoon, a new exploit kit used by espionage-focused groups in targeted spear phishing campaigns,...
Read moreAttacks in Italy, offensive campaigns and APT activity, compromises and global efforts to counter North Korean threats
Italy: multiple malicious activities observed Security researchers identified two phishing websites targeting Telepass customers. Data entered by victims is intercepted instantly via WebSocket (WSS), ensuring successful theft even if the...
Read moreItaly targeted by multiple adversaries, developments in the APT landscape, vulnerabilities exploited ITW
Italy: several malicious activities observed A phishing campaign has been detected in Italy that abuses the identity of the Postal Police’s Online Public Security Office (Commissariato di P.S. Online) to...
Read moreNew attacks in Italy, malware and supply chain offensives detected, data breaches reported
Italy: several malicious activities observed A phishing campaign has been detected in Italy that uses a malicious clone of the Caritas Italiana website to carry out identity theft against citizens,...
Read moreDiverging attributions on the energy attack in Poland, new cybercrime offensives in Italy, multiple vulnerabilities exploited ITW
Poland: latest updates on the late-December attack on the power system On December 29, 2025, a coordinated cyberattack hit numerous Polish power system sites connected to distributed generation, in particular...
Read moreNew attacks in Italy, data breaches reported, offensives from China
Italy: new phishing and ransomware offensives Over the past two weeks, multiple phishing campaigns have targeted Italian users. One operation abused the name and logo of Fineco Bank. In particular, a fraudulent email with the subject “Confirmation of...
Read more