Data & infrastructure
-
Critical SAP flaws expose core business systems
SAP patched two critical unauthenticated flaws in its kernel and NetWeaver Message Server, while researchers say neither has been observed in active exploitation.
-
Check Point VPN flaws expose perimeter systems
Check Point has patched two critical VPN flaws that can permit unauthenticated remote code execution, with CERT-EU urging rapid remediation of internet-facing and perimeter appliances.
-
France warns of widespread Metabase compromises
CERT-FR says it knows of numerous compromises of vulnerable Metabase deployments, escalating a month-old SQL injection flaw into an active incident concern for self-hosted analytics systems.
-
Digital footprints improve cyber claim prediction
Gallagher Re and KYND research suggests the complexity of an organisation’s internet-facing technology estate can improve cyber-claim prediction when combined with traditional underwriting data.
-
Keepit says recurring revenue passes $100m
Danish SaaS backup provider Keepit says annual recurring revenue has passed $100 million as it pushes immutable backup infrastructure into enterprise AI-data governance.
-
Kiteworks buys Bonfy.AI for runtime controls
Kiteworks has acquired Bonfy.AI to add inline classification and policy enforcement across enterprise data exchanges involving people, applications, and autonomous AI agents.
-
PaperCut replaces emergency patches after attacks
PaperCut has replaced three emergency security patches with fully tested maintenance releases while continuing to investigate active exploitation and confirmed customer incidents.
-
SecureSky buys London data-security startup Soveren
SecureSky has acquired London-based Soveren, adding data discovery and classification technology to a platform that already spans exposure management and managed detection.
-
NATO cable encounter tests Arctic resilience
A reported NATO confrontation with Russian vessels near Svalbard has pushed the security of Europe’s subsea communications infrastructure back into the operational domain.
-
Dutch NCSC warns on critical Check Point VPN flaws
Dutch cyber authorities expect attempts to exploit two critical Check Point VPN vulnerabilities, increasing pressure on organisations running internet-facing gateways to apply available fixes.