New ITW-exploited vulnerabilities, breaches and international law enforcement activity, new global APT operations
Vulnerabilities: 0-days and ITW flaws On August 28, 2026, PaperCut released a second emergency patch (Emergency Patch Release 2) for versions 24, 25 and 26 in relation to the 0-day...
Read moreAttacks in Italy, offensive campaigns and APT activity, compromises and global efforts to counter North Korean threats
Italy: multiple malicious activities observed Security researchers identified two phishing websites targeting Telepass customers. Data entered by victims is intercepted instantly via WebSocket (WSS), ensuring successful theft even if the...
Read moreNew attacks in Italy, data breaches reported, offensives from China
Italy: new phishing and ransomware offensives Over the past two weeks, multiple phishing campaigns have targeted Italian users. One operation abused the name and logo of Fineco Bank. In particular, a fraudulent email with the subject “Confirmation of...
Read moreUpdates on React2Shell exploitation, the latest from Beijing and Tehran, new attacks in Italy
React2Shell: EtherRAT and other malware delivered in state-sponsored and cybercrime activity During a recent attack based on the exploitation of the critical vulnerability CVE-2025-55182 (known as React2Shell), security researchers identified...
Read more