Apr 29, 2025
0 new incidents, 2 with updates.
Updated
- ClosedPatched
SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324)
A CVSS 10 missing-authorization flaw in the NetWeaver Visual Composer Metadata Uploader let anyone POST JSP webshells to /developmentserver/metadatauploader. ReliaQuest found it while investigating compromises; SAP shipped an emergency fix on April 24, 2025.
SAP NetWeaver Visual ComposerClosed Apr 29, 2025
- ClosedCriticalNo fix needed
Marks & Spencer ransomware (Scattered Spider / DragonForce) halts online orders for 46 days
Scattered Spider got in through social engineering of a third-party IT provider and encrypted M&S's VMware ESXi hosts with DragonForce ransomware over Easter 2025. Contactless payments, Click & Collect and online ordering broke; online orders were paused from April 25 to June 10. M&S put the hit at about £300M of operating profit.
Marks & Spencer (retail IT, VMware ESXi)Closed Jun 10, 2025
