SAP Security Patch Day – December 2022
Today, December 13rd, 2022, is another day for SAP to release security updates for its wide-ranging product portfolio. SAP releases 14 new SAP security updates, as well as 4 updates from previous releases.
My name is Christoph Nagy. I am the founder and managing director of SecurityBridge - NCMI GmbH. We develop strategic security solutions for our customers, enabling them to perform automated analysis of security settings and to detect and prevent cyber-attacks against SAP© in real-time.
Today, December 13rd, 2022, is another day for SAP to release security updates for its wide-ranging product portfolio. SAP releases 14 new SAP security updates, as well as 4 updates from previous releases.
Viele unserer Leserinnen und Leser erinnern sich noch an den 25. Mai 2018, Stichtag der bindenden Einführung der Datenschutzgrundverordnung, kurz DSGVO. Verstöße gegen die neue Regelung können seitdem zu drakonischen Strafen führen. Nun steht, zumindest für diejenigen Unternehmen, die zur kritischen Infrastruktur (KRITIS) von Deutschland zählen, ein ähnlicher Termin ins Haus. Am 1. Mai 2023 müssen betroffene Unternehmen ein System zur Angriffserkennung eingeführt haben.
Today, November 8, 2022, SAP releases a total of 10 patches and 2 updates from the previous released Patch Day Security Notes.
Believe it or not, I’ve probably attended more customer meetings in 2022 than ever before. And the question about the difference between SAP Patch Management and SAP Vulnerability Management keeps appearing. To give a conclusively answer, we need to take a closer look at the two separate areas.
11th October is not only the monthly SAP Security Patch Day, it is also the 1st day of the annual DSAG conference, this year taking place in Leipzig.
After reading the title, you’re probably thinking – Why should legacy code be handled differently than new coding? Well, let’s draw up a real-life scenario to illustrate the challenges:
“There are a few constants in life” – a statement that also applies to the SAP user community. It has always been a challenge for SAP customers to bring their large SAP environments to a current release level. Although the vendor has done a lot in the past to simplify this, it is still not a complex undertaking.
Every organization constantly faces the challenge of minimizing the attack surface that an adversary could use to perform malicious operations. To do this, administrators must install the deployed components and understand them in detail to identify risks and proactively mitigate or prevent those. Today we are looking at what is necessary to protect the SAP Cloud Connector.
After many years in the SAP eco-system, I know many good and bad practices exist in the IT Departments of – to be frank – every organization on this planet. Initiated by the SAP Security Patch Day in September 2022, our team has nudged me to share some knowledge. In this short how-to description, we want to explain the correct usage of the SAP Launchpad Expert Search to get the most accurate result looking for SAP Security Notes. If you want to find out how this powerful tool works, keep on reading.
September 13rd 2022, another SAP Security Patch Day in the calendar of SAP customers. It may be coincidence but today is also the Day of the Programmer.