Italian Adviser Becomes Target of Paragon Graphite Spyware

An Italian adviser has recently been targeted by the sophisticated Paragon Graphite spyware, highlighting the increasing risks faced by high-profile individuals in the cybersecurity landscape. Paragon Graphite is a highly advanced spyware toolkit known for its stealth and persistence, often used by state-sponsored threat actors to conduct espionage and gather sensitive information. This incident underscores the evolving tactics of cyber attackers who leverage cutting-edge malware to infiltrate secure environments and compromise confidential data. The attack on the Italian adviser serves as a stark reminder of the importance of robust cybersecurity measures, especially for individuals in advisory or governmental roles who may possess valuable intelligence. Organizations and individuals alike must remain vigilant against such threats by implementing comprehensive security protocols, regular threat assessments, and continuous monitoring to detect and mitigate spyware intrusions. This case also emphasizes the need for international cooperation in combating cyber espionage, as the tools and techniques employed by attackers transcend borders and impact global security. As Paragon Graphite continues to evolve, cybersecurity professionals must stay informed about its capabilities and develop adaptive defense strategies to protect critical assets from similar attacks.

This Cyber News was published on cybersecuritynews.com. Publication date: Mon, 10 Nov 2025 18:10:12 +0000


Cyber News related to Italian Adviser Becomes Target of Paragon Graphite Spyware

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions | WIRED - Measures have included placing spyware vendors like NSO Group and Intellexa on the so-called Entity List to prevent any US companies from doing business with them; enacting a visa restriction policy against multiple individuals “who have been ...
1 year ago Wired.com
Paragon Spyware Exploited WhatsApp Zero-day Vulnerability to Attack High-value Targets - Researchers have uncovered extensive evidence linking Israeli firm Paragon Solutions to a sophisticated spyware operation that exploited a zero-day vulnerability in WhatsApp to target journalists and civil society members. The investigation confirmed ...
7 months ago Cybersecuritynews.com
Italian Adviser Becomes Target of Paragon Graphite Spyware - An Italian adviser has recently been targeted by the sophisticated Paragon Graphite spyware, highlighting the increasing risks faced by high-profile individuals in the cybersecurity landscape. Paragon Graphite is a highly advanced spyware toolkit ...
2 days ago Cybersecuritynews.com Paragon Graphite
WhatsApp patched zero-click flaw exploited in Paragon spyware attacks - Citizen Lab also mapped out the server infrastructure used by Paragon to deploy the Graphite spyware implants on targets' devices, finding potential links to multiple government customers, including Australia, Canada, Cyprus, Denmark, Israel, and ...
7 months ago Bleepingcomputer.com
Citizen Lab details ongoing battle against spyware vendors - Citizen Lab senior researcher Bill Marczak said that while the organization has achieved some important wins against spyware proliferation, the progress is inevitably hindered by vendors that continually adapt their technologies and practices. The ...
1 year ago Techtarget.com
Spyware isn't going anywhere, and neither are its tactics - The illegal use of spyware to target high-profile or at-risk individuals is a global problem, as highlighted by this article from The Register that Talos' Nick Biasini just contributed to. As we've written about, many Private Sector Offensive Actors ...
1 year ago Blog.talosintelligence.com CVE-2024-23222
Intellexa and Cytrox: From fixer-upper to Intel Agency-grade spyware - Cisco Talos has a new, in-depth analysis of timelines, operating paradigms and procedures adopted by spyware vendor Intellexa. Talos' analysis revealed that rebooting an iOS or Android device may not always remove the Predator spyware produced by ...
1 year ago Blog.talosintelligence.com
Intellexa Spyware Adds Persistence with iOS or Android Device - In the shadowy realm of commercial spyware, the spotlight turns to the notorious Intellexa spyware and its Predator/Alien solution, as dissected by Cisco Talos in their comprehensive May 2023 report. This expose navigates the labyrinthine intricacies ...
1 year ago Gbhackers.com
US Uses Visa Restrictions in Struggle Against Spyware - The United States will impose visa restrictions on foreign individuals who have been involving the misuse of spyware, the latest effort by the Biden Administration to address the dangers of the commercial software that often is used by governments ...
1 year ago Securityboulevard.com
An Italian journalist speaks about being targeted with Paragon spyware | The Record from Recorded Future News - In an interview with Recorded Future News, Cancellato said he is not sure if Prime Minister Giorgia Meloni’s government is tied to the incident, though Paragon has reportedly ended its contract with Italy. [We found] a lot of antisemitic and racist ...
8 months ago Therecord.media
ICE reinstated spyware Paragon to hack suspects' phones, court documents reveal - The U.S. Immigration and Customs Enforcement (ICE) agency has reinstated the use of the spyware Paragon, a powerful surveillance tool, to hack into suspects' phones, according to recent court documents. Paragon is known for its ability to bypass ...
2 months ago Infosecurity-magazine.com
WhatsApp flaw can let attackers run malicious code on Windows PCs - On January 31, after mitigating the security issue server-side, WhatsApp alerted roughly 90 Android users from over two dozen countries, including Italian journalists and activists who were targeted in Paragon spyware attacks using the zero-click ...
7 months ago Bleepingcomputer.com CVE-2025-30401
What is Spyware? How It Works and How to Protect Yourself Against It - Spyware is a type of malicious software that is designed to collect sensitive data from victims without their knowledge or consent. It is typically installed on computers without the user’s knowledge or consent, and collects sensitive information ...
2 years ago Heimdalsecurity.com
Is Your Organization Infected by Mobile Spyware? - The surge in mobile device usage within organizations has inevitably opened the floodgates to a new kind of cyber threat-mobile spyware. The growing dependence on mobile technology has made it imperative for organizations to recognize and mitigate ...
1 year ago Blog.checkpoint.com
Meta Disrupts 8 Spyware Firms, 3 Fake News Networks - Meta has identified and interrupted six spyware networks linked to eight companies in Italy, Spain, and the United Arab Emirates, as well as three fake news operations from China, Myanmar, and Ukraine. It outlines how fake news operations - ...
1 year ago Darkreading.com
Kaspersky Details Method for Detecting Spyware in iOS - Researchers with cybersecurity firm Kaspersky are detailing a lightweight method for detecting the presence of spyware, including The NSO Group's notorious Pegasus software, in Apple iOS devices. The new method, which calls for looking for traces of ...
1 year ago Securityboulevard.com
U.S. rolls out visa restriction policy on people who misuse spyware to target journalists, activists - WASHINGTON - The Biden administration announced Monday it is rolling out a new policy that will allow it to impose visa restrictions on foreign individuals involved in the misuse of commercial spyware. The administration's policy will apply to people ...
1 year ago Pbs.org
US to Roll Out Visa Restrictions on People Who Misuse Spyware to Target Journalists, Activists - The Biden administration announced Monday it is rolling out a new policy that will allow it to impose visa restrictions on foreign individuals involved in the misuse of commercial spyware. The administration's policy will apply to people who've been ...
1 year ago Securityweek.com
Ransomware gangs exploit Paragon Partition Manager bug in BYOVD attacks - Microsoft had discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, with one used by ransomware gangs in zero-day attacks to gain SYSTEM privileges in Windows. "Microsoft has observed threat actors (TAs) exploiting this ...
8 months ago Bleepingcomputer.com CVE-2025-0289
10 Best API Monitoring Tools in 2025 - What Is Good?What Could Be Better?A simple interface makes Postman easy to create, manage, and execute API tests.Postman’s reporting may be basic compared to test management tools.Automatic testing makes Postman efficient for running tests ...
3 months ago Cybersecuritynews.com
US announces visa ban on those linked to commercial spyware - Secretary of State Antony J. Blinken announced today a new visa restriction policy that will enable the Department of State to ban those linked to commercial spyware from entering the United States. As part of this effort, the Biden Administration ...
1 year ago Bleepingcomputer.com
Google says spyware vendors behind most zero-days it discovers - Commercial spyware vendors were behind 80% of the zero-day vulnerabilities Google's Threat Analysis Group discovered in 2023 and used to spy on devices worldwide. Zero-day vulnerabilities are security flaws the vendors of impacted software do not ...
1 year ago Bleepingcomputer.com
Italian spyware vendor linked to Chrome zero-day attacks - A recent investigation has linked an Italian spyware vendor to a series of Chrome zero-day attacks, raising significant concerns in the cybersecurity community. These attacks exploited previously unknown vulnerabilities in the Chrome browser, ...
2 weeks ago Bleepingcomputer.com CVE-2023-4863
CVE-2024-21589 - An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration ...
1 year ago Tenable.com

Cyber Trends (last 7 days)