Hackers know SAP is the technical heart of businesses’ trade secrets, customer data, sensitive pricing, and more. Attacking this landscape will enable them to enter other applications such as CRM, ERP, and HR systems. Exacerbating this situation, there are many unknown vulnerabilities that lurk within custom SAP code – for which there are no off-the-shelf patches available. Hackers are also equally aware that IT and business departments are often at odds with each other, causing a communication breakdown at a time when sharing information quickly is paramount to halting an attack. It’s a “perfect storm” that allows hackers to deploy malicious scripts for execution without authentication.