Just in time for the monthly Patch Day, SAP has published 26 security advisories, including four reports classified as particularly critical. The most serious vulnerability has a CVSS score of 9.9 and affects S/4HANA installations.

Researchers from the cyber security team Team82 have discovered serious vulnerabilities in Axis Communications products. In combination, these vulnerabilities not only allow attackers to watch live broadcasts, but also to switch off cameras and execute malicious code. Axis has now released updates and urges users to install them quickly.

Researchers from Bitdefender have discovered critical vulnerabilities in the firmware of Dahua cameras. Attackers could gain full access to the devices and misuse them for espionage or as part of a botnet.

Microsoft is increasingly in the crosshairs of hackers. According to the latest Microsoft Vulnerabilities Report from security company BeyondTrust, a total of 1,360 vulnerabilities were recorded in Microsoft systems in 2024 - more than ever before.

Several security breaches were observed at companies from different industries in which firewall devices from Palo Alto Network were involved.

Researchers from the Qualys Threat Research Unit have discovered five vulnerabilities in the Ubuntu standard component "needrestart". The vulnerabilities allow local privilege escalation (LPE) on affected systems.

CISPA researcher Adrian Dabrowski, together with colleagues from SBA Research and the University of Vienna, has uncovered two far-reaching security vulnerabilities in the mobile phone protocol Voice over WiFi (VoWiFi), also known as WLAN calling.

Aqua Security, a provider in the field of Cloud Native Security, publishes a new study showing how secret data such as login credentials, API tokens, and passkeys from organizations can remain openly accessible for years in the Git-based infrastructure of most source code management systems (SCMs).