TLDR Tech / InfoSec
Salt Typhoon breach IBM subsidiary in Italy: a warning for Europe's digital defenses
Italian outlet La Repubblica attributed an April 2026 breach of Sistemi Informativi, the IBM Italy subsidiary that runs IT infrastructure for Italian public agencies and critical industries, to China-linked APT Salt Typhoon, citing intelligence sources, though IBM's confirmation stopped at "identified and contained" with no scope disclosed. Salt Typhoon's tradecraft favors Citrix and Cisco zero-days and supply-chain footholds over phishing, with 2025–2026 victims including Viasat, Canadian telecoms, the US Army National Guard, and Dutch government networks. A managed-services provider compromise of this depth is a one-to-many pivot into Italian government databases, so defenders at MSP-dependent organizations should hunt for prolonged low-volume exfiltration on telecom and edge appliances and review third-party access scopes.
Read the full story