The event – revealed by analyst Arda Buyukkaya at cybersecurity firm EclecticIQ – used a previously unknown backdoor in a piece of software called SAP Netweaver, with a patch since released.
Cody Barrow is the chief executive of EclecticIQ and previously worked at the Pentagon, the NSA and US Cyber Command.
He told Sky News: “Governments should treat this as a critical national security threat”, adding that it is the kind of scenario that keeps people like him up at night.
Image: Cadent is said to be among the companies that were exploited. Pic: iStock
Mr Barrow said the exploitation of networks is “extensive and ongoing”, with more than 500 SAP customers affected and more potentially at risk. He urged users to update their software to the latest version.
Gas giant Cadent, publishers News UK, Euro Garages (EG) Group, Johnson Matthey and Ardagh Metal have been named as victims, with US and Saudi Arabian entities also targeted.
NHS England has posted a warning about the exploit on their website, although it is not clear if they are impacted.
The National Cyber Security Centre (NCSC), the UK government’s authority on cyber threats and part of GCHQ, are monitoring the situation.
Image: Government experts are monitoring the incident. Pic: PA
An NCSC spokesperson told Sky News: “We are monitoring for UK impact following reports of a critical vulnerability affecting SAP NetWeaver being actively exploited.
“The NCSC strongly encourages organisations to follow vendor best practice to mitigate the vulnerability and potential malicious activity.
“Vulnerabilities are a common aspect of cyber security, and all organisations must consider how to most effectively manage potential security issues.”
JP Perez-Etchegoyen, the chief technical officer of Onapsis – which specialises in the cybersecurity security of SAP – told Sky News that exploits of the backdoor were first observed at the start of this year, and began to increase in March.
Last week, Cabinet minister Pat McFadden warned companies that recent cyber attacks on M&S, Co-op and Harrods should be a “wake-up call” for businesses.
A spokesperson for Cadent declined to comment on the specific attack, but the company works with the NCSC on cyber security issues.
A spokesperson for News UK declined to comment.
EG Group, Johnson Matthey and Ardagh Metal have not responded to Sky News requests for comment.
According to the initial summary of the exploit, analysts linked the attacks to “Chinese cyber-espionage units”.
This was based on a variety of factors, including Chinese-named files identified as part of the hack, and the way the hackers operated.
The aim of the Chinese groups is to “operate strategically to compromise critical infrastructure, exfiltrate sensitive data, and maintain persistent access across high-value networks worldwide”, said the summary.
The targets in the UK were said to include critical gas distribution networks, and water and integrated waste management utilities.
Spreaker
This content is provided by Spreaker, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Spreaker cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Spreaker cookies.
To view this content you can use the button below to allow Spreaker cookies for this session only.
A spokesperson for SAP said: “SAP is aware of and has been addressing vulnerabilities in SAP NETWEAVER Visual Composer. SAP issued a patch on 24 April, 2025.
“A second vulnerability has also been identified and a patch was released on 13 May, 2025.
“We ask all customers using SAP NETWEAVER to install these patches to protect themselves.”
The Chinese embassy in London has been approached for comment.
Donald Trump has claimed Russia is “making concessions” in talks to end the Ukraine war – and that Kyiv is “happy” with how talks are progressing.
Speaking to reporters on Air Force One as he flew out to his Florida estate for Thanksgiving, Mr Trump said “we’re making progress” on a deal and said he would be willing to meet with both Vladimir Putin and Volodymyr Zelenskyy once they are close to an agreement.
He also said his previously announced deadline of Thursday, which is Thanksgiving, was no longer in place – and that the White House’s initial 28-point peace plan, which sparked such concern in Kyiv, “was just a map”.
Image: U.S. President Donald Trump looks on aboard Air Force One during travel to Palm Beach, Florida, from Joint Base Andrews, Maryland, U.S., Nov
Asked if Ukraine had been asked to hand over too much territory, Mr Trump suggested that “over the next couple of months [that] might be gotten by Russia anyway”.
Moscow’s concessions are a promise to stop fighting, “and they don’t take any more land”, he said.
“The deadline for me is when it’s over,” he added. “And I think everybody’s tired of fighting at this moment.”
Before boarding the plane, Mr Trump claimed only a few “points of disagreement” remain between the two sides.
Mr Trump’s negotiator Steve Witkoff will be meeting with Mr Putin in Moscow next week, the president said, while American army secretary Daniel Driscoll is due to travel to Kyiv for talks this week.
The chief of Ukraine’s presidential staff, Andriy Yermak, wrote: “Ukraine has never been and will never be an obstacle to peace. We are grateful to the US for all its support.
“The meeting between the presidents will be thoroughly and promptly prepared on our part.”
Please use Chrome browser for a more accessible video player
3:29
‘Ukraine still needs defence support,’ says Zelenskyy
Zelenskyy warns against ‘behind our back’ deal
Yesterday, a virtual “coalition of the willing” meeting that featured Ukraine’s allies took place, which was attended by US secretary of state Marco Rubio.
In a speech, Mr Zelenskyy told attendees: “We firmly believe security decisions about Ukraine must include Ukraine, security decisions about Europe must include Europe.
“Because when something is decided behind the back of a country or its people, there is always a high risk it simply won’t work.”
Please use Chrome browser for a more accessible video player
2:36
What is Russia saying about the latest peace talks?
A joint statement from coalition leaders Sir Keir Starmer, Emmanuel Macron, and Friedrich Merz said they had agreed with Mr Rubio “to accelerate joint work” with the US on the planning of security guarantees for Ukraine.
But a Ukrainian diplomat has warned major sticking points remain in the peace deal being thrashed out – primarily the prospect of territorial concessions.
A warning from the Kremlin
Meanwhile, Moscow has stressed that it will not allow any agreement to stray too far from its own objectives.
Russia’s foreign minister Sergei Lavrov warned any amended peace plan must reflect the understanding reached between Mr Trump and Mr Putin over the summer.
“If the spirit and letter of Anchorage is erased in terms of the key understandings we have established then, of course, it will be a fundamentally different situation,” he said, referring to the two leaders’ meeting in Alaska.
Seven people were killed with power and heating systems disrupted, as residents sheltered underground.
Meanwhile, three people died and homes were damaged after Ukraine launched an attack on southern Russia.
‘A critical juncture’
French President Emmanuel Macron has said peace efforts are gathering momentum, but “are clearly at a critical juncture”.
And during the annual White House turkey pardon ahead of Thanksgiving, Mr Trump told reporters: “I think we’re getting close to a deal. We’ll find out.
“I thought that would have been an easier one, but I think we’re making progress.”
In this story, there’s no substitute for hard news.
To learn of US envoy Steve Witkoff and his Russian interactions is to understand the handbrake turn towards Moscow.
If there was much surprise and confusion about the origins of a peace proposal that had Russian fingerprints all over it, there is less now.
Captivate
This content is provided by Captivate, which may be using cookies and other technologies.
To show you this content, we need your permission to use cookies.
You can use the buttons below to amend your preferences to enable Captivate cookies or to allow those cookies just once.
You can change your settings at any time via the Privacy Options.
Unfortunately we have been unable to verify if you have consented to Captivate cookies.
To view this content you can use the button below to allow Captivate cookies for this session only.
Please use Chrome browser for a more accessible video player
2:36
What is Russia saying about the latest peace talks?
A good impression of a useful idiot
Subsequently, Witkoff drafted the controversial peace proposal with his Russian counterparts, and the US pressured Ukraine to accept it.
The report paints an unflattering picture of Trump’s envoy doing a good impression of a useful idiot.
There must be serious questions surrounding his engagement with the Russians and serious concerns around consequences that are potentially catastrophic.
Moscow’s threat to Ukraine and to the security infrastructure of Western Europe is strengthened on his handshake.
Venezuelan President Nicolas Maduro has vowed to defy any US attempt to overthrow his government – telling crowds that “failure is not an option”.
The 63-year-old brandished a sword as he addressed supporters during a march in Caracas, against a backdrop of growing tensions with Donald Trump’s administration.
Dressed in camouflage fatigues, Mr Maduro said: “We must be ready to defend every inch of this blessed land from imperialist threat or aggression, no matter where it comes from.”
Image: Maduro was swamped by supporters. Pic: Reuters
Washington has claimed that several of these boats had departed from Venezuela, with Mr Maduro describing the deployment as an assault on the nation’s sovereignty.
‘Stop this madness’
Yesterday, Cuba also accused the US of seeking a violent overthrow of Mr Maduro’s government – and called its military presence in the region “exaggerated and aggressive”.
The country’s foreign minister, Bruno Rodriguez, said ousting Venezuela’s leader would be extremely dangerous and irresponsible, not to mention a violation of international law.
He added: “We appeal to the people of the United States to stop this madness. The US government could cause an incalculable number of deaths and create a scenario of violence and instability in the hemisphere that would be unimaginable.”
Please use Chrome browser for a more accessible video player
Critics have questioned the legality of America’s campaign and argue it amounts to extrajudicial killings, with a recent poll suggesting just 29% of voters support this policy.
Officials within Maduro’s government have claimed that Washington’s actions are being driven by economic motives.
Venezuelan minister Delcy Rodriguez said: “They want Venezuela’s oil and gas reserves. For nothing, without paying. They want Venezuela’s gold.
Image: Venezuela’s president has remained defiant. Pic: AP
Donald Trump, like his predecessor Joe Biden, does not recognise Mr Maduro as the country’s leader.
He is currently on his third term after being declared the winner of last year’s presidential election, despite evidence that the opposition defeated him by a two-to-one margin.
Mr Maduro and senior officials have been repeatedly accused of human rights violations against real and perceived government opponents.
Earlier this week, the US designated Venezuela’s Cartel de los Soles – Cartel of the Suns in English – as a foreign terrorist organisation for importing illegal drugs to the States.
Please use Chrome browser for a more accessible video player
1:01
Venezuelan president dances to speech remix
The Trump administration has claimed that Maduro is part of this group, but Venezuelan officials have described its mere existence as a “ridiculous fabrication”.
Speaking to reporters on Air Force One as he travelled to Florida for Thanksgiving, the president suggested he might be planning to talk to Mr Maduro.
“If we can save lives, if we can do things the easy way, that’s fine,” the US president said. “And if we have to do it the hard way, then that’s fine too.”
Please use Chrome browser for a more accessible video player
0:59
US strikes alleged drug boat
Carlos Diaz Rosillo, a former US deputy assistant secretary of defence during the first Trump administration, does not believe America will go to war with Venezuela.
He told The World With Dominic Waghorn:“What I do see is a strategy of maximum pressure on the regime. I do think if there’s any change, that change has to come from within the military.”
Dr Rosillo said the official position of the US government is not regime change, but Mr Trump would like to see that happen in Venezuela.