A critical remote code execution vulnerability (CVE-2025-31324) in SAP NetWeaver Visual Composer is exploited by a Chinese group, Chaya_004, targeting manufacturing systems. Attackers upload web shells through a specific endpoint, gaining extensive access. Over 700 IPs related to the attacks were identified, utilizing Chinese cloud services. Immediate patching and restricted access are recommended for affected organizations.

Threat Actors Attacking Job Seekers With Three New Unique Adversaries
A surge in sophisticated recruitment scams targets job seekers, exploiting economic vulnerabilities. Cybercriminals use social engineering to blend legitimate practices with fraud, resulting in over