Vulnerability (CVE)
A command injection vulnerability in SAP S/4HANA, tracked as CVE-2025-42957 with a CVSS score of 9.9, has come under active exploitation in the wild after SAP fixed it in its monthly updates last month. SecurityBridge Threat Research Labs and Pathlock both...
SAP released security updates on Tuesday addressing three critical vulnerabilities in SAP NetWeaver, including CVE-2025-42944, which Onapsis says lets an unauthenticated attacker execute arbitrary OS commands by submitting a malicious payload to an open...
A new Android trojan called PhantomCard is abusing near-field communication to run relay attacks against banking customers in Brazil, instructing victims to place their credit or debit card on the back of the phone so the card data can be sent to an...
Salesloft took Drift temporarily offline effective September 5, 2025, at 6 a.m. ET after a supply chain attack on the marketing SaaS product resulted in mass theft of authentication tokens and access to Salesforce data. Cloudflare, Google Workspace,...