Follow the latest coverage, related explainers and connected technology stories.
Attackers have begun exploiting two vulnerabilities in PaperCut NG and MF, after they were patched last week, to bypass authentication, remotely access print management servers, and extract tables from victims’ databases.
ServiceNow fixed three maximum-severity security vulnerabilities in AI Platform that could be exploited to execute code, inject SQL, and escalate privileges without authentication or user interaction. The company is urging customers with self-hosted instances to update quickly, while confirming that it has not observed malicious exploitation of these vulnerabilities so far.
Defused detected attempts to chain two vulnerabilities in Microsoft SharePoint, one for authentication bypass and the other for remote code execution, after proof-of-concept exploits were publicly released. The company has not yet observed command execution in its honeypots, but more than 8,700 internet-exposed SharePoint servers represent a significant attack surface.
Defused confirmed that attackers began targeting a remote code execution vulnerability in SAP Commerce Cloud, despite the absence of a public proof of concept and SAP not officially announcing that it was being actively exploited. SAP urged its customers and partners to install the security update immediately.