The Gentlemen Archivi

PHP2Shell, Fragnesia and new ITW exploits, APT and cyberspionage operations, the latest from Italy

Vulnerabilities: new developments concerning PHP2Shell and active exploitation of flaws in Linux, Brotli and enterprise products During the week, developments concerning CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2), collectively known as PHP2Shell,...

The latest from Italy, ITW exploits and new 0-days, Oxygen Forensics, breaches and arrests

02 Oct

Italy: phishing, hacktivism and new ransomware claims A “documents”-themed phishing campaign has been identified in Italy, exploiting the name and logo of the National Research Council (CNR) to exfiltrate employees’...

The latest from Italy, international cybercrime operations, updates from Tehran and Beijing

21 Sep

Italy: Revolut data breach, ransomware claims and phishing In September 2026, Revolut confirmed that it had disclosed sensitive information belonging to a limited number of customers in response to fraudulent...

BlueMoon used in espionage campaigns, the latest developments on the APT front, global cybercrime activity and operations targeting Italy

11 Sep

BlueMoon: 0-day exploit kit rapidly adopted in espionage campaigns Between late August and early September 2026, BlueMoon, a new exploit kit used by espionage-focused groups in targeted spear phishing campaigns,...

New ITW-exploited vulnerabilities, breaches and international law enforcement activity, new global APT operations

07 Sep

Vulnerabilities: 0-days and ITW flaws On August 28, 2026, PaperCut released a second emergency patch (Emergency Patch Release 2) for versions 24, 25 and 26 in relation to the 0-day...

New offensives in Italy, the latest from the APT landscape, international cyber operations

31 Aug

Italy: phishing attacks and ransomware claims This week, several phishing operations were identified in Italy. An email using the name and logo of the Ministry of Health, pretending to offer...

The latest from Italy, emerging APT operations, newly announced breaches, and law enforcement activity

13 Jul

Italy: malware, smishing, and ransomware activity On July 9, 2026, security researchers identified a campaign in Italy impersonating the UniCredit brand by promoting a fake banking rewards program designed to...

Attacks in Italy, cybercrime operations, developments in the APT and hacktivist landscape

26 Jun

Italy: cybercrime and hacktivist activities Several active phishing operations have been detected in Italy that fraudulently exploit the name, logo, and visual identity of the Italian Revenue Agency (Agenzia delle...

Italy targeted by multiple adversaries, developments in the APT landscape, vulnerabilities exploited ITW

19 Jun

Italy: several malicious activities observed A phishing campaign has been detected in Italy that abuses the identity of the Postal Police’s Online Public Security Office (Commissariato di P.S. Online) to...

Italy targeted by multiple adversaries, novel APT operations, emerging threats, and supply chain compromises

03 Jun

Italy: New ransomware claims The pro-Russian hacktivist collective NoName057(16) has resumed targeting Italian websites following the allocation of an additional €10 million in support of Ukraine for the restoration of...