SAP Zero-Days, Cloud Wiping, and the Defense Tooling Gap

News

SAP NetWeaver Zero-Day Under Active Exploitation

This is a critical one for anyone running SAP in production. If you have NetWeaver exposed, assume compromise and patch immediately.

Ransomware Groups Targeting Cloud Backup Destruction

Ransomware groups are now destroying cloud backups to eliminate recovery options. This changes the game for incident response and makes immutable backups a necessity.

IBM AIX Remote Code Execution Vulnerability

IBM AIX is still running critical workloads in finance and enterprise. This RCE flaw needs immediate patching if you're in that ecosystem.

New Botnet Variant Exploits Routers and NVRs for DDoS

Another IoT botnet variant spreading through routers and network video recorders. The botnet grind continues to be a persistent background threat.

Volt Typhoon Continues Targeting US Critical Infrastructure

Volt Typhoon's persistent targeting of US critical infrastructure remains a serious concern. State-sponsored actors are playing the long game here.

Critical Ivanti Vulnerability Under Active Exploitation

Ivanti continues to be a favorite target for attackers. If you're running their products, this needs immediate attention.

Tools

New Nuclei Templates for SAP NetWeaver Vulnerabilities

The community is already shipping nuclei templates for the SAP zero-day. This is exactly the kind of defense automation that needs to keep pace with attacker tooling.