Google warns of critical Android vulnerabilities CVE-2024-43093 and CVE-2024-50302, affecting Android 12-15 and exploited in attacks against activist devices. Patched in the March 2025 bulletin, these flaws allow lock bypassing, privilege escalation, and remote code execution. Over a billion devices remain vulnerable due to delay in OEM updates. Users should urgently check and install security patches.

400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered