Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CVE-2025-31324: Maximum-Severity File Upload Vulnerability in SAP NetWeaver Exploited in the Wild

On April 24, 2025, SAP released fixes for CVE-2025-31324, a maximum-severity zero-day unrestricted file upload vulnerability in the NetWeaver Visual Composer component. Visual Composer is a tool within NetWeaver for creating applications and user interfaces. The vulnerability was discovered by ReliaQuest, which initially observed its exploitation in the wild.

How a WAF Helps You Meet Key Compliance Standards

Web Application Firewalls (WAFs) have emerged as indispensable tools not only for blocking cyber threats but also for supporting compliance across various industries and jurisdictions. Whether you’re dealing with sensitive payment information, personal health records, or consumer data, a WAF can significantly simplify your compliance journey.

How to Keep Your Product-Based Business Moving-Without Costly Mistakes

Starting something from scratch takes guts-but keeping it running day after day? That takes real skill. If you're shipping, storing, or handling physical goods, there's a lot that can quietly go wrong. Missed orders, delays, broken packaging, or even vehicle issues can lead to frustration and unexpected costs. But here's the good news: avoiding those problems doesn't require fancy tools or a huge budget. Just a bit of planning and smart decisions in the right places can help everything feel easier and more in control.

Setting the Standard for AI Compliance: Vanta introduces AI Security Assessment

New offering helps organizations easily evaluate vendor AI's risk. Vanta becomes first trust management platform to achieve ISO 42001. Debuting new AI achievements and resources at booth #2127 at RSA Conference April 28 - May 1.

GitGuardian Joins Health-ISAC: Strengthening Cybersecurity in Healthcare Through Secrets Detection

As cyber threats in healthcare continue to evolve, GitGuardian strengthens its commitment to the sector by joining Health-ISAC and offering members enhanced secrets detection capabilities to protect sensitive data.