Zero-Day Exploits, Leaked State Threats, and Healthcare Targeting

Vulnerability

Active SAP NetWeaver Exploits (CVSS 10.0)

SAP is rushing to patch a critical 10.0 CVSS flaw in NetWeaver that allows unauthenticated file uploads leading to RCE. If you have SAP in the stack, this code execution risk needs to go to the very top of the sprint board today.

News

Maui Ransomware Returns to Target Healthcare

Maui is back on the menu. CISA and the FBI are warning that this ransomware variant is actively targeting healthcare and public health sectors again. If you're defending critical infrastructure, treat this as a distinct campaign rather than background noise.