Android spyware dubbed “KoSpy,” believed to be originated from the North Korean state-sponsored group APT37, collects users’ data, call logs, and location using dynamically loaded plugins. The malware was distributed through apps and has been removed from the Google Play Store but was also spread through third-party app stores. The spyware can record audio, take photos, capture screenshots and store keystrokes. The data collected is then sent to the attacker’s servers.
400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered
