Heating and cooling your home make up the biggest chunk of your home's energy costs. But not enough people are considering a heat pump as a solution.The Energy Information Administration data shows 31% of energy consumption comes from air conditioning and space heating. It's no wonder CNET's latest energy cost survey found 78% of Americans are stressed out about their utility bills. While these energy-efficient HVAC systems have gained popularity in recent years -- outpacing gas furnaces for the past three years -- the same CNET survey also showed only 14% of respondents plan to upgrade to a heat pump to help reduce those energy costs.At CNET, we are big fans of heat pumps because of their efficiency and ability to both heat and cool your home by transferring heat rather than generating it. While heat pumps are often advertised as a money-saving home upgrade, the actual savings depend on where you live, electricity rates and the HVAC system you're replacing. So, how much can you really save with a heat pump? We asked home electrification expert and Pennsylvania homeowner Wael Kanj, who is also a senior researcher at Rewiring America, a nonprofit that advocates for home electrification efforts.   A heat pump case study: Pennsylvania Heat pumps are an energy-efficient way to keep your home comfortable year-round. Heat pumps run on electricity and move heat from inside your home to outside to cool it. Then it reverses the process for heating by pumping the heat inside.We spoke with a homeowner in Pennsylvania who tracked their heating and cooling costs for the past nine years. The home was built in the late 1950s and used an air conditioner and heating oil before installing a heat pump in January 2022. Prior to installing a heat pump, the homeowner's electricity costs included air conditioning, lights and home appliances. In 2019, the homeowner completed an energy audit to evaluate the home's efficiency and made weatherization improvements in 2020. We reviewed their energy cost data to assess the overall energy savings from switching to a heat pump compared with using electricity and heating oil. Before installing a heat pump, the homeowner's average electricity bill totaled $138 per month. After the heat pump, their average bill increased to $153. While the homeowner's total electricity costs increased, they saved on total heating and cooling expenses by installing a heat pump. Here's how.Total energy costs The following table displays the total costs for heating and electricity from 2016 to 2024. There's a significant decrease in overall costs after heat pump installation in 2022. YearAnnual energy cost2016$2,8002017$2,7002018$4,0002019$3,0502020$2,1002021$2,5002022$1,7002023$1,9002024$1,850Does a heat pump save you money?The short answer is yes, heat pumps save you money. But how much you save depends on the system you're replacing, how much energy you use and where you live. Your electricity bill might go up because heat pumps use electricity for both heating and cooling. But heat pumps will save money overall because you won't pay for heating fuels. Natural gas is cheaper than delivered fuels, like propane or heating oil. So if you're replacing delivered fuels, you will save more than someone replacing a natural gas heating system. You can determine your home's potential energy savings using the Energy Star calculator or Rewiring America Personal Electrification Planner. Energy savings depend on where you liveAs mentioned, location plays a big role in potential heat pump savings due to the climate, home size, insulation and energy costs. In cold climates where heat is used more frequently, those using delivered fuels will save more money with a heat pump than those using natural gas. However, some are concerned that extreme cold temperatures affect heat pump efficiency."A lot of folks will probably hear heat pumps don't work where it's really cold. And that's just not true," Kanj said. "Many of the modern heat pumps work into negative Fahrenheit temperatures."For example, the Mitsubishi H2i still keeps working down to minus 13 degrees Fahrenheit. Below these temperatures, heat pumps can lose efficiency and need more energy to operate. Electricity costs in your area can also impact how much you save with a heat pump. Homes with poor insulation or drafty doors and windows may use more electricity to maintain indoor temperatures. Kanj recommends a home energy audit to make your home as efficient as possible.Expensive electric bills might be an issue for those in states with high rates, such as Hawaii, Connecticut and Texas. But heat pumps are more efficient than traditional systems, so it may not be as much as you think. For example, the Pennsylvania homeowner's electricity bill increased by only $15 after switching to a heat pump, and they still saved money overall by eliminating heating oil costs.It depends on your heating fuelThe type of fuel you use for heating impacts how much money you can save with a heat pump."If folks are using delivered fuels in their household, then we think there's a high likelihood those would save by switching to a heat pump," Kanj said. "Folks in the southeast and areas with more tempered climates have a higher likelihood of saving money too."The homeowner from the Pennsylvania case study saved $800 in their first year with a heat pump compared with the previous year using air conditioning and heating oil. The estimated annual savings from switching to a heat pump from delivered fuels is $810 more than switching from natural gas. "The savings in natural gas is less, but if you live in a place where you use more air conditioning a heat pump could help you save more," Kanj said. Heat pumps may not drastically reduce your bill if you already have cheap heating fuel, like natural gas. But prices are expected to rise in 2025. So installing a heat pump offers long-term energy efficiency, savings and potential environmental benefits when powered by renewable sources like solar energy. Heat pump savings comparisonHere's how much you could save with a heat pump based on your current fuel type, according to Rewiring America. Fuel typeAnnual estimated savingsDelivered fuels (propane or heating oil)$840Furnace or baseboard heat$780Natural gas$60 How much does it cost to run a furnace and air conditioner?Heating and cooling costs vary, and your heating fuel also plays a major role. Natural gas, electricity, propane and heating fuel are the most popular heating fuels, but usage varies by region. Natural gas is the most common heating fuel, used in Source: https://www.cnet.com/home/energy-and-utilities/from-heating-oil-to-heat-pump-one-homeowners-savings-story/#ftag=CAD590a51e #from #heating #oil #heat #pump #one #homeowner039s #savings #story

Cases Corsair Remembered How to Make a Case: Frame 4000D RS ARGB ReviewMay 13, 2025Last Updated: 2025-05-13We analyze Corsair’s FRAME 4000D’s design, specs, build quality, and thermalsThe HighlightsCorsair’s new FRAME 4000D case reprises concepts from the company’s 4000D case but completely overhauls its designThe motherboard tray, power supply shroud, and other components are modular and intended to be replaceable with 3D printable componentsThe FRAME 4000D case puts Corsair on a much better path than its other recent casesOriginal MSRP: $95-$110Release Date: January 7, 2025Table of ContentsAutoTOC Grab a GN15 Large Anti-Static Modmat to celebrate our 15th Anniversary and for a high-quality PC building work surface. The Modmat features useful PC building diagrams and is anti-static conductive. Purchases directly fund our work! (or consider a direct donation or a Patreon contribution!)IntroToday we’re reviewing the Corsair Frame 4000D and the case is modular in some interesting ways. For instance, the motherboard tray and power supply shroud/tray can come out. And that’s what gets us to the name “frame.” It’s a frame of a case and it can be reconfigured.It’s actually pretty well built. There’s some really good build quality to the case. The fan rail system at the front comes off with a pull and has what Corsair calls “3D Y-shaped patterns.” While the front panel looks flimsy, it’s actually strong due to its depth. The steel stamping for the cable management shroud area is also relatively high build quality.The reason we’re excited about this case is because Corsair lately has really sucked with some of its cases, but the Frame 4000D doesn’t and that’s encouraging.Editor's note: This was originally published on May 8, 2025 as a video. This content has been adapted to written format for this article and is unchanged from the original publication.CreditsTest Lead, Host, WritingSteve BurkeTesting, WritingPatrick LathanVideo Editing, CameraMike GaglioneCameraTim PhetdaraWriting, Web EditingJimmy ThangIn addition to the case’s modularity, it also has trademarks:The new InfiniRail(TM) fan mount is joined by Corsair’s 3D Y-pattern airflow pattern, and better yet, Corsair says this case is “50 Series Ready,” which is impressive, because not even NVIDIA was 50-series ready.This is the Corsair Frame 4000D, and overall, we like it. It’s an interesting case. The case is the successor to Corsair's long-lived and highly popular 4000D (and its 4000D Airflow and 4000X variants) which we first reviewed back in 2020 and even liked. In spite of the name, the Frame 4000D is an entirely new design, which means we're going to have to say "Frame 4000D" every single time we mention it and can’t shorten it to 4000D as that’s a different case. We suspect part of the reason for the similarity is to enable the classic reuse-the-old-Newegg-listing trick: those 1,000+ five-egg reviews are almost all for the original 4000D, not the Frame 4000D, but it gets to share them on the same listing. Corsair also occasionally refers to the "Frame 4000 Series" sans-D, so we may see a Frame 4000X at some point.The case ranges from $95 without fans to the $110 RS ARGB with 3x 120 ARGB fans. It’s targeting the modern budget range. There's a $100 middle step as well with fans but no ARGB. Based on discussion with Corsair, it sounds likely that the MSRPs will increase due to tariffs, but we don't have hard numbers for what those increased prices would be.The Frame 4000D is interesting because Corsair has gone all out with the gigantic holes in the front panel: functionally, they're close to having no front panel at all. Corsair Frame 4000D OverviewThe differentiating factor for the Frame 4000D is that it's intended to be modular, with users able to buy or 3D print alternate components. This is reiterated constantly in Corsair's marketing materials, including public blog posts: "FRAME is all about customization and we have some exciting things on the horizon. In addition to parts that will be available for direct purchase, We have modelled some blanks of the PSU shroud and motherboard tray, so you can download [...] these from Printables and customize them however you like."Corsair Frame 4000D Specs4000D Series (2019)FRAME 4000D SeriesDimensions (mm):466 x 230 x 453 mm487 x 239 x 486 mmMaterial:Steel, Tempered GlassSteel, Tempered GlassIncluded Fans:2x SP120 or 3x AF120 RGB ELITENone or 3x RS120 or 3x RS120 ARGBIncluded Controllers:NoneNoneFan Compatibility:Front: 3x 120mm, 2x 140mmTop: 3x 120mm, 2x 140mmSide: NoneBottom: NoneRear: 1x 120mmFront: 3x 120mm, 2x 140mm, 2x 200mmTop: 3x 120mm, 2x 140mm, 2x 160mmSide: 3x 120mm, 2x 140mmBottom: 2x 120mmRear: 1x 120mm, 1x 140mmRadiator Compatibility:Front: 360mm, 280mm, 240mmTop: 280mm, 240mmSide: NoneBottom: NoneRear: 120mmFront: 360mm, 280mm, 240mmTop: 360mm, 280mm, 240mmSide: 360mm, 280mm, 240mmBottom: NoneRear: 120mmExpansion Slots (Main):7 Horizontal (2 Vertical)7 Horizontal (3 Vertical)Motherboard (Main):Mini-ITX, Micro-ATX, ATX, E-ATXMini-ITX, Micro-ATX, ATX, E-ATXStorage:2x 2.5" SSDs2x 3.5" HDDs4x 2.5" SSDs2x 3.5" HDDsClearances:PSU: 220mmCPU Cooler: 170mmGPU: 360mm (335mm w/ fan)PSU: 220mmCPU Cooler: 170mmGPU: 430 mm (405 mm w/ fan)Dust Filters:Front, Top, PSU, SideFront, PSU, SideFront I/O:USB 3.2 Gen1 Type-A (x1)USB 3.2 Gen2 Type-C (x1)Headphone/Microphone (x1)PowerResetUSB 3.2 Gen1 Type-A (x2)USB 3.2 Gen2 Type-C (x1)Headphone/Microphone (x1)PowerResetPower Supply:ATX (Not Included)ATX (Not Included)Warranty:2 Year2 YearThe BuildThe rotatable vertical GPU mount is one of three major features that genuinely live up to Corsair's promise of modularity, the other two being the PSU shroud and the motherboard tray (which can be removed with four screws). This is vital: being able to eventually buy or print individual components is nice, but it doesn't have anything to do with the case's design. With these three features, we're comfortable saying that the Frame 4000D is more modular than a typical case. It's also possible to swap the glass and mesh side panels to either side of the case, but this won't be useful until Corsair sells side panels individually or introduces more case SKUs.The vertical GPU mount is surprisingly quick to set up: by loosening two thumbscrews around the expansion slot covers, the entire set of seven slots can be removed and rotated 90 degrees. A riser cable can then be installed and supported by two standoffs installed on the surface of the PSU shroud. Using the built-in mounting holes, a maximum of three vertical slots are usable. Obviously Corsair intends for you to purchase a Corsair riser cable, but if you want to use your own, the holes are spaced 122mm apart.The Frame 4000D has old school pop-out fill and drain ports at the top and bottom of the chassis, which we also really appreciate. Open-loop compatibility fits well with the modular philosophy that Corsair is pushing.So far, these things are good. If we’re picking antiquated hills to die on, paper manuals will be one of them: We'd like to see a paper manual included with the case in addition to the version on Corsair's blog. The benefit of the online guide is that it can be updated; for example, the online manual now explains what the point of the strip of mylar in the accessory kit is, whereas we had to email Corsair (it covers the reverse-connector holes in the motherboard tray when they're unused). A paper manual can’t be updated, which is a downside as much as it is an upside: The upside is that a company can’t gaslight a customer if something proves incompatible and is retconned. It’s also just more convenient to build a computer with a physical manual.But then again, maybe Corsair doesn’t deserve paper manuals since its own digital manual incorrectly lists the screw count and steps for removing the power supply shroud. With a digital one, they’ll be able to make as many mistakes as they want and the only people who will know about them is everyone who read this article. For the record, it’s 3 screws, not 2. And the diagram is also incorrect.There's another, larger piece of black mylar in the kit, but the manual devotes less explanation to this one, simply saying that if you "don’t want your cables visible through the bottom mesh quarter-panel, swap the translucent insert for the color-matched blank-out insert included in the Accessory Box." The case also has a Lian Li-ish strip of mesh ventilation below the glass side panel and it ships with the translucent insert. If you install fans in the two 120mm slots on top of the PSU shroud, we'd recommend getting rid of the inserts entirely.The Frame 4000D uses the so-called "InfiniRail" system. At the front of the case, there are two metal rails that hold up to 12 plastic clips. The rails slide in and out for 120mm or 140mm mounting, and the clips slide up and down the whole length of the rails. Technically, the rails can fit 200mm fans at their maximum width, but only by forgoing the clips and mounting directly to the rails. At the top of the case, Corsair took the simpler approach of using a single sliding rail and no clips. The system is more complicated than it strictly needs to be, but our only real complaint is that there are exactly twelve clips included with the base model Frame 4000D, with no spares in case one breaks.The only significant fit-and-finish issue with our review sample was that one of the plastic pieces of the ball snap fasteners had popped out of the chassis in shipping. We were able to find it and put it back, but just like the InfiniRail clips, Corsair didn't provide any extras (like some other manufacturers do). As for build quality, construction of the Frame 4000D feels more delicate than the older 4000 series cases. This is partly a tradeoff for the more breathable mesh pattern, flexible fan mounting, and removable components. All of these things get exchanged for rigidity. Corsair apparently intends to sell Frame 4000D components individually as well, but we don't see any on the store as of this writing.On the positives for build quality, the elaborate stamped 3D pattern on the front panel is much sturdier than it looks. We'll have thermal results later in this review, but the Frame 4000D's front panel appears more open than the 4000D Airflow's (watch our review) while retaining most of its rigidity.There's a cable cover at the front of the case that can be installed in one of two positions, but as is frequently the case, we were only able to use it in the forward position because of the ATX power cable. The other position is better suited to back connect motherboards, of which ASUS BTF, MSI Project Zero, and Gigabyte Project Stealth have been validated by Corsair to work. The cable cover is extremely easy to remove, requiring only a single screw, and it's equally easy to slot the side fan mount from the accessory kit in its place. The side fan mount is another feature that will become more interesting if Corsair introduces a Frame 4000X or other variant with a sealed front panel.Cable management is good with tons of velcro straps behind the motherboard tray, but the best route for the 24-pin cable is along the cable bar, which isn't an option if the side fan mount is installed instead. Front I/O cables are neatly sleeved and the whole I/O unit pops off with two screws, so it would have been nice to allow alternate mounting locations (like in the O11D EVO), especially since having the I/O at the bottom of the case has become unusual these days. Even still, we like the modularity of it. They are delivering on that. As for storage, drives can be mounted on two plates, one behind the motherboard tray and one under the PSU shroud. Each plate can mount either two 2.5" drives, one 3.5" drive, or one "iCUE LINK System Hub controller." We'll be interested to see whether Corsair comes up with a modular solution to fit more drives, but for now, that's it.The default location of the GPU anti-sag arm is on the cable cover, too far forward to benefit anything except the longest GPUs, especially if the cable cover is shifted to its forward position.It can be moved a step further back by using the "mini mount" in the accessory kit, but there's no way to do any finer adjustment, and you should look for a different solution if you really think your GPU needs that support. Appearances are subjective. For some, a possible downside of the Frame 4000D's increased modularity is that it doesn't have the clean, uninterrupted lines of the original 4000D cases. We'll leave it at that; you can form your own opinion.Corsair Frame 4000D Thermals Visit our Patreon page to contribute a few dollars toward this website's operation (or consider a direct donation or buying something from our GN Store!) Additionally, when you purchase through links to retailers on our site, we may earn a small affiliate commission.The $95 base model Frame 4000D that we were sent for review didn't include any stock fans, so Corsair sent along a pack of three RS120 ARGB fans. We used these fans to match the stock configuration of the $110 Frame 4000D RS ARGB, which is how the case is marked on our charts. According to Corsair's spec sheets, the ARGB fans have the same specs as regular RS120s, so these results are also representative of the $100 Frame 4000D RS (non-ARGB)'s performance.CPU Full Load Thermals - Noise-NormalizedWe’ll start with noise-normalized thermals when using our hemi-anechoic chamber to establish the noise levels.Under full load with the case fans adjusted to hit our 27 dBA noise normalization target, CPU temperature in the Frame 4000D averaged 43 degrees Celsius above ambient, or 47 degrees on just the P-cores. That's a significant improvement over the original 4000D Airflow's average of 49 degrees (53 on the P-Cores), but that's to be expected since the older case has only two fans and splits them between the front and rear of the case.Relative to the rest of the chart, the Frame 4000D performed fairly well here. The Phanteks XT Pro Ultra is comparable in price and design, but it split the difference between the Corsair cases, with the Frame 4000D still a couple degrees cooler. The Lancool 207 (read our review) remains the budget case to beat with averages of 41 degrees across all cores and 45 on the P-Cores, while the NZXT H5 Flow 2024 (watch our review) and Phanteks G400A (watch our review) performed similarly well. The G400A remains difficult to find in the US.GPU Full Load Thermals - Noise-NormalizedMoving to GPU thermals under full load in the same noise normalized test, the Frame 4000D averaged 45 degrees above ambient, with 49 degrees for the memory and 59 for the unshown GPU hotspot. That's another victory over the original 4000D Airflow, which averaged 49 degrees for the GPU temperature, but again that's with two fans to the Frame 4000D's three.The G400A effectively tied the Frame 4000D in this test, while the H5 and XT Pro UItra didn't do as well. The XT Pro UItra averaged 47 degrees for the GPU, a couple degrees warmer than the Frame 4000D. The Lancool 207 remains near the top of the chart for cooling. To learn more about that one, you can check out our Best Cases round-up from last year or our original review for more info on that case's pros and cons.CPU Full Load Thermals - Full SpeedAt full speed, the Frame 4000D's CPU thermal performance continues to scale fairly well for its price, while the 4000D Airflow falls further behind. The Frame 4000D's noise levels and performance were essentially tied with the Phanteks XT Pro Ultra here, with the Frame 4000D averaging 40 degrees above ambient, or 43 on the P-Cores. The G400A performed similarly as well, but with a lower 37dBA noise level to the Frame 4000D's 43dBA, while the Lancool 207 remains an outlier with both lower temperatures and lower noise levels, making it a lot better here than really most of these other cases.CPU Full Load Thermals - Standardized FansThe standardized fan test has always had limited usefulness, but this is one of the places it’s useful.It’ll help us evaluate the Frame 4000D's unusual front panel by comparing it against other cases with an identical set of fans and placements including the 4000D. Average all-core CPU temperature was 40 degrees above ambient and the P-Cores were 44 degrees. That's reasonably well-matched to established mesh-fronted cases like Fractal's Meshify 2 Compact (watch our review) and North XL (read our review), and extremely close to SilverStone's recent FARA 514X (read our review). The Frame 4000D is also significantly better than the 4000D Airflow when normalizing to the same fans, reinforcing Corsair’s improvements to the chassis design itself.No matter how open the front panel is, though, the fans still have to pull air through Corsair's filter as well, so it makes some sense that some single-layer mesh designs like the Lancool 207, Pop Air RGB (watch our review), and Flux Pro (read our review) perform slightly better here, although the G400A also did fairly well with two layers.GPU Full Load Thermals - Standardized FansIn the same test, GPU temperature in the Frame 4000D averaged 43 degrees above ambient, tying it with most of the cases we just mentioned (Lancool 207, Pop Air RGB, and Flux Pro), while the XT Pro Ultra did unusually poorly with an average of 50 degrees.As a side note, GPU thermals with the 4000D Airflow were abysmal in this particular test relative to the rest of the chart. That differs from what we saw 5 years ago using our old test hardware, which demonstrates the value of retesting these cases now that we've switched to new components and a flow-through GPU design.VRM & RAM Full Load Thermals - Noise NormalizedAs a final note, the VR VCC sensor averaged 30 degrees above ambient in the noise-normalized test with the Frame 4000D. That puts it at the cooler end of what we typically see from cases, with only a couple of outliers like the Lancool 207 and Flux Pro dropping to the 27 degree mark. The same goes for the SPD Hub average of 24 degrees above ambient (which is the RAM temperature), with relatively few cases on the chart dropping below 22 degrees. Both these sensors indicate normal internal case temperatures.Corsair Frame 4000D Conclusion Our fully custom 3D Emblem Glasses celebrate our 15th Anniversary! We hand-assemble these on the East Coast in the US with a metal badge, strong adhesive, and high-quality pint glass. They pair excellently with our 3D 'Debug' Drink Coasters. Purchases keep us ad-free and directly support our consumer-focused reviews!Of the existing Frame 4000D SKUs, the Frame 4000D RS at $100 is a decent deal, especially given how tightly packed the SKUs’ prices are. Going from 0 fans to 3 fans is worth $5, and going from no RGB to ARGB may or may not be worth another $10. We need Corsair to follow through with more modular case components (like the alternate front panels it showed in the trailer) to make it really interesting, or at the absolute least offer some more printable files. The Lancool 207 remains king in terms of min-maxed price-to-performance, but the Frame 4000D is a reasonable alternative to budget Phanteks cases like the G400A and XT Pro Ultra, or potentially some Montech cases (which we'll be adding more of to the charts shortly). As a successor to the existing 4000 series, we like the Frame 4000D functionally. Some of the finer attention to detail elements like the geometric patterns and yellow accents remain, just with a more complex appearance than previously.Corsair has mentioned that it may have to increase prices, but we don’t yet have final details on what that amount might be on this case. We don't encourage panic buying, but if you've decided that the Frame 4000D is the case for you and it's currently in stock at MSRP, we wouldn't recommend waiting around for a discount. Overall, this is a job well done by Corsair. It is a much better return to form as compared to something like the 6500D (read our review) from last year. Source: https://gamersnexus.net/cases/corsair-remembered-how-make-case-frame-4000d-rs-argb-review #corsair #remembered #how #make #case #frame #4000d #argb #review

May 13, 2025Ravie LakshmananVulnerability / Threat Intelligence A recently disclosed critical security flaw impacting SAP NetWeaver is being exploited by multiple China-nexus nation-state actors to target critical infrastructure networks. "Actors leveraged CVE-2025-31324, an unauthenticated file upload vulnerability that enables remote code execution (RCE)," EclecticIQ researcher Arda Büyükkaya said in an analysis published today. Targets of the campaign include natural gas distribution networks, water and integrated waste management utilities in the United Kingdom, medical device manufacturing plants oil and gas exploration and production companies in the United States, and government ministries in Saudi Arabia that are responsible for investment strategy and financial regulation. The findings are based on a publicly exposed directory uncovered on attacker-controlled infrastructure ("15.204.56[.]106") that contained event logs capturing the activities across multiple compromised systems. The Dutch cybersecurity company has attributed the intrusions to Chinese threat activity clusters tracked as UNC5221, UNC5174, and CL-STA-0048, the last of which was linked to attacks targeting high-value targets in South Asia by exploiting known vulnerabilities in public-facing IIS, Apache Tomcat, and MS-SQL servers to drop web shells, reverse shells, and the PlugX backdoor. It also noted that an uncategorized China-nexus threat actor is conducting a widespread internet scanning and exploitation campaign against SAP NetWeaver systems. The server hosted at the IP address "15.204.56[.]106" has been found to contain multiple files, including - "CVE-2025-31324-results.txt," which has recorded 581 SAP NetWeaver instances compromised and backdoored with a web shell "服务数据_20250427_212229.txt," which lists 800 domains running SAP NetWeaver likely for future targeting "The exposed open-dir infrastructure reveals confirmed breaches and highlights the group's planned targets, offering clear insight into both past and future operations," Büyükkaya noted. The exploitation of CVE-2025-31324 is followed by the threat actor deploying two web shells that are designed to maintain persistent remote access to the infected systems and execute arbitrary commands. In addition, three different Chinese hacking groups have been observed exploiting the SAP NetWeaver vulnerability as part of efforts to maintain remote access, conduct reconnaissance, and drop malicious programs - CL-STA-0048, which has attempted to establish an interactive reverse shell to "43.247.135[.]53," an IP address previously identified as used by the threat actor UNC5221, which has leveraged a web shell to deploy KrustyLoader, a Rust-based malware that can used to serve second-stage payloads like Sliver, set up persistence, and execute shell commands UNC5174, which has leveraged a web shell to download SNOWLIGHT, a loader that initiates a connection with a hard-coded server to fetch a Go-based remote access trojan named VShell and a backdoor known as GOREVERSE "China-linked APTs are highly likely to continue targeting internet-exposed enterprise applications and edge devices to establish long-term strategic and persistence access to critical infrastructure networks globally," Büyükkaya said. "Their focus on widely used platforms like SAP NetWeaver is a strategic move, as these systems are deeply integrated into enterprise environments and often host unpatched vulnerabilities." SAP Patches New NetWeaver Flaw in May 2025 Patch The disclosure comes days after another China-linked unnamed threat actor dubbed Chaya_004 has also been attributed to the exploitation of CVE-2025-31324 to deploy a Go-based reverse shell called SuperShell. SAP security firm Onapsis said it is "seeing significant activity from attackers who are using public information to trigger exploitation and abuse web shells placed by the original attackers, who have currently gone dark." Further analysis of these attacks has led to the discovery of another critical defect in NetWeaver's Visual Composer Metadata Uploader component. Tracked as CVE-2025-42999 (CVSS score: 9.1), it has been described as a deserialization vulnerability that could be exploited by a privileged user to upload untrusted or malicious content. In light of ongoing active exploitation, customers of SAP NetWeaver are recommended to update their instances to the latest version as soon as possible. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE     Source: https://thehackernews.com/2025/05/china-linked-apts-exploit-sap-cve-2025.html #chinalinked #apts #exploit #sap #cve202531324 #breach #critical #systems #worldwide