The China-associated threat entity responsible for the recent exploitation of a significant security vulnerability in SAP NetWeaver has been linked to a larger series of attacks aimed at organizations in Brazil, India, and Southeast Asia since 2023.
“The threat entity primarily focuses on SQL injection weaknesses found in web applications to gain entry to the SQL servers of the targeted organizations,” Trend