Priorities for the Week: The SAP, Ivanti, and Typhoon Threat Stack

SAP NetWeaver Zero-Day Under Active Exploitation Drops Cryptominers

The cryptominer deployment looks like the initial payload, but the real risk is the persistent access and the foothold for whatever comes next. If you're running SAP NetWeaver, assume compromise and patch immediately.

Ivanti Endpoint Manager Critical Flaw Adds to the Build-and-Break Race

The exploit is public and the attack surface is massive. If you're running Ivanti, treat this as a critical priority; a patch is the only real fix here.

Volt Typhoon Targets U.S. Critical Infrastructure for Long-Term Persistence

This is another loud signal that critical infrastructure is a primary target for well-resourced actors. The focus on edge devices means your attack surface is wider than you think.