SAP Zero-Day Upload: The Hunt for Backups and Edge Devices

Tools

Nuclei Drops SAP Zero-Day Scan Template

The community just merged a new template for the SAP NetWeaver Visual Composer zero-day. If you're running SAP, you can now scan for this actively exploited RCE hole at scale using Nuclei.

News

Under Siege: SAP NetWeaver Zero-Day Confirmed in Wild

The critical CVSS 10.0 flaw in SAP NetWeaver is confirmed under active exploitation. If you haven't tagged this as a code-red incident yet, you're likely already behind.

IoT Botnet Expansion Targets Edge Device Defaults

A new variant is chaining default credentials to hijack routers and NVRs for DDoS warfare. It highlights the massive, unresolved liability of unmanaged edge devices sitting on your network.

Analysis

Ransomware Strategy Shifts to Cloud Backup Annihilation

Ransomware ops are systematically hunting down your cloud backups and snapshots before they hit production. Immutable, air-gapped backups are the only leverage you have left in negotiations.

Rise of the Machines: AI Precision in Spear-Phishing

Phishing is moving from generic spam to highly contextualized pretexting driven by AI. Attackers are now scraping specific corporate details to make their lures perfect, meaning our heuristic defenses have to evolve.