Microsoft fixes 1235 flaws, including exploited Outlook zero-day
CVE-2026-124194 can leak NTLMv2 hashes from Microsoft 365 Apps and Office LTSC 2021 and 2024 after one opened message file.
Stories per day · 30 days
3 RSS
Relatednetweaver8web-dispatcher6sap-gateway5proxygate4icm2shell3patch-day3remote-code-execution3cve-2026-891112d-link2greynoise2microsoft2ntlm2oauth22outlook2patch-tuesday2proxyjacking2python2saml2
31 stories, newest first · one card per story
Stories tagged #sap
SAP patches four CVSS 10.0 flaws, including unauthenticated RCE
The November fixes cover NetWeaver ICM, Web Dispatcher, Gateway, and SAML, and none require user interaction.
November Patch Tuesday fixes exploited Outlook NTLM hash-theft flaw
Attackers already use CVE-2026-124194, CVSS 6.5, which leaks an NTLMv2 hash after a user opens a malicious Office file.
2
SAP patches critical ICM2SHELL and ProxyGate kernel flaws
Onapsis gave SAP a working unauthenticated exploit for ICM2SHELL; the November notes also cover ProxyGate and a SAML impersonation bug.
SAP November 2026 notes fix four CVSS 10.0 unauthenticated flaws
The bulletin lists 35 new notes and does not report active exploitation of the patched issues.
SAP November patch day fixes four CVSS 10.0 flaws
Unauthenticated memory corruption in ICM and Web Dispatcher may allow code execution; exploitation is not discussed.
Trezor implant, LLMJacking bills hit $1M reported
Reports include Trezor hardware wallet found with implant, LLMJacking where attackers generate bills up to $1M using hijacked AI access, and Chainalysis breach exposing password hashes.
1
Digitate’s ignio Hummingbird adds AI agents for patches, desks and SAP
The agents diagnose issues, act only under enterprise approval and verify results via MCP and Agent2Agent.
Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks
Actor skynox7 exploited D-Link, Ubiquiti, and SAP flaws to proxyjack 143 devices.
Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
GreyNoise found attackers exploiting edge-device flaws in 34 countries to install Pawns.app and resell bandwidth.
5
CVE-2026-89111: Critical SAP Cloud SDK SSRF
SAP disclosed CVE-2026-89111, a CVSS 10 SSRF in SAP Cloud SDK for Python that can leak OAuth2 secrets.
3
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
SAP's Python Cloud SDK can leak OAuth2 client secrets through tenant-subdomain SSRF, tracked as CVSS 10.0 CVE-2026-89111.
SAP security advisory – October 2026 monthly rollup (AV26-1030)
Canadian Cyber Centre urges patching after SAP's October 2026 rollup affects multiple products.
Hackers target two South Korean megachurches, potentially exposing congregant data
Hackers breached two South Korean megachurches, potentially exposing personal and financial data of hundreds of thousands of members.
1
Synthesis Through Simulation: Generating Coherent Enterprise Data via Scalable Agent-System Interaction
SAP's STS generates valid enterprise data by having LLM agents call policy-enforcing simulated APIs.
CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)
nullFaktor disclosed pre-authentication remote code execution in SAP EPP processing, tracked as critical CVE-2026-44756.
Know what was tested before your SAP ECC migration goes live
Companies delay SAP ECC migration to 2030 due to fear of disruption, missing strategic advantages of early adoption.
1
In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
SecurityWeek roundup: ransomware developer sentenced, critical SAP flaw CVE-2026-44756, PhantomRaven npm info-stealer, WordPress mass exploitation, and AI agent security findings.
4
SAP Patches Maximum Severity “Overpass” Flaw
Onapsis warns over 10,000 internet-facing SAP systems may be exposed to maximum-severity unauthenticated RCE flaw CVE-2026-44756 in SAP Extended Passport.
1
SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
SAP patched CVE-2026-44756 (CVSS 10.0), an unauthenticated kernel memory corruption allowing OS command execution, plus three other critical flaws.
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
Microsoft's September 2026 Patch Tuesday ships 964 fixes including two exploited Windows zero-days (CVE-2026-85880, CVE-2026-81963) and a wormable DNS RCE.
7
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.
4
SAP security advisory – September 2026 monthly rollup (AV26-894)
Canada's Cyber Centre relayed SAP's September 2026 Patch Day rollup covering vulnerabilities across NetWeaver, kernel components, CAP, and Integration Suite.
SAP warns of maximum severity 'OVERPASS' kernel vulnerability
SAP's September 2026 patches fix maximum-severity kernel flaw CVE-2026-44756 (OVERPASS), letting unauthenticated attackers execute commands on 10,000+ internet-facing SAP systems.