Researchers found new Android malware linked to the Indian APT (Advanced Persistent Threat) group called Donot Team, which primarily targets South Asian government and military organisations. The malware, named Tanzeem and Tanzeem Update was first identified in October and December 2024. The Donot Team is using the OneSignal platform to deliver phishing links, a new development in its methods, while the malware collects information like call logs, contacts, and precise locations.
400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered
