InfoSecBulletin Cybersecurity for mankind
WhatsApp revealed that seven Italians, along with victims from over a dozen other European countries, were targeted by spyware in a widespread hacking campaign, according to the Italian government.
Italy’s cybersecurity agency, Agenzia per la Cybersicurezza Nazionale (ANC), is investigating alleged hacking attempts by Paragon Solutions, according to a statement from the government on Wednesday.
CVE-2025-24201
Apple fixes 0-day exploited in “extremely sophisticated attack”
Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws
Ballista Botnet infects 6000 Unpatched TP-Link Routers
CVE-2025-24813
Flaw in Apache Tomcat Exposes Servers to RCE
CISA Adds 3 Ivanti Endpoint Manager Bugs to KEV
Ransomware Attacks Set Records in February: New Data Shows
Cyber attack at Japanese telecom leader NTT hits 18,000 companies
Cyber heist: Pune losses Rs 6007 crore in cyber scam
Nearly 1 million airport lost and found records leaked
Exploiting CVE-2024-4577, Attackers Target Japan with Cobalt Strike
The statement appeared to deny that the government was behind the targeting, saying it “excludes” allegations that journalists and others have been “subjected to control by the intelligence, and therefore by the Government.”
Victims who have come forward include a journalist investigating Prime Minister Giorgia Meloni’s far-right party, a migrant advocate, and a Libyan activist in Sweden who has criticized Italy.
WhatsApp lawyers briefed the ANC on the locations of the victims, the statement said.
The statement indicates that the targeted individuals have phone numbers linked to Belgium, Greece, Latvia, Lithuania, Austria, Cyprus, Czech Republic, Denmark, Germany, the Netherlands, Portugal, Spain, and Sweden.
WhatsApp stated that the attackers used Paragon Solutions spyware, a zero-click surveillance tool currently utilized by the U.S. government among others.
Paragon’s executive chairman, John Fleming, told TechCrunch that the company has the U.S. government and its allies as clients, though he did not specify which allies. The company did not respond to requests for comment.
WhatsApp reported that Paragon attempted to infect phones using a malicious PDF file and has since shut down the attack method.
