SnakeKeylogger, a new multi-stage malware, poses a significant threat to individuals and businesses by stealing sensitive login credentials. The malware is delivered through a spam email with an attachment that creates a virtual drive, disguising an executable file as a PDF. The malware uses process hollowing, file format deception and encrypted payload execution to evade detection and steal credentials from a variety of applications.
400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered
