Attack Surface Sprawl: From SAP to Snippet Leaks

Analysis

Ransomware Shifts to Destroying Cloud Backups

Attackers aren't just encrypting production data anymore; they are actively hunting and wiping cloud backups to prevent recovery. If your disaster recovery plan relies on a static S3 bucket, you are already compromised.

News

SAP NetWeaver Zero-Day Under Active Exploitation

A critical zero-day in SAP NetWeaver is being actively exploited in the wild. Enterprise teams need to treat this as a 'patch immediately' scenario or isolate the instances until they can, given the prevalence of SAP in sensitive environments.

Tools

New Nuclei Template for SAP Visual Composer

The community has pushed a new Nuclei template to scan for the SAP Visual Composer vulnerability. Use this to audit your estate right now; do not wait for a vendor scan schedule when free automation is available.