The Biden administration’s proposal to hold software producers accountable for security vulnerabilities has been met with concerns due to the complexity of attributing blame in cyberattacks. While potential lawsuits could incentivise better security practices, there are concerns that companies not responsible for a breach could be held accountable. Critics also voice concerns that such measures fail to take into account the complexities of the constantly-evolving tech industry and may unfairly target well-intentioned firms.
400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered
