News

SecurityWeek1d
SAP Zero-Day Possibly Exploited by Initial Access Broker
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications. Over 10,000 SAP ...
InfoRiskToday7h
Threat Actors Hacking SAP Critical Zero-Day
Threat actors are exploiting a zero day flaw in a partially deprecated SAP tool still widely used by governments and ...
The Register on MSN3d
Emergency patch for potential SAP zero-day that could grant full system control
German software giant paywalls details, but experts piece together the clues SAP's latest out-of-band patch is for a perfect ...
The Hacker News1d
New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework
The web shells grant the threat actor the ability to execute arbitrary commands in system context, with the privileges of the ...
Techzine Europe19h
SAP patches zero-day vulnerability in NetWeaver, denies exploitation
SAP has released emergency patches for a critical zero-day vulnerability in NetWeaver. The security flaw allows malicious ...
SAP fixes suspected NetWeaver zero-day exploited in attacks
SAP has released out-of-band emergency NetWeaver updates to fix a suspected remote code execution (RCE) zero-day flaw ...
CSO Online2d
SAP NetWeaver customers urged to deploy patch for critical zero-day vulnerability
The unrestricted file upload flaw is likely being exploited by an initial access broker to deploy JSP web shells that grant ...
Infosecurity Magazine3d
SAP Fixes Critical Vulnerability After Evidence of Exploitation
German software company SAP has finally disclosed and fixed a highly critical vulnerability in the NetWeaver Visual Composer ...
datensicherheit.de1d
SAP NetWeaver: New vulnerability of highest criticality disclosed
The “SAP Threat Intelligence System” from Onapsis has confirmed the possible exploitation of the vulnerability that was initially disclosed by ReliaQuest. In addition, the Onapsis Research Labs have ...