If you're active in the SAP eco-space, or you have an interest in cybersecurity in general, you'll probably have noticed “10KBlaze” that is currently blazing through the internet. An SAP security provider posted about how known but unpatched SAP vuln...
The human element within the organization is probably the most neglected element in the organizational cyber defense strategy. I have read lots of interesting blog posts and articles talking about generating security awareness. Often I read about use...
ABAP code vulnerabilities
SAP security is a great challenge and will be a challenge for many years to come. In order to thoroughly secure an application, all of its components and potential threats need to be understood. SAP security is multi-layered...
Let me state that nothing in SAP calls for a radical change, also not a shift in the technology stack. Remember when SAP Fiori was first introduced? Yes, 2013. 11 years later we still see a mass use of the SAP GUI. Adoption of new technologies ma...
A great reference Frank! But why not simply move your enhanced version into the standard as a replacement for CLEANUP_PASSWORD_HASH_VALUES?
Best Regards, Ivan
A great initiative from SAP to (finally) embed code security in their add-on certification progress. Far too often we run into exploitable code vulnerabilities within 3rd party code.
Dear Megan,
excellent initiative which I will definitely follow! The need for continuous security monitoring is very much underestimated still. I myself work for a SAP security vendor specialized in real time threat detection and vulnerability monit...
Hi Marco,
I cannot agree more. The unawareness, missing domain experience, ignorance, resource shortage, stressing budgets, a false sense of security, ... has been nurtured by the fact SAP application have a legacy and perception of being isolated b...
