CISA Directive: Remediating Actively Exploited SAP Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive 22-01, mandating that government departments and agencies remediate specific vulnerabilities known to be actively exploited. This directive highlights six critical SAP vulnerabilities that pose significant risks to information systems, requiring remediation to ensure landscape security. What is the CISA Known Exploited Vulnerabilities (KEV) […]
Protecting SAP Systems from Ransomware Attacks
Recent high-profile incidents, such as the Colonial Pipeline attack, have highlighted the devastating impact of ransomware on critical infrastructure. With ransomware attacks increasing by 300% over the past year, organizations face significant operational risks: the average downtime from an attack is 21 days, while full recovery can take up to 287 days. Why host-level security […]
Cybersecurity Extension for SAP Identifies Signatures of Active SAP Cyberattacks
Recent research confirms that attackers are actively targeting and weaponizing vulnerabilities in SAP applications. With some unprotected cloud installations being compromised in under three hours, and patches being weaponized in less than 72 hours, organizations must move beyond basic patching to implement active threat detection. The Reality of Active SAP Exploitation A joint report by […]
SAP ASE Vulnerabilities: Critical Security Patches and Remediation
SAP released critical patches for Adaptive Server Enterprise (ASE) versions 15.7 and 16.0 to address vulnerabilities with CVSS scores between 7.2 and 9.1. Customers should immediately apply these patches via SAP Solution Manager to prevent risks like arbitrary command execution, privilege escalation, and unauthorized access to configuration files. SAP Adaptive Server Enterprise (ASE), formerly known […]
SAP Discloses Security Gaps in Cloud Solutions (May 2020)
In May 2020, SAP disclosed security lapses across several of its cloud-based products, including SAP Cloud Platform, SAP Analytics Cloud, SuccessFactors, and Concur. The company identified these issues during an internal security review and initiated remediation efforts for approximately 9% of its 440,000 customers. Executive Summary The May 2020 announcement from SAP revealed that specific […]
SIEM Integration for SAP: Challenges and Solutions
Integrating SAP logs directly into Security Information and Event Management (SIEM) systems is often a complex and costly process. By leveraging SAP Solution Manager to filter, structure, and enrich security event data, organizations can achieve seamless integration while avoiding the high maintenance and licensing costs associated with direct log ingestion. Watch the Webinar: You can view […]
SIEM Integration for SAP: Challenges and Best Practices
Directly integrating SAP logs into a SIEM system often creates significant operational hurdles, including high log volumes, complex maintenance requirements, and difficulties with event correlation. Organizations can overcome these challenges by using SAP Solution Manager as an intermediary to streamline data flow, improve threat detection, and simplify security operations. Executive Summary Integrating SAP systems with […]
64% of ERP Systems Have Experienced Security Breaches Between 2017-19
According to an independent survey of 430 IT decision makers, 64 percent of ERP deployments have experienced security breaches in the past 24 months. The findings are published in the report ERP Security: The Reality of Business Application Protection. Most of the breaches compromised sensitive data, including sales, HR, customer, financial and intellectual property data. […]
SAP Vulnerability Assessment vs Penetration Testing
Vulnerability assessments and penetration tests are complementary but should be deployed sequentially: vulnerability assessments come first, then penetration testing against hardened systems. Testing systems that have not been hardened gives predictable results, since the objective of penetration testing is to assess the strength of security defenses. Executive Summary Vulnerability assessment and penetration testing both serve […]
Webinar: 10KBLAZE – Secure Your SAP Systems with CVA and SolMan
SAP Code Vulnerability Analyzer (CVA) and SAP Solution Manager together help secure SAP systems against 10KBLAZE exploits. CVA performs static code analysis to detect vulnerabilities in custom code, and Solution Manager detects vulnerabilities and threats in components such as the gateway server, message server and SAProuter. This webinar from SAP and Layer Seven Security was […]