On the 9th of June 2020 the SAP Product Security Response Team released 18 patches out of which 1 contains an update from a previous release. Every second Tuesday of the month the team publishes corrections and recommendations, which fix known vulnerabilities discovered within SAP products.

Over and over again we see attackers who have gained unauthorized access to a system by spending a significant amount of time spying out relevant SAP data, unnoticed by the victim organization. In a recent incident, we identified a large number of information gathering and data collection activities carried out by a threat actor prior to the exfiltration of sensitive data – which, if leaked, would inevitably lead to reputation and/or financial loss for the organization.

SAP Identity Theft is when someone steals your account details and then uses them to execute unauthorized transactions on your behalf. Identity theft is one of the fastest-growing crimes in the world today. Enterprises should educate their users with some basic rules to help protect their identities.

Download the SAP Security Product Comparison Report and understand that holistic security for SAP can be delivered by a single solution.

Quite a few SAP customers are currently migrating their systems to the new S/4HANA platform. This represents a great opportunity to re-think SAP security and harden S/4HANA right from the outset. However, there are several challenges to SAP security with S/4HANA. Despite sharing numerous settings with the “old” SAP Business Suite, some things are fundamentally different in S/4HANA.

On 25th of May 2020, ABEX has published a new minor version of SecurityBridge for SAP. This post summarizes the highlights of the recent release.

In the last major release 4.7, SecurityBridge introduced the Security & Compliance Manager. 4.71 contain first enhancement inspired by our early adopter community and many more features.

SAP Identity Theft is when someone steals your account details and then uses them to execute unauthorized transactions on your behalf. Identity theft is one of the fastest-growing crimes in the world today. Enterprises should educate their users with some basic rules to help protect their identities.

Being reactive is simply not enough. If threat actors didn’t innovate, security providers wouldn’t need to either. It’s hackers’ ability to imagine new ways to hurt us, and then execute them at speed, that has left us trying to guess the next move.