InfoSecBulletin Cybersecurity for mankind
WhatsApp revealed that seven Italians, along with victims from over a dozen other European countries, were targeted by spyware in a widespread hacking campaign, according to the Italian government.
Italy’s cybersecurity agency, Agenzia per la Cybersicurezza Nazionale (ANC), is investigating alleged hacking attempts by Paragon Solutions, according to a statement from the government on Wednesday.
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
CISA adds Langflow flaw to its KEV catalog
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition
The statement appeared to deny that the government was behind the targeting, saying it “excludes” allegations that journalists and others have been “subjected to control by the intelligence, and therefore by the Government.”
Victims who have come forward include a journalist investigating Prime Minister Giorgia Meloni’s far-right party, a migrant advocate, and a Libyan activist in Sweden who has criticized Italy.
WhatsApp lawyers briefed the ANC on the locations of the victims, the statement said.
The statement indicates that the targeted individuals have phone numbers linked to Belgium, Greece, Latvia, Lithuania, Austria, Cyprus, Czech Republic, Denmark, Germany, the Netherlands, Portugal, Spain, and Sweden.
WhatsApp stated that the attackers used Paragon Solutions spyware, a zero-click surveillance tool currently utilized by the U.S. government among others.
Paragon’s executive chairman, John Fleming, told TechCrunch that the company has the U.S. government and its allies as clients, though he did not specify which allies. The company did not respond to requests for comment.
WhatsApp reported that Paragon attempted to infect phones using a malicious PDF file and has since shut down the attack method.
