Skip to content
Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft. The exploit in question chains together CVE-2025-31324 and CVE-2025-42999 to bypass authentication and achieve remote code execution, SAP security company Onapsis said. CVE-2025-31324Read More »Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

Australia’s TPG Telecom Investigating iiNet Hack

TPG Telecom has disclosed a cybersecurity incident after discovering unauthorized access to an iiNet order management system. The post Australia’s TPG Telecom Investigating iiNet Hack appeared first on SecurityWeek.

Gambling Tech Firm Bragg Discloses Cyberattack

Bragg Gaming Group says hackers accessed its internal systems over the weekend, but did not affect its operations. The post Gambling Tech Firm Bragg Discloses Cyberattack appeared first on SecurityWeek.

Hacktivist Sentenced to 20 Months of Prison in UK

Al-Tahery Al-Mashriky of the Yemen Cyber Army has been accused of hacking into and defacing many websites as part of hacktivist campaigns. The post Hacktivist Sentenced to 20 Months of Prison in UK appeared first on SecurityWeek.

U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director of National Intelligence (DNI) Tulsi Gabbard, in a statement posted on X, said the U.S. government hadRead More »U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

Why Your Security Culture is Critical to Mitigating Cyber Risk

Why Your Security Culture is Critical to Mitigating Cyber Risk

After two decades of developing increasingly mature security architectures, organizations are running up against a hard truth: tools and technologies alone are not enough to mitigate cyber risk. As tech stacks have grown more sophisticated and capable, attackers have shifted their focus. They are no longer focusing on infrastructure vulnerabilitiesRead More »Why Your Security Culture is Critical to Mitigating Cyber Risk

Zero-Day Exploit in WinRAR File

A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups: The vulnerability seemed to have super Windows powers. It abused alternate data streams, a Windows feature that allows different ways of representing the same file path. The exploit abused that feature to trigger a previouslyRead More »Zero-Day Exploit in WinRAR File

New Exploit Poses Threat to SAP NetWeaver Instances

A new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks. The post New Exploit Poses Threat to SAP NetWeaver Instances appeared first on SecurityWeek.

Copyright © 2025 infosecintel.net