Recent Blog Posts & Articles

Third-party solutions can significantly enhance business operations by providing specialized tools, applications, or services that integrate with SAP systems. However, they also introduce several cyber security risks. This blog post describes real life risks related to SAP third-party solutions.

When discussing the risks of ABAP-based malware with companies, a typical early question is "Why should we care? We have an ABAP code scanner in place." An understandable question, especially since ABAP code scanners tend to be pretty expensive. So they should cover all ABAP risks, right? This blog post explains why ABAP code scanners are next to useless against ABAP malware.

When it comes to SAP security, many companies think they just need to assign the right set of roles and authorizations to user accounts and all is well. However, a growing number of companies is beginning to understand that they also need to address SAP cyber security topics such as patch management, system hardening and custom code security in order to protect their SAP installations from attacks. But practically no one realizes that an SAP installation can itself be used as a cyber weapon against the companies and organizations that run it.