Defenders Scan SAP, Ransomware Hunts Backups, Phishing Goes AI

Actions

Nuclei Templates Merge for SAP CVE-2025-31324

This is the defender's play. The community moves fast. Patch your SAP systems first, then use this template to verify your environment is clean.

Analysis

Ransomware Shifts Focus to Cloud Backup Erasure

Attackers aren't just encrypting production data. They are killing the backups first to guarantee the ransom gets paid. If your recovery strategy relies on a single cloud snapshot, you are a target.

Threats

AI Phishing Drops the Quality Barrier for Attackers

AI is lowering the barrier to entry for social engineering. You no longer need perfect English or deep technical knowledge to launch a convincing campaign. The output is polished and indistinguishable from helpdesk requests.

Botnet Scans Routers and NVRs for DDoS Firepower

Perimeter devices are the new favorite entry point. They sit on the edge with little monitoring and often run stale firmware. If your router or NVR has default credentials, it is already part of the botnet.

Vulnerability

SAP NetWeaver Zero-Day Flaw Patched

This was a highly critical RCE. If you are running NetWeaver, check your patch status now because the community has already reverse-engineered the exploit.