NetSec News Articles of Interest From the Week of April 28, 2025
Read more cybersecurity news in this edition of NetSec News.
SAP Zero-Day Possibly Exploited by Initial Access Broker
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications. (SecurityWeek)
 |
|
“SAP’s presence in government and enterprise systems is vast, with industries like manufacturing, retail, finance, and healthcare facing particularly high risk when improper security implementation fails. While Visual Composer is not installed by default, it’s broad usefulness with visual modeling with the appeal of low-code/no-code mean that it has garnered trust and utility over the years for creating workflows. This is not a new technology. The possibility that access brokers – who operate solely to profit from getting the word out – knew of the exposure for weeks without a patch could lead to a cascade of secondary attacks yet to be realized from CVE-2025-31324. If present in the environment, it is recommended to apply the patch immediately, and ensure that access is restricted to authorized and expected users. Investigation to detect suspicious activity like lateral movement and unusual access of sensitive data with regards to the vulnerability would be prudent.” –Jessica Owens, Senior SOC Analyst at C3 Integrated Solutions |
Kali Linux Warns of Update Failures After Losing Repo Signing Key
Kali Linux users warned to manually install a new Kali repository signing key to avoid experiencing update failures. (BleepingComputer)
Pentagon Seeks Open-Source Software for 5G, 6G Networks
As the US military makes big bets on 5G and future 6G networks for everything from streamlining supply lines to controlling combat robots, it doesn’t want to be beholden to the handful of huge tech firms that dominate the market today. So the Pentagon will soon seek bids to develop prototype “open” software — code that any company can freely access and deploy on its devices — in hopes of breaking down barriers to innovation. (Breaking Defense)
Verizon 2025 Data Breach Investigations Report (PDF)
Today’s threat landscape is shifting. Get the latest updates on real-world breaches and help safeguard your organization from cybersecurity attacks. (Verizon Business)
Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems
Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities. (The Hacker News)
State-Sponsored Hackers Embrace ClickFix Social Engineering Tactic
ClickFix attacks are gaining traction among threat actors, with multiple advanced persistent threat (APT) groups from North Korea, Iran, and Russia adopting the technique in recent espionage campaigns. (BleepingComputer)
Meet the Author
