BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

Threat actors BianLian and RansomExx (tracked by Microsoft as Storm-2460) are actively exploiting SAP NetWeaver vulnerabilities CVE-2025-31324 and CVE-2025-42999 to deploy the PipeMagic trojan and Brute Ratel C2 framework.