SAP patches recently exploited zero-day in wake of NetWeaver server attacks

SAP cyberattack widens, drawing Salt Typhoon and Volt Typhoon comparisons

Hundreds of victims are surfacing across the world from zero-day cyberattacks on Europe’s biggest software manufacturer and company, in a campaign that one leading cyber expert is comparing to the vast Chinese government-linked Salt Typhoon and Volt Typhoon breaches of critical infrastructure. The zero-days — vulnerabilities previously unknown to researchers or companies, but that malicious hackers have discovered — got patches this month and la…

SAP patches recently exploited zero-day in wake of NetWeaver server attacks

This is the second critical-severity flaw SAP patched after fixing a 10/10 flaw in late April

SAP patches second zero-day flaw exploited in recent attacks

SAP has released patches to address a second vulnerability exploited in recent attacks targeting SAP NetWeaver servers as a zero-day.

At the end of April, SAP had to close a critical vulnerability in Netweaver. Ransomware groups are now attacking the leak.

Safeguarding SAP Systems Amid Rising Financial Fraud and Economic Stress

Download the full report SAP systems are the backbone of enterprise finance—and they’re under attack. As economic pressures rise, so do attempts to exploit financial platforms. From insider threats to ransomware and zero-day vulnerabilities, SAP’s critical role in handling billions of dollars daily makes it a high-value target. The recent disclosure of CVE-2025-31324, a critical zero-day in SAP NetWeaver (CVSS 10.0), exposed just how urgent the …

SAP patches recently exploited zero-day in wake of NetWeaver server attacks - WorldNL Magazine

Image Credit: SAP (Image credit: SAP) SAP fixed CVE-2025-42999, a 9.1/10 vulnerability in NetWeaverThis one was chained with CVE-2025-31324, which was fixed in AprilFortune 500 companies are apparently at riskSAP has patched a critical-severity zero-day vulnerability in NetWeaver server that was being chained in attacks targeting some of the world’s biggest enterprises.The vulnerability is tracked as CVE-2025-42999, and carries a severity score…