---
title: SAP Cybersecurity Software Blog | bowbridge Software
description: Visit the bowbridge Software blog for the latest SAP cybersecurity news and updates.
---
[customer login](https://www.bowbridge.net/customer-portal/) english deutsch
[](https://www.bowbridge.net/en/)
- [Solutions](https://www.bowbridge.net/en/sap-cybersecurity-solutions/)
- [Anti-Virus - Cloud](https://www.bowbridge.net/en/anti-virus-cloud-for-sap-solutions/)
- [Anti-Virus for SAP Solutions](https://www.bowbridge.net/en/anti-virus-for-sap-solutions/)
- [Application Security for SAP Solutions](https://www.bowbridge.net/en/application-security-for-sap-solutions/)
- [Resources](https://www.bowbridge.net/en/sap-cybersecurity-resources/)
- [Blog](https://explore.bowbridge.net/blog)
- [Protecting SAP Applications from Content-Based Attacks](https://www.bowbridge.net/en/guide-to-content-based-attacks-sap-applications/)
- [Intro to FIORI Cybersecurity](https://www.bowbridge.net/en/guide-to-sap-fiori-cybersecurity/)
- [Case Studies](https://www.bowbridge.net/en/sap-cybersecurity-resources/#casestudies)
- [White Papers](https://www.bowbridge.net/en/sap-cybersecurity-resources/#wp)
- [Webinars](https://www.bowbridge.net/en/sap-cybersecurity-resources/#webinars)
- [Partner Resources](https://www.bowbridge.net/en/bowbridge-partner-resources/)
- [About](https://www.bowbridge.net/en/about-bowbridge-software/)
- [Company Profile](https://www.bowbridge.net/en/company-profile/)
- [Customers](https://www.bowbridge.net/en/customers/)
- [News](https://explore.bowbridge.net/news)
- [Careers](https://www.bowbridge.net/en/careers/)
- [Support](https://www.bowbridge.net/en/sap-cybersecurity-support/)
- [Software Downloads](https://www.bowbridge.net/en/bowbridge-downloads/)
- [Documentation](https://www.bowbridge.net/en/bowbridge-documentation/)
- [Support Videos](https://www.bowbridge.net/en/bowbridge-support-videos/)
- [Contact Technical Support](https://www.bowbridge.net/en/sap-cybersecurity-support/#form)
- [Contact](https://www.bowbridge.net/en/contact-bowbridge/)
- [DE](https://www.bowbridge.net/de/)
- [EN](https://www.bowbridge.net/en/news.html)
- [Solutions](https://www.bowbridge.net/en/sap-cybersecurity-solutions/)
- [Anti-Virus - Cloud](https://www.bowbridge.net/en/anti-virus-cloud-for-sap-solutions/)
- [Anti-Virus for SAP Solutions](https://www.bowbridge.net/en/anti-virus-for-sap-solutions/)
- [Application Security for SAP Solutions](https://www.bowbridge.net/en/application-security-for-sap-solutions/)
- [Resources](https://www.bowbridge.net/en/sap-cybersecurity-resources/)
- [Blog](https://explore.bowbridge.net/blog)
- [Protecting SAP Applications from Content-Based Attacks](https://www.bowbridge.net/en/guide-to-content-based-attacks-sap-applications/)
- [Intro to FIORI Cybersecurity](https://www.bowbridge.net/en/guide-to-sap-fiori-cybersecurity/)
- [Case Studies](https://www.bowbridge.net/en/sap-cybersecurity-resources/#casestudies)
- [White Papers](https://www.bowbridge.net/en/sap-cybersecurity-resources/#wp)
- [Webinars](https://www.bowbridge.net/en/sap-cybersecurity-resources/#webinars)
- [Partner Resources](https://www.bowbridge.net/en/bowbridge-partner-resources/)
- [About](https://www.bowbridge.net/en/about-bowbridge-software/)
- [Company Profile](https://www.bowbridge.net/en/company-profile/)
- [Customers](https://www.bowbridge.net/en/customers/)
- [News](https://explore.bowbridge.net/news)
- [Careers](https://www.bowbridge.net/en/careers/)
- [Support](https://www.bowbridge.net/en/sap-cybersecurity-support/)
- [Software Downloads](https://www.bowbridge.net/en/bowbridge-downloads/)
- [Documentation](https://www.bowbridge.net/en/bowbridge-documentation/)
- [Support Videos](https://www.bowbridge.net/en/bowbridge-support-videos/)
- [Contact Technical Support](https://www.bowbridge.net/en/sap-cybersecurity-support/#form)
- [Contact](https://www.bowbridge.net/en/contact-bowbridge/)
# bowbridge Cybersecurity Blog
Learn how bowbridge cybersecurity mitigates risk while meeting compliance standards.
[](https://explore.bowbridge.net/blog/social-engineering-cyber-security-scams)
### [How to Protect Yourself from Social Engineering Cyber Security Scams](https://explore.bowbridge.net/blog/social-engineering-cyber-security-scams)
Aug 31, '26 by Joerg Schneider-Simon
Social engineering cyber security attacks don’t start with code, malware or system vulnerabilities. They start with people, routines and trust.
A fake customer sends a screenshot. A supplier shares a link. A colleague requests urgent approval for an...
[](https://explore.bowbridge.net/blog/ai-prompt-injection-attacks)
### [AI Prompt Injection Attacks in Salesforce: Hidden Commands that Hijack AI Agents](https://explore.bowbridge.net/blog/ai-prompt-injection-attacks)
Aug 28, '26 by Joerg Schneider-Simon
AI prompt injection attacks are not unique to Salesforce, but the business-critical nature of the apps, workflows and data running through the CRM platform make autonomous AI agents prime targets for exploitation.
In this type of cyberattack, bad...
[](https://explore.bowbridge.net/blog/best-salesforce-apps)
### [The Best Salesforce Apps to Enhance Your Tech Stack](https://explore.bowbridge.net/blog/best-salesforce-apps)
Aug 26, '26 by Joerg Schneider-Simon
The best way to enhance your tech stack is to choose the best Salesforce apps for your workflows that fill the gaps in your feature set and help your CRM teams deliver more value from the platform. It’s a tall order given the thousands of Salesforce...
[](https://explore.bowbridge.net/blog/salesforce-phishing-attacks)
### [Practical Guide to Salesforce Phishing Attacks: Risks, Examples and Prevention](https://explore.bowbridge.net/blog/salesforce-phishing-attacks)
May 31, '26 by Joerg Schneider-Simon
Phishing isn’t just reserved for your email inbox. Attackers can target core areas like Salesforce through fake login pages, voice phishing calls, malicious connected apps, OAuth abuse, unsafe links, fake support requests and trusted Salesforce...
[](https://explore.bowbridge.net/blog/salesforce-security-best-practices)
### [10 Salesforce Security Best Practices: How to Protect Yourself from Modern Content Risks](https://explore.bowbridge.net/blog/salesforce-security-best-practices)
May 30, '26 by Joerg Schneider-Simon
Salesforce security best practices start with the basics: enforce multi-factor authentication, apply least privilege permissions, run a [Salesforce Health Check](https://help.salesforce.com/s/articleView?id=xcloud.security_health_check.htm&language=en_US&type=5), monitor user activity, secure connected apps and review Experience Cloud access. All...
[](https://explore.bowbridge.net/blog/salesforce-security-breach-costs)
### [The Real-Life Costs of a Salesforce Security Breach](https://explore.bowbridge.net/blog/salesforce-security-breach-costs)
May 29, '26 by Joerg Schneider-Simon
## Examples from real breaches, and what we can learn from them.
Salesforce itself describes cybersecurity for the platform as a shared responsibility, stating that while it builds enterprise-grade security into the platform, customers still play a...
[](https://explore.bowbridge.net/blog/why-sap-rise-customers-need-to-take-malware-protection-seriously)
### [Why SAP RISE Customers Need to Take Malware Protection Seriously](https://explore.bowbridge.net/blog/why-sap-rise-customers-need-to-take-malware-protection-seriously)
Jun 4, '25 by Joerg Schneider-Simon
## What “Shared Security Responsibility” Means for SAP RISE Customers
Economies of scale are driving business transformation in the cloud. But when it comes to cyber security, the cloud also provides more opportunities for hackers due to application...
[](https://explore.bowbridge.net/blog/why-you-should-have-cloud-security-for-sap-file-transfers)
### [Are Your Forgetting Something? Why You Should Have Cloud Security For SAP File Transfers](https://explore.bowbridge.net/blog/why-you-should-have-cloud-security-for-sap-file-transfers)
Feb 27, '25 by Joerg Schneider-Simon
The advent of widespread cloud adoption for SAP systems represents a watershed moment in the industry. These changing times have ushered in the need for a fundamental shift in SAP security strategy, according to Joerg Schneider-Simon, Co-Founder and...
[](https://explore.bowbridge.net/blog/securing-sap-in-the-cloud-bowbridge-anti-virus-cloud)
### [Securing SAP in the Cloud: Introducing bowbridge Anti-Virus 4.0 - Cloud](https://explore.bowbridge.net/blog/securing-sap-in-the-cloud-bowbridge-anti-virus-cloud)
Dec 12, '24 by Joerg Schneider-Simon
As organizations increasingly transition their SAP environments to the cloud, the need for robust security has never been greater. Protecting critical business data in these cloud-based systems is a complex challenge — one that traditional...
[](https://explore.bowbridge.net/blog/how-superior-cloud-based-sap-security-helps-prevent-cloud-repatriation)
### [How Superior Cloud-Based SAP Security Helps Prevent Cloud Repatriation](https://explore.bowbridge.net/blog/how-superior-cloud-based-sap-security-helps-prevent-cloud-repatriation)
Nov 12, '24 by Joerg Schneider-Simon
In an October 2024 IDC article entitled, “[Storm Clouds Ahead: Missed Expectations in Cloud Computing](https://blogs.idc.com/2024/10/28/storm-clouds-ahead-missed-expectations-in-cloud-computing/),” the authors conduct an analysis of cloud repatriation trends. The main premise of the article is that the cloud computing landscape is...
[](https://explore.bowbridge.net/blog/secure-together-2024-highlights-bowbridge)
### [Secure Together 2024: Highlights From Bowbridge](https://explore.bowbridge.net/blog/secure-together-2024-highlights-bowbridge)
Aug 28, '24 by Joerg Schneider-Simon
We were thrilled to join Accenture, Fortinet, and SecurityBridge to host the premier SAP security event of the year, “Secure Together,” in Rotterdam on June 19, 2024. If you weren’t able to make it, read on to learn more about the topics and trends...
[](https://explore.bowbridge.net/blog/sap-cybersecurity-schools-k12-higher-education-risk)
### [SAP Cybersecurity in Schools: Why K-12 and Higher Education Are at Risk](https://explore.bowbridge.net/blog/sap-cybersecurity-schools-k12-higher-education-risk)
Aug 26, '24 by Joerg Schneider-Simon
Whether you work at a small K-12 school district or a huge state university, SAP plays a big role in education, controlling important operational functions of your school from payroll and PTO requests to maintenance schedules and contracts.
So,...
[](https://explore.bowbridge.net/blog/navigating-the-cybersecurity-labyrinth-xml-files-in-sap-applications)
### [Navigating the Cybersecurity Labyrinth: XML Files in SAP Applications](https://explore.bowbridge.net/blog/navigating-the-cybersecurity-labyrinth-xml-files-in-sap-applications)
May 7, '24 by Joerg Schneider-Simon
In the digital era, where data is as valuable as gold, cybersecurity has become a cornerstone for businesses worldwide.
One area that often flies under the radar — but warrants significant attention — is the management and security of XML files,...
[](https://explore.bowbridge.net/blog/navigating-advanced-cybersecurity-risks-the-perils-of-microsoft-office-files-in-sap-applications)
### [Navigating Advanced Cybersecurity Risks: The Perils of Microsoft Office Files in SAP Applications](https://explore.bowbridge.net/blog/navigating-advanced-cybersecurity-risks-the-perils-of-microsoft-office-files-in-sap-applications)
Apr 30, '24 by Joerg Schneider-Simon
In today's digitally driven corporate environments, SAP applications stand as colossal pillars supporting myriad business processes, from procurement and supply chain management to human resources and customer relationship management.
However, the...
[](https://explore.bowbridge.net/blog/navigating-advanced-cybersecurity-risks-pdf-files-in-sap-applications)
### [Navigating Advanced Cybersecurity Risks: PDF Files in SAP Applications](https://explore.bowbridge.net/blog/navigating-advanced-cybersecurity-risks-pdf-files-in-sap-applications)
Apr 23, '24 by Joerg Schneider-Simon
In the complex world of cybersecurity, PDF files represent not just documents. They’re also sophisticated vehicles for potential exploitation. Within the intricate framework of SAP applications, PDFs harbor multifaceted technical vulnerabilities...
[](https://explore.bowbridge.net/blog/10-ways-protect-your-business-against-ransomware-attacks)
### [10 Ways to Protect Your Business Against Ransomware Attacks](https://explore.bowbridge.net/blog/10-ways-protect-your-business-against-ransomware-attacks)
Apr 17, '24 by Joerg Schneider-Simon
Your organization faces an ever-growing threat of ransomware attacks. The year 2023 saw ransomware attacks increase by a whopping [95% over the previous year.](https://www.statista.com/statistics/494947/ransomware-attempts-per-year-worldwide/)Worldwide, more than 72% of businesses were affected by ransomware attacks in 2023.
To...
[](https://explore.bowbridge.net/blog/major-european-university-secures-sap-systems-with-bowbridge)
### [Major European University Secures SAP Systems with bowbridge](https://explore.bowbridge.net/blog/major-european-university-secures-sap-systems-with-bowbridge)
Apr 11, '24 by Joerg Schneider-Simon
University of Amsterdam was founded in 1632 and holds ties with the Amsterdam University of Applied Sciences, collectively serving around 80,000 students per year. A past cyberattack spurred this educational institution to harden their network — but...
[](https://explore.bowbridge.net/blog/how-ai-is-accelerating-ransomware-and-phishing-threats-to-sap-cybersecurity)
### [What Are the Risks of Artificial Intelligence in Cybersecurity and to your SAP System?](https://explore.bowbridge.net/blog/how-ai-is-accelerating-ransomware-and-phishing-threats-to-sap-cybersecurity)
Aug 21, '23 by Joerg Schneider-Simon
Ransomware continues to be one of the top varieties of malicious software. And it’s [wreaking havoc](https://explore.bowbridge.net/blog/ransomware-sap-e-recruiting-and-why-hr-is-under-cyberattack), grinding company operations to a halt as the ransomware renders mission-critical data and systems inaccessible, while also exposing companies to huge...
[](https://explore.bowbridge.net/blog/improve-sap-fiori-security)
### [Six Steps to Improve SAP FIORI Security](https://explore.bowbridge.net/blog/improve-sap-fiori-security)
Jun 14, '23 by Joerg Schneider-Simon
Hackers have been quick to notice that many SAP applications, servers, and databases that were once hidden behind corporate firewalls are now exposed to the web, making them prime targets for attacks.
One common denominator in this push to the web...
[](https://explore.bowbridge.net/blog/cyber-insecurity-ranks-eighth-wef-global-risks-report)
### [Cyber Insecurity Ranks Eighth Place in WEF Global Risks Report 2023](https://explore.bowbridge.net/blog/cyber-insecurity-ranks-eighth-wef-global-risks-report)
Apr 25, '23 by Joerg Schneider-Simon
The world faces a set of risks that feel both wholly new and eerily familiar. The [Global Risks Report 2023](https://www.weforum.org/reports/global-risks-report-2023/digest), published by the World Economic Forum (WEF), explores some of the most severe risks we face over the next decade.
As you can see from the...
[](https://explore.bowbridge.net/blog/7-ways-improve-sap-s4hana-security-virus-scanning)
### [7 Ways to Improve SAP S4/HANA Security With Virus Scanning](https://explore.bowbridge.net/blog/7-ways-improve-sap-s4hana-security-virus-scanning)
Feb 28, '23 by Joerg Schneider-Simon
Talk to your average hacker, and they’ll tell you they prefer to target networks and applications that host mission-critical data.
The more valuable the data, the more attractive the target.
This is why plenty of cybercriminals have their sights set...
[](https://explore.bowbridge.net/blog/sap-security-solutions-retail-industry)
### [SAP Security Solutions for the Retail Industry](https://explore.bowbridge.net/blog/sap-security-solutions-retail-industry)
Feb 13, '23 by Joerg Schneider-Simon
Retailers face multiple (and growing) challenges in a highly competitive marketplace. To meet these challenges, many retailers turn to SAP to transform the customer experience across every channel while improving sustainability across the entire...
[](https://explore.bowbridge.net/blog/understand-saps-file-transfer-security-gap)
### [Understand SAP’s File Transfer Security Gap](https://explore.bowbridge.net/blog/understand-saps-file-transfer-security-gap)
Dec 15, '22 by Joerg Schneider-Simon
Hackers know there is an open door into SAP. They exploit users and the application layer by introducing malicious files. This attack vector is in the application’s critical path, as attaching supporting documents to transactions is a common...
[](https://explore.bowbridge.net/blog/no-malware-protection-guarantee-even-sap)
### [Why There’s No Malware Protection Guarantee–Even for SAP](https://explore.bowbridge.net/blog/no-malware-protection-guarantee-even-sap)
Apr 20, '22 by Joerg Schneider-Simon
If Benjamin Franklin were alive today, he would likely expand his famous aphorism to say: “There are only three certainties in life—death and taxes—and malware.”
Malware is a certainty in life and business because there is no way to protect your...
[](https://explore.bowbridge.net/blog/sap-security-professionals-file-uploads)
### [SAP Security for Professionals: How to Safely Upload Files into Your SAP System](https://explore.bowbridge.net/blog/sap-security-professionals-file-uploads)
Apr 12, '22 by Joerg Schneider-Simon
This post is the second in our two-part series on how to protect your SAP systems against file-based attacks. Read the first post: [SAP Security for Beginners: How to Safely Upload Files into Your SAP System](https://explore.bowbridge.net/blog/sap-security-beginners-file-uploads).
Malware in file uploads wreaks havoc on...
[](https://explore.bowbridge.net/blog/sap-security-beginners-file-uploads)
### [SAP Security for Beginners: How to Safely Upload Files into Your SAP System](https://explore.bowbridge.net/blog/sap-security-beginners-file-uploads)
Mar 16, '22 by Joerg Schneider-Simon
File uploads are a necessary part of doing business, particularly these days when so many employees are working remotely.
And SAP is no different. SAP applications used to manage suppliers, procurement, recruiting, finances, and dozens of other...
[](https://explore.bowbridge.net/blog/12-virus-protection-best-practices-sap)
### [12 Virus Protection Best Practices for SAP Systems](https://explore.bowbridge.net/blog/12-virus-protection-best-practices-sap)
Mar 9, '22 by Joerg Schneider-Simon
It’s smart for IT leaders to stay updated on virus protection best practices.
But just as most [anti-virus solutions fail to protect SAP](https://explore.bowbridge.net/blog/why-anti-virus-programs-dont-protect-sap-systems), many lists of virus protection best practices completely neglect SAP cybersecurity, even though SAP software...
[](https://explore.bowbridge.net/blog/improve-sap-security-being-proactive)
### [How to Improve Your SAP Security by Being Proactive](https://explore.bowbridge.net/blog/improve-sap-security-being-proactive)
Nov 23, '21 by Joerg Schneider-Simon
Know what’s worse than discovering that your network has been breached by hackers?
*Not* discovering it.
When it comes to ensuring SAP security, even veteran cybersecurity professionals may operate in reactive mode. Instead of getting out ahead of...
[](https://explore.bowbridge.net/blog/malware-detection-sap-applications)
### [Malware Detection for SAP Applications](https://explore.bowbridge.net/blog/malware-detection-sap-applications)
Sep 9, '21 by Joerg Schneider-Simon
If your organization runs any SAP applications, you likely have a problem with malware...and malware detection.
Why? Because most enterprise anti-virus software doesn’t protect SAP applications against malware.
If you need malware detection for SAP...
[](https://explore.bowbridge.net/blog/sap-erp-alternatives-consider-security)
### [SAP ERP Alternatives: Which Should You Choose? (And Which Is Most Secure?)](https://explore.bowbridge.net/blog/sap-erp-alternatives-consider-security)
Jul 14, '21 by Joerg Schneider-Simon
Your ERP (enterprise resource planning) system collects, stores and distributes your most sensitive employee, customer, supplier and financial data.
That’s why ERP systems are popular targets for criminal hackers, malevolent nation states and...
[](https://explore.bowbridge.net/blog/why-anti-virus-programs-dont-protect-sap-systems)
### [Why Even the Best Anti-Virus Program Can’t Protect SAP Systems](https://explore.bowbridge.net/blog/why-anti-virus-programs-dont-protect-sap-systems)
Jul 7, '21 by Joerg Schneider-Simon
Is your enterprise-grade anti-virus software protecting your SAP systems?
No.
Is it leaving your business exposed and vulnerable to [the latest viruses](https://blogs.innovanathinklabs.com/cyber-threat-latest-computer-viruses/), whether GoBrut, Jokeroo, Trojan Glupteba, ILOVEYOU or something else?
Unfortunately…yes.
Why?...
[](https://explore.bowbridge.net/blog/best-sap-anti-virus-software-bowbridge-trend-micro-clamsap)
### [Best SAP Anti-Virus Software Solutions: Trend Micro vs. Bowbridge vs. ClamSAP](https://explore.bowbridge.net/blog/best-sap-anti-virus-software-bowbridge-trend-micro-clamsap)
Jun 3, '21 by Joerg Schneider-Simon
Is your organization fully covered with your current anti-virus solution?
You may think so, but if you are using SAP, you [may not be as safe as you think](https://explore.bowbridge.net/blog/why-anti-virus-programs-dont-protect-sap-systems).
Traditional anti-virus solutions do not protect SAP systems—so file uploads into SAP...
[](https://explore.bowbridge.net/blog/migrating-cloud-sap-security-issues)
### [SAP Security Considerations When Migrating to the Cloud](https://explore.bowbridge.net/blog/migrating-cloud-sap-security-issues)
May 25, '21 by Joerg Schneider-Simon
Keeping data, processes, and people safe while in the cloud is something businesses often overlook until something goes wrong.
According to a study by [Onapsis](https://insidesap.com.au/asug-onapsis-explore-sap-and-cloud-migration/) and ASUG on "Digital Transformation and Security," 57% of businesses have almost completed...
[](https://explore.bowbridge.net/blog/smart-new-way-accurately-assess-sap-security-maturity)
### [A Smart New Way to Accurately Assess Your SAP Security Maturity](https://explore.bowbridge.net/blog/smart-new-way-accurately-assess-sap-security-maturity)
Apr 15, '21 by Joerg Schneider-Simon
Forgive us for asking, but on a scale from 1 to 10, how mature *is* your SAP security, exactly?
Not sure? That’s understandable. After all, a global cybersecurity standard for SAP systems doesn’t exist. Countries follow their own guidelines. Audit...
[](https://explore.bowbridge.net/blog/sap-cybersecurity-ecommerce-fraud)
### [SAP Cybersecurity and Ecommerce Fraud](https://explore.bowbridge.net/blog/sap-cybersecurity-ecommerce-fraud)
Mar 16, '21 by Joerg Schneider-Simon
Cybercriminals have never seen a weakness they didn’t like. If a trend in ecommerce, a shift in consumer buying habits or a shift in technology makes retailers more vulnerable, cybercriminals are the first to discover these vulnerabilities—and...
[](https://explore.bowbridge.net/blog/cyberattacks-critical-infrastructure-sap)
### [Cyberattacks on Critical Infrastructure](https://explore.bowbridge.net/blog/cyberattacks-critical-infrastructure-sap)
Mar 3, '21 by Joerg Schneider-Simon
In December 2020, the US Cybersecurity and Infrastructure Security Agency (CISA) [announced](https://www.bloomberg.com/news/articles/2020-12-17/u-s-cyber-agency-says-hacking-by-adversary-poses-grave-risk#:~:text=2%3A06-,U.S.%20Sees%20a%20'Grave%20Risk'%20in,Scope%20of%20Russia%2DLinked%20Hacking&text=The%20suspected%20Russian%20hacking%20spree,to%20an%20advisory%20posted%20Thursday.) that a suspected Russian hack "poses a grave risk to the federal government." The agency added that "state, local, tribal, and territorial governments as well...
[](https://explore.bowbridge.net/blog/new-malware-threats-sap-e-recruiting-systems)
### [New Malware Threatens SAP E-Recruiting Systems](https://explore.bowbridge.net/blog/new-malware-threats-sap-e-recruiting-systems)
Feb 9, '21 by Joerg Schneider-Simon
Cyberattacks and malware threats are becoming more sophisticated by the day, including attacks that target SAP E-Recruiting systems.
In August 2020, the United States Cybersecurity and Infrastructure Security Agency (CISA) published a [Malware...](https://us-cert.cisa.gov/ncas/analysis-reports/ar20-232a)
[](https://explore.bowbridge.net/blog/why-companies-at-risk-cyberattacks)
### [Why All Companies are at Risk of Cyberattacks (Yes, Even Yours)](https://explore.bowbridge.net/blog/why-companies-at-risk-cyberattacks)
Feb 2, '21 by Joerg Schneider-Simon
“My business is too small – cyberattackers won’t even have me on their radar.”
“We’re big, but we have a great team monitoring our cybersecurity, so we’ll be fine.”
Whether your business is big or small, you should always suspect that a cyberattack...
[](https://explore.bowbridge.net/blog/new-sap-vulnerabilities-all-about-recon)
### [New SAP Vulnerabilities: All About RECON](https://explore.bowbridge.net/blog/new-sap-vulnerabilities-all-about-recon)
Jan 14, '21 by Joerg Schneider-Simon
In July 2020, [Onapsis disclosed a vulnerability](https://onapsis.com/recon-sap-cyber-security-vulnerability) that affects the SAP NetWeaver Application Server and therefore a large number of SAP applications.
Labeled as HotNews SAP Note [#2934135](https://launchpad.support.sap.com/#/notes/2934135) (CVE-2020-6287) in the July 2020 SAP Security Notes, this...
[](https://explore.bowbridge.net/blog/sap-cyberattack-how-to-respond)
### [3 Signs You Are Vulnerable to an SAP Cyberattack (and How to Respond)](https://explore.bowbridge.net/blog/sap-cyberattack-how-to-respond)
Dec 10, '20 by Joerg Schneider-Simon
Is your organization like the staggering 66% of organizations that are vulnerable to cyberattacks on their SAP applications?
According to a recent Ponemon Institute study, “Only 34% of respondents say they have full visibility into the security of...
[](https://explore.bowbridge.net/blog/best-sap-cybersecurity-courses-roundup)
### [Roundup: Best SAP Cybersecurity Courses for Each Skill Level](https://explore.bowbridge.net/blog/best-sap-cybersecurity-courses-roundup)
Nov 19, '20 by Joerg Schneider-Simon
SAP cybersecurity professionals are in high demand. Really high demand. Ridiculously high demand.
As we noted back in 2018, there is a [major shortage of cybersecurity professionals](https://explore.bowbridge.net/blog/cybersecurity-skills-shortage-the-biggest-threat-to-sap-cybersecurity). So, if you’re an aspiring SAP cybersecurity professional, the best...
[](https://explore.bowbridge.net/blog/web-facing-sap-applications-security-compliance)
### [Security and Compliance for Web-Facing SAP Applications](https://explore.bowbridge.net/blog/web-facing-sap-applications-security-compliance)
Oct 14, '20 by Joerg Schneider-Simon
Are your web-facing SAP applications vulnerable to total compromise by a remote, unauthenticated attacker?
They may be less secure than you think: As it turns out, a recently identified SAP vulnerability can be accessed via internet-facing...
[](https://explore.bowbridge.net/blog/cost-sap-cybersecurity-data-breach)
### [The Cost of an SAP Cybersecurity Data Breach in 2020](https://explore.bowbridge.net/blog/cost-sap-cybersecurity-data-breach)
Oct 7, '20 by Joerg Schneider-Simon
If you’re wondering about the cost of an SAP cybersecurity data breach, there’s a short answer and a long answer.
The short answer is simple, and comes from [SAP itself](https://blogs.sap.com/2021/07/16/sap-solutions-for-cyber-security-and-data-protection/): The average cost of SAP security breaches is $5 million. But, adds SAP, the...
[](https://explore.bowbridge.net/blog/online-learning-cybersecurity-threat)
### [Online Learning and Cybersecurity Threats: Protect Yourself](https://explore.bowbridge.net/blog/online-learning-cybersecurity-threat)
Sep 30, '20 by Joerg Schneider-Simon
Security professionals who monitor cybersecurity threats have noticed an irony when it comes to the coronavirus.
In areas with high infection rates, school districts, colleges and universities are—quite sensibly—requiring students to stay away from...
[](https://explore.bowbridge.net/blog/penetration-testing-sap-applications)
### [Penetration Testing SAP Applications: Your Questions Answered](https://explore.bowbridge.net/blog/penetration-testing-sap-applications)
Sep 2, '20 by Joerg Schneider-Simon
When is the last time you invited a stranger to attack your network and penetrate your SAP applications?
This is not a trick question.
If you care about the security of your SAP applications, you should care about penetration testing. Penetration...
[](https://explore.bowbridge.net/blog/sap-cyberattacks-how-prepared)
### [SAP Cyberattacks: How Prepared Are You?](https://explore.bowbridge.net/blog/sap-cyberattacks-how-prepared)
Aug 19, '20 by Joerg Schneider-Simon
Why do so many organizations use SAP software? Because it gives them powerful access to their data and mission-critical processes.
Unfortunately, that’s also why SAP is such a choice target for cyberattack.
If your organization uses SAP software for...
[](https://explore.bowbridge.net/blog/cybersecurity-challenges-facing-it-leaders)
### [Six Cybersecurity Challenges Facing IT Leaders](https://explore.bowbridge.net/blog/cybersecurity-challenges-facing-it-leaders)
Aug 13, '20 by Joerg Schneider-Simon
In 2013, cybersecurity challenges ranked in seventh place among the most important issues facing IT management.
Today, cybersecurity ranks as the [first or second most important challenge](https://www.csoonline.com/article/3519913/cybersecurity-in-2020-from-secure-code-to-defense-in-depth.html) facing IT leaders.
It’s no wonder. High-profile data breaches...
[](https://explore.bowbridge.net/blog/government-sap-cybersecurity-2020)
### [2020 Threat Profile: Government and SAP Cybersecurity](https://explore.bowbridge.net/blog/government-sap-cybersecurity-2020)
May 20, '20 by Joerg Schneider-Simon
In June 2019, Bitcoin hackers penetrated the computer systems of the city government of [Riviera Beach, Florida](https://en.wikipedia.org/wiki/List_of_security_hacking_incidents#cite_note-122), installing ransomware that cost the city roughly $600,000 to remediate by paying a ransom. In that same year, the government offices of...
[](https://explore.bowbridge.net/blog/prevent-cross-site-scripting-attack-sap-applications)
### [How to Prevent Cross-Site Scripting Attacks on Your SAP Applications](https://explore.bowbridge.net/blog/prevent-cross-site-scripting-attack-sap-applications)
May 13, '20 by Joerg Schneider-Simon
If your web-based SAP application gets attacked today, the attack vector will likely be a cross-site scripting (XSS) attack.
Cross-site scripting attacks remain the [most common form of web attack](https://www.darkreading.com/analytics/report-cross-site-scripting-still-number-one-web-attack/d/d-id/1331944) against SAP applications, and the pace of attacks is...
[](https://explore.bowbridge.net/blog/remote-work-sap-cybersecurity-threat)
### [Remote Work: Is it Threatening Your SAP Cybersecurity?](https://explore.bowbridge.net/blog/remote-work-sap-cybersecurity-threat)
May 6, '20 by Joerg Schneider-Simon
Infected. Unprepared. Unprecedented.
These are the words that experts are using when discussing the coronavirus—but while medical experts use those terms in reference to human health, cybersecurity experts are having similar discussions about SAP...
[](https://explore.bowbridge.net/blog/sap-in-cloud-checklist)
### [Ready for SAP in the Cloud? Find Out \[Checklist\]](https://explore.bowbridge.net/blog/sap-in-cloud-checklist)
Apr 22, '20 by Joerg Schneider-Simon
Migrating your SAP systems to the cloud offers many operational and financial benefits. SAP migration to the cloud reduces your hardware costs, makes backup and disaster recovery more robust, and improves availability, reliability and scalability.
A...
[](https://explore.bowbridge.net/blog/ensuring-sap-file-format-integrity-mime-type-checks)
### [Use MIME-Type Checks to Ensure SAP File Format Integrity](https://explore.bowbridge.net/blog/ensuring-sap-file-format-integrity-mime-type-checks)
Apr 14, '20 by Joerg Schneider-Simon
*Editor's Note: We recently updated this previously published post with new insights. Enjoy!*
Want to [protect your SAP applications](https://www.bowbridge.net/en/guide-to-content-based-attacks-sap-applications/) against file-based attacks? Use MIME-Type checks.
One way that cyber attackers attempt to compromise SAP systems is by...
[](https://explore.bowbridge.net/blog/critical-sap-vulnerabilities-2020)
### [Critical SAP Vulnerabilities in 2020](https://explore.bowbridge.net/blog/critical-sap-vulnerabilities-2020)
Mar 3, '20 by Joerg Schneider-Simon
While SAP helps businesses operate more efficiently through streamlined business processes, its complexity means it presents a significant attack surface for hackers.
Since businesses use SAP for managing their most sensitive business processes, it...
[](https://explore.bowbridge.net/blog/sap-security-notes-update-january-2020)
### [SAP Security Notes Update January 2020: What You've Missed](https://explore.bowbridge.net/blog/sap-security-notes-update-january-2020)
Feb 12, '20 by Joerg Schneider-Simon
We’ve said it [before](https://explore.bowbridge.net/blog/sap-security-notes-whats-new): Keeping SAP security patches up to date is one of the most effective ways to prevent a successful cyberattack.
To make that task a bit easier, here is our quick summary of the Security Notes Update that SAP issued in January...
[](https://explore.bowbridge.net/blog/sap-cybersecurity-automation-right-for-your-enterprise)
### [Is SAP Cybersecurity Automation Right for Your Enterprise?](https://explore.bowbridge.net/blog/sap-cybersecurity-automation-right-for-your-enterprise)
Jan 30, '20 by Joerg Schneider-Simon
Cyberattacks are now heavily automated. Is the solution automated cybersecurity?
Hackers are launching fearsome new attacks against SAP systems across multiple industries using self-directed software tools and processes. Malicious actors are using...
[](https://explore.bowbridge.net/blog/beyond-phishing-smishing-vishing-cybersecurity-threats)
### [Beyond Phishing: Smishing, Vishing and Other Emerging Cybersecurity Threats](https://explore.bowbridge.net/blog/beyond-phishing-smishing-vishing-cybersecurity-threats)
Jan 21, '20 by Joerg Schneider-Simon
Cybersecurity Ventures predicts that cybercrime will cost the world [$6 trillion annually by 2021](https://cybersecurityventures.com/cybercrime-damages-6-trillion-by-2021/), making cybercrime more profitable than the global trade in all major illegal drugs *combined*.
Cybercriminals are turning to a multitude of new tactics...
[](https://explore.bowbridge.net/blog/top-file-based-threats-to-sap-applications)
### [Top File-Based Threats to SAP Applications](https://explore.bowbridge.net/blog/top-file-based-threats-to-sap-applications)
Jan 2, '20 by Joerg Schneider-Simon
A whopping 92% of malware is still delivered by email, according to Verizon’s [Breach Investigations](https://www.verizonenterprise.com/resources/reports/rp_DBIR_2018_Report_en_xg.pdf) report.
The majority of these threats arrive in the form of phishing links. But a sizeable percentage still arrive as email attachments. And we’re...
[](https://explore.bowbridge.net/blog/five-lessons-from-the-2019-onapsis-idc-survey)
### [Five Lessons from the 2019 Onapsis/IDC Survey](https://explore.bowbridge.net/blog/five-lessons-from-the-2019-onapsis-idc-survey)
Dec 9, '19 by Joerg Schneider-Simon
More than two-thirds of ERP systems were breached in the last 24 months according to a 2019 [survey](https://www.onapsis.com/IDC-survey-ERP-security-assessment) conducted by IDC for Onapsis.
[*ERP Security: The Reality of Business Application Protection*](https://www.onapsis.com/IDC-survey-ERP-security-assessment), the IDC survey of 430 IT decision makers, reveals that 64%...
[](https://explore.bowbridge.net/blog/your-sap-system-has-been-hacked-now-what)
### [Your SAP System Has Been Hacked. Now What?](https://explore.bowbridge.net/blog/your-sap-system-has-been-hacked-now-what)
Nov 7, '19 by Joerg Schneider-Simon
One day back in 2013, a group of hackers—likely backed by China—booted up their computers and began [breaking into USIS](https://www.csoonline.com/article/3318238/the-opm-hack-explained-bad-security-practices-meet-chinas-captain-america.html), a US federal contractor that conducted background checks for the US Department of Homeland Security. The hackers gained access by...
[](https://explore.bowbridge.net/blog/secure-your-system-when-migrating-sap-to-the-cloud)
### [Secure Your System When Migrating SAP to the Cloud](https://explore.bowbridge.net/blog/secure-your-system-when-migrating-sap-to-the-cloud)
Sep 30, '19 by Joerg Schneider-Simon
In April 2019, hackers uploaded a series of exploits targeting SAP business applications to a public forum.
These exploits, referred to as 10KBLAZE, leverage insecure default configurations that SAP has known about for a while and had corrected...
[](https://explore.bowbridge.net/blog/cisos-and-sap-cybersecurity-is-your-anti-virus-enough)
### [CISOs and SAP Cybersecurity: Is Your Anti-Virus Enough?](https://explore.bowbridge.net/blog/cisos-and-sap-cybersecurity-is-your-anti-virus-enough)
Sep 24, '19 by Joerg Schneider-Simon
Cybersecurity talent shortages. Employees and vendors who think security policies are just a suggestion. A rapidly growing, AI-driven tsunami of threats.
The role of a Chief Information Security Officer is not exactly what we’d call relaxing.
To...
[](https://explore.bowbridge.net/blog/9-ways-to-build-a-cybersecurity-culture)
### [9 Ways to Build a Cybersecurity Culture](https://explore.bowbridge.net/blog/9-ways-to-build-a-cybersecurity-culture)
Sep 19, '19 by Joerg Schneider-Simon
A whopping 90% of successful cyberattacks are caused by human error. Why? Because most organizations don’t have a healthy cybersecurity culture.
According to ISACA and the CMMI Institute in their [2018 Cybersecurity Culture Report](http://www.isaca.org/info/cybersecurity-culture-report/index.html)*,* only 5% of...
[](https://explore.bowbridge.net/blog/sap-cybersecurity-lessons-from-14-years-in-business)
### [SAP Cybersecurity Lessons Learned from bowbridge Co-Founder and CTO](https://explore.bowbridge.net/blog/sap-cybersecurity-lessons-from-14-years-in-business)
Aug 22, '19 by Krista Elliott
In 2005, YouTube was unleashed upon the world, Hurricane Katrina battered the Louisiana coastline, and Tom Cruise [jumped on Oprah’s couch](https://www.eonline.com/news/544394/remember-when-tom-cruise-jumped-on-oprah-s-couch-because-he-was-in-love-with-katie-holmes).
During that year, bowbridge Software GmbH was founded.
Since then, the cybersecurity battle has become a world...
[](https://explore.bowbridge.net/blog/cybersecurity-threat-profile-energy-oil-and-gas)
### [Cybersecurity Threat Profile: Energy, Oil & Gas](https://explore.bowbridge.net/blog/cybersecurity-threat-profile-energy-oil-and-gas)
Aug 12, '19 by Joerg Schneider-Simon
A whopping 96 percent of energy, oil, and gas industry professionals fear operational shutdowns and threats to their employees’ safety due to a digital attack, according to a [2018 Tripwire study](https://www.tripwire.com/state-of-security/ics-security/70-percent-energy-security-pros-fear-digital-attacks-produce-catastrophic-failure/).
Their fear is well-justified: 40 percent of...
[](https://explore.bowbridge.net/blog/bridging-the-gap-between-sap-security-and-sap-cybersecurity)
### [Are You Bridging the Gap Between SAP Security and SAP Cybersecurity?](https://explore.bowbridge.net/blog/bridging-the-gap-between-sap-security-and-sap-cybersecurity)
Jul 31, '19 by Joerg Schneider-Simon
It’s an understatement to say that your SAP system contains and controls your most mission-critical data and processes. Keeping your applications safe and secure, therefore, isn’t a one-person job: It requires a team of professionals, all performing...
[](https://explore.bowbridge.net/blog/5-ways-small-teams-can-protect-sap-systems)
### [5 Ways Small Teams Can Protect SAP Systems](https://explore.bowbridge.net/blog/5-ways-small-teams-can-protect-sap-systems)
Jul 12, '19 by Joerg Schneider-Simon
SAP is your organization’s cardiovascular system. It allows mission-critical data to flow smoothly from application to application and from team to team, ensuring every limb of the company can function the way it needs to.
Protecting your SAP...
[](https://explore.bowbridge.net/blog/ms-office-macros-a-new-threat-to-sap-cybersecurity)
### [MS Office Macros: A New Threat to SAP Cybersecurity](https://explore.bowbridge.net/blog/ms-office-macros-a-new-threat-to-sap-cybersecurity)
Jun 18, '19 by Joerg Schneider-Simon
In the cybersecurity world, one thing is certain: As soon as security testing experts find a new way to penetrate defenses, you can guarantee that cybercriminals are making the same discovery.
A prime example of this phenomenon came to light at the...
[](https://explore.bowbridge.net/blog/cybersecurity-stats-and-what-they-mean-for-sap)
### [5 Cybersecurity Stats and What They Mean for SAP](https://explore.bowbridge.net/blog/cybersecurity-stats-and-what-they-mean-for-sap)
May 21, '19 by Joerg Schneider-Simon
The news these days on cybersecurity is often grim. High-profile data breaches affect millions of consumers, data sabotage threatens vital infrastructure and systems, and massive phishing schemes wreak havoc on personal privacy. Cybersecurity...
[](https://explore.bowbridge.net/blog/can-employers-be-held-liable-for-sap-cybersecurity-breaches)
### [Can Employers Be Held Liable for SAP Cybersecurity Breaches?](https://explore.bowbridge.net/blog/can-employers-be-held-liable-for-sap-cybersecurity-breaches)
May 2, '19 by Joerg Schneider-Simon
Whether they’re signing up for a gym membership or downloading a new app, it seems like people are perpetually being asked for their personal information. And while consumers may have varying levels of trust in the organizations making the requests,...
[](https://explore.bowbridge.net/blog/marriott-data-hack-sap-cybersecurity-lessons)
### [The Marriott Data Hack: What SAP Cybersecurity Lessons Can We Learn?](https://explore.bowbridge.net/blog/marriott-data-hack-sap-cybersecurity-lessons)
Apr 11, '19 by Joerg Schneider-Simon
As 2018 drew to a close, another high-profile data hack hit the news: This time, the victim was hospitality giant Marriott. The breach was initially thought to have affected up to 500 million people, with their personal data — including [millions of...](https://www.vox.com/the-goods/2018/11/30/18119770/marriott-hotels-starwood-hack)
[](https://explore.bowbridge.net/blog/sap-and-data-breaches-what-to-do)
### [SAP and Data Breaches: What to Know, What to Do](https://explore.bowbridge.net/blog/sap-and-data-breaches-what-to-do)
Mar 26, '19 by Joerg Schneider-Simon
Information security professionals and CIOs are feeling the squeeze. Not only is the number of data breaches increasing all the time, but the number of available cybersecurity professionals is decreasing.
As a result, IS teams face a constant...
[](https://explore.bowbridge.net/blog/fiori-cybersecurity-for-sap-managers)
### [Cybersecurity for SAP Managers: FIORI Cybersecurity](https://explore.bowbridge.net/blog/fiori-cybersecurity-for-sap-managers)
Mar 12, '19 by Joerg Schneider-Simon
Managers tasked with SAP cybersecurity used to have a (slightly) easier time with threat management. The primary reason? Every SAP end user was contained within the company’s four walls. All endpoints were known, and the SAP system was a closed loop.
[](https://explore.bowbridge.net/blog/sap-security-notes-whats-new)
### [SAP Security Notes: What’s New, What’s at Stake](https://explore.bowbridge.net/blog/sap-security-notes-whats-new)
Feb 25, '19 by Joerg Schneider-Simon
Keeping your SAP system safe from cyberattack takes time, effort, and manpower. Busy cybersecurity teams are no strangers to effort, but time and manpower? Those are in short supply nowadays.
Shorthanded and short-on-time teams are faced with...
[](https://explore.bowbridge.net/blog/ai-biometric-security-and-the-threat-to-fiori)
### [AI, Biometric Security and the Threat to FIORI](https://explore.bowbridge.net/blog/ai-biometric-security-and-the-threat-to-fiori)
Jan 31, '19 by Joerg Schneider-Simon
Another year, another listing of the top 25 [most popular](https://gizmodo.com/the-25-most-popular-passwords-of-2018-will-make-you-fee-1831052705) passwords, with the top two spots being taken, yet again, by “123456” and “password.”
People are notoriously terrible at choosing secure passwords. That is why when biometric-based credentials...
[](https://explore.bowbridge.net/blog/bowbridge-sap-cybersecurity-trends-for-2019)
### [bowbridge’s 9 SAP Cybersecurity Trends for 2019](https://explore.bowbridge.net/blog/bowbridge-sap-cybersecurity-trends-for-2019)
Jan 17, '19 by Joerg Schneider-Simon
During this time of year, it’s natural to look to the year ahead and predict what it will bring. Cybersecurity experts have been doing this for decades, analyzing trends and developments to estimate a forthcoming landscape and alerting organizations...
[](https://explore.bowbridge.net/blog/unstructured-data-and-sap)
### [Unstructured Data and SAP](https://explore.bowbridge.net/blog/unstructured-data-and-sap)
Dec 17, '18 by Joerg Schneider-Simon
Quick: When you think of data breaches, what comes to mind?
If you’re like most people, you think of cyberattacks that target structured, secured databases. These cyberattackers steal reams of sensitive data, often selling the data to the highest...
[](https://explore.bowbridge.net/blog/gdpr-cybersecurity-lessons-learned)
### [GDPR: Cybersecurity Lessons Learned](https://explore.bowbridge.net/blog/gdpr-cybersecurity-lessons-learned)
Nov 26, '18 by Joerg Schneider-Simon
It may be hard to believe, but six months have passed since the GDPR deadline. During that time, companies (including bowbridge) contacted their lists, seeking active consent to continue sending them information. GDPR opt-in emails were so...
[](https://explore.bowbridge.net/blog/sap-cybersecurity-and-your-staff)
### [SAP Cybersecurity and Your Staff: The Human Factor](https://explore.bowbridge.net/blog/sap-cybersecurity-and-your-staff)
Nov 14, '18 by Joerg Schneider-Simon
“I have read and understood the company’s IT policy.”
Employees check the box, but are they adhering to the policy? The evidence suggests otherwise: In [a survey](https://www.forbes.com/sites/sungardas/2015/03/05/the-1-thing-employees-do-that-compromises-their-own-companys-cyber-security/#201d105a1d21) of IT professionals, employees leaving laptops and phones unsecured in vulnerable places...
[](https://explore.bowbridge.net/blog/our-takeaways-from-the-cybersecurity-insiders-report)
### [Application Security: Our Takeaways From the Cybersecurity Insiders Report](https://explore.bowbridge.net/blog/our-takeaways-from-the-cybersecurity-insiders-report)
Nov 1, '18 by Joerg Schneider-Simon
Our friends at Cybersecurity Insiders recently released their [2018 Application Security Report](https://www.cybersecurity-insiders.com/portfolio/application-security-report/), which contains some eyebrow-raising results. For example, only 62 percent of respondents feel (at best) moderately confident in their organization’s...
[](https://explore.bowbridge.net/blog/biometric-security-and-sap)
### [Biometric Security and SAP: Pluses, Pitfalls, and Best Practices](https://explore.bowbridge.net/blog/biometric-security-and-sap)
Oct 26, '18 by Joerg Schneider-Simon
Passwords are out, prints are in.
Biometric security features have been added to door locks, banking applications, smart phones and beyond. Instead of memorizing pin numbers, authenticating our identity is now as simple as looking into a camera or...
[](https://explore.bowbridge.net/blog/cybersecurity-skills-shortage-the-biggest-threat-to-sap-cybersecurity)
### [The Cybersecurity Skills Shortage: The Biggest Threat to SAP Cybersecurity](https://explore.bowbridge.net/blog/cybersecurity-skills-shortage-the-biggest-threat-to-sap-cybersecurity)
Sep 27, '18 by Joerg Schneider-Simon
The enemy is coming … and the white hats are outnumbered.
It’s [predicted](https://image-store.slidesharecdn.com/be4eaf1a-eea6-4b97-b36e-b62dfc8dcbae-original.jpeg) there will be a worldwide shortage of cybersecurity professionals—2 million of them, to be precise—by 2019. Should someone from your own cybersecurity team leave your company...
[](https://explore.bowbridge.net/blog/the-internet-of-things-whats-the-risk-to-sap-systems)
### [The Internet of Things: What’s the Risk to SAP Systems?](https://explore.bowbridge.net/blog/the-internet-of-things-whats-the-risk-to-sap-systems)
Aug 21, '18 by Joerg Schneider-Simon
The internet has come a long way since the days of screeching dial-up modems. We’ve become used to quick and reliable internet access from our computers and smartphones.
The new frontier? Connected appliances, vehicles, equipment, and more. The...
[](https://explore.bowbridge.net/blog/top-5-takeaways-from-the-onapsis-digital-shadows-report)
### [ERP Systems at Risk: Top 5 Takeaways from the Onapsis/Digital Shadows Report](https://explore.bowbridge.net/blog/top-5-takeaways-from-the-onapsis-digital-shadows-report)
Aug 9, '18 by Joerg Schneider-Simon
On July 25th, the world received some startling news: The US Department of Homeland Security had issued an [alert](https://www.us-cert.gov/ncas/current-activity/2018/07/25/Malicious-Cyber-Activity-Targeting-ERP-Applications) about ERP systems (specifically, SAP and Oracle) being targeted by nation-state attackers, cybercriminals, and hacktivist groups.
This...
[](https://explore.bowbridge.net/blog/sap-cybersecurity-due-diligence-for-mergers-and-acquisitions)
### [6 Steps to SAP Cybersecurity Due Diligence for Mergers and Acquisitions](https://explore.bowbridge.net/blog/sap-cybersecurity-due-diligence-for-mergers-and-acquisitions)
Jul 19, '18 by Joerg Schneider-Simon
Whether a company is looking at customers, suppliers, production, or finances, it’s looking at data. And SAP is one of the most widely used platforms for companies to manage their data and perform the multiple tasks that keep a business running.
So,...
[](https://explore.bowbridge.net/blog/supply-chain-cybersecurity-and-sap)
### [Supply Chain Cybersecurity and SAP](https://explore.bowbridge.net/blog/supply-chain-cybersecurity-and-sap)
Jul 10, '18 by Joerg Schneider-Simon
Supply chains keep an organization operating at full pace … or they can stop a company in its tracks. Without a well-run supply chain, a company can’t produce their product, maintain their equipment, or even manage day-to-day operations.
Today’s...
[](https://explore.bowbridge.net/blog/why-sap-security-notes-still-leave-you-vulnerable)
### [SAP Security Notes: Why They Still Leave You Vulnerable](https://explore.bowbridge.net/blog/why-sap-security-notes-still-leave-you-vulnerable)
Jun 28, '18 by Joerg Schneider-Simon
It’s no surprise that SAP is one of the most widely used business platforms in the world, considering how wide-ranging and versatile it is.
And as a responsible company, SAP works hard to push out patches, called “security notes” in SAP-speak on a...
[](https://explore.bowbridge.net/blog/sap-fiori-and-virus-scanning)
### [SAP FIORI and Virus Scanning: What You Need to Know](https://explore.bowbridge.net/blog/sap-fiori-and-virus-scanning)
Jun 21, '18 by Joerg Schneider-Simon
Our world is getting increasingly mobile. Our socializing, our banking, our dating, our bitter family arguments about politics … more and more, it’s all taking place on our mobile devices.
Business is no different. Increasingly, company employees...
[](https://explore.bowbridge.net/blog/ransomware-sap-e-recruiting-and-why-hr-is-under-cyberattack)
### [Ransomware, SAP E-Recruiting, and Why HR is Under Cyberattack](https://explore.bowbridge.net/blog/ransomware-sap-e-recruiting-and-why-hr-is-under-cyberattack)
Jun 7, '18 by Joerg Schneider-Simon
Cybercriminals are always looking for ways to get through a company’s cybersecurity defenses. And in 2017, Human Resources departments became a prominent victim.
A Petya ransomware variant named “GoldenEye” [targeted HR departments](https://www.ibtimes.co.uk/petya-ransomware-variant-goldeneye-targets-hr-departments-by-sending-fake-job-applications-1599659), by way of...
[](https://explore.bowbridge.net/blog/sap-security-vulnerability-profile-government)
### [SAP Security Vulnerability Profile: Government](https://explore.bowbridge.net/blog/sap-security-vulnerability-profile-government)
May 17, '18 by Joerg Schneider-Simon
Processes and data: These are two things the average government agency has in abundance. And after decades of distributing massive procedural binders and struggling with file and document management, many government departments have found themselves...
[](https://explore.bowbridge.net/blog/data-integrity-and-the-subtle-cyber-sabotage-you-might-miss)
### [Data Integrity and the Cyber Sabotage You Might Miss](https://explore.bowbridge.net/blog/data-integrity-and-the-subtle-cyber-sabotage-you-might-miss)
May 2, '18 by Joerg Schneider-Simon
Cyberattacks are changing. Previously, a common goal among cyberattackers was to pull off a large-scale attack that would either result in a massive theft or a complete shutdown of the target’s systems. Big and splashy, these attacks would make news...
[](https://explore.bowbridge.net/blog/how-city-of-essen-protected-their-sap-system)
### [How City of Essen Protected Their SAP System](https://explore.bowbridge.net/blog/how-city-of-essen-protected-their-sap-system)
Apr 17, '18 by Joerg Schneider-Simon
Essen Systemhaus (ESH) is the central IT and telephone service provider for the City of Essen in the western region of Germany. Essen, the ninth-largest city in Germany houses a population of almost 600,000, making Essen Systemhaus’s work of...
[](https://explore.bowbridge.net/blog/how-redirections-threaten-sap-cybersecurity)
### [Redirections: How They Threaten SAP Cybersecurity](https://explore.bowbridge.net/blog/how-redirections-threaten-sap-cybersecurity)
Apr 4, '18 by Joerg Schneider-Simon
Anybody who has ever visited a web page has likely been redirected at some point, such as when older links get redirected to updated ones or visiting a “My Account” page redirects to the login page. Even on apps, this is common: When logging into a...
[](https://explore.bowbridge.net/blog/protecting-supplier-communication-with-bowbridge)
### [Protecting Supplier Communication With bowbridge Anti-Virus for SAP Solutions](https://explore.bowbridge.net/blog/protecting-supplier-communication-with-bowbridge)
Mar 22, '18 by Joerg Schneider-Simon
Phoenix Contact, headquartered in Blomberg, Germany, is the world leader in electrical connection technology. Their passion drives them to deliver the most innovative, highest quality connection technology that helps clients in industries such as...
[](https://explore.bowbridge.net/blog/the-c-suite-sap-cybersecuritys-big-barrier)
### [The C-Suite: SAP Cybersecurity’s Big Barrier?](https://explore.bowbridge.net/blog/the-c-suite-sap-cybersecuritys-big-barrier)
Feb 27, '18 by Joerg Schneider-Simon
The prevalence of cybersecurity breaches in the news has attracted a lot of notice, even from people who aren’t normally tasked with keeping their finger on the pulse of the cybersecurity world. Indeed, high-profile and costly cyberattacks have...
[](https://explore.bowbridge.net/blog/cybersecurity-tech-trends-that-could-impact-sap)
### [4 Tech Trends That Could Impact Your SAP Cybersecurity in 2018](https://explore.bowbridge.net/blog/cybersecurity-tech-trends-that-could-impact-sap)
Feb 9, '18 by Joerg Schneider-Simon
2017 opened everybody’s eyes to the rising threat of cyberattacks. Between the WannaCry ransomware attack and the massive Equifax data breach, companies around the globe realized that when it comes to cybersecurity, the status quo is no longer an...
[](https://explore.bowbridge.net/blog/2017-sap-security-notes)
### [2017 in Review: SAP Security Notes](https://explore.bowbridge.net/blog/2017-sap-security-notes)
Jan 25, '18 by Joerg Schneider-Simon
ERP security has long been focused on operational issues, such as permissions and segregation of duties. That may no longer be enough to keep organizations safe.
2017 was filled with headlines about major data breaches and cyberattacks, and it’s...
[](https://explore.bowbridge.net/blog/how-pdf-files-can-endanger-your-sap-cybersecurity)
### [How PDF Files Can Endanger Your SAP Cybersecurity](https://explore.bowbridge.net/blog/how-pdf-files-can-endanger-your-sap-cybersecurity)
Dec 20, '17 by Joerg Schneider-Simon
Companies around the globe choose SAP to streamline and standardize their everyday activities like workflows, purchasing, and staffing, saving an enormous amount of time and effort.
However, SAP is also a preferred target for cyberattacks.
And one...
[](https://explore.bowbridge.net/blog/microsoft-office-vulnerabilities-put-sap-at-risk)
### [Macros and Malware: Why Microsoft Office’s Vulnerabilities Put SAP at Risk](https://explore.bowbridge.net/blog/microsoft-office-vulnerabilities-put-sap-at-risk)
Dec 12, '17 by Joerg Schneider-Simon
For decades, businesses and individuals have turned to Microsoft Office to create documents, spreadsheets, databases, and more. And as new cybersecurity threats have arisen, Microsoft has issued updates and patches to address those threats.
[](https://explore.bowbridge.net/blog/how-much-could-sap-cybersecurity-breaches-cost-your-company)
### [How Much Could SAP Cybersecurity Breaches Cost Your Company?](https://explore.bowbridge.net/blog/how-much-could-sap-cybersecurity-breaches-cost-your-company)
Nov 13, '17 by Joerg Schneider-Simon
We’ve all encountered instances of a malware attack on a friend’s or relative’s home computer — or even on our own. Personal cybersecurity breaches can be inconvenient and distressing, especially if they result in frustrating identity theft or...
[](https://explore.bowbridge.net/blog/cybersecurity-fail-how-not-to-be-the-next-equifax)
### [Cybersecurity Fail: How Not to Be the Next Equifax](https://explore.bowbridge.net/blog/cybersecurity-fail-how-not-to-be-the-next-equifax)
Oct 30, '17 by Joerg Schneider-Simon
#### *October is cybersecurity awareness month. We look at Equifax’s cybersecurity nightmare and how your SAP system may put you at similar risk.*
It has been only about a month since Equifax [went public](https://www.forbes.com/sites/leemathews/2017/09/07/equifax-data-breach-impacts-143-million-americans/#876a13356f89) with news of a security breach that affected over...
[](https://explore.bowbridge.net/blog/bowbridge-to-present-at-sapinsider-events)
### [Announcement: bowbridge to Present at SAPinsider Events](https://explore.bowbridge.net/blog/bowbridge-to-present-at-sapinsider-events)
Oct 19, '17 by Joerg Schneider-Simon
Staying on top of SAP cybersecurity requires unceasing vigilance. This year’s SAPinsider Events offer an excellent opportunity to learn the latest news on the industry’s biggest threats and smartest best practices.
[](https://explore.bowbridge.net/blog/where-cybercrime-against-sap-is-bought-and-sold)
### [Where Cybercrime Against SAP is Bought and Sold](https://explore.bowbridge.net/blog/where-cybercrime-against-sap-is-bought-and-sold)
Oct 17, '17 by Joerg Schneider-Simon
*October is Cybersecurity Awareness Month. We take a look at the explosive growth of cybercrime as a service and how it puts your SAP system at risk.*
We live in an age where we can outsource just about anything. From virtual assistants to lawn care...
[](https://explore.bowbridge.net/blog/why-active-content-can-threaten-sap-with-xss-attack)
### [A Bad Cup of Java: Why Active Content Can Threaten SAP With XSS Attack](https://explore.bowbridge.net/blog/why-active-content-can-threaten-sap-with-xss-attack)
Oct 11, '17 by Joerg Schneider-Simon
Technology security professionals see a staggering variety of cyberattacks and are constantly on guard for new threats on the horizon. But even the most weathered IT pro feels a rise in blood pressure when they hear this phrase: cross-site scripting.
[](https://explore.bowbridge.net/blog/sap-addresses-e-recruiting-vulnerability)
### [SAP Security News: SAP Addresses E-Recruiting Vulnerability](https://explore.bowbridge.net/blog/sap-addresses-e-recruiting-vulnerability)
Sep 21, '17 by Joerg Schneider-Simon
SAP recently issued a security note addressing a vulnerability in the SAP E-Recruiting application:
*“When a user registers to the e-recruiting application, he/she receives a link by email to confirm access to the provided email address. However,...*
[](https://explore.bowbridge.net/blog/new-sap-security-notes-on-crm-and-srm-applications)
### [Alert: New SAP Security Notes on CRM and SRM Applications](https://explore.bowbridge.net/blog/new-sap-security-notes-on-crm-and-srm-applications)
Aug 29, '17 by Joerg Schneider-Simon
Many businesses rely on SAP CRM (Customer Relationship Management) and SRM (Supplier Relationship Management) applications to manage workflows, standardize processes and centralize data. But, while these applications are eminently useful, they might...
[](https://explore.bowbridge.net/blog/cybersecurity-sap-e-recruiting-are-you-protected)
### [Cybersecurity and SAP E-Recruiting: Are You Protected? \[Infographic\]](https://explore.bowbridge.net/blog/cybersecurity-sap-e-recruiting-are-you-protected)
Jul 19, '17 by Joerg Schneider-Simon
Considering how SAP systems are often interlinked with critical financial data, human resources records, and even vital infrastructure, a cyberattack could be devastating.
[](https://explore.bowbridge.net/blog/malicious-file-uploads)
### [Malicious File Uploads: The Wolves in Sheeps’ Clothing](https://explore.bowbridge.net/blog/malicious-file-uploads)
Jul 12, '17 by Joerg Schneider-Simon
Sharing files is a common part of any company’s day. Documents are shared between departments, invoices are sent from suppliers, and resumes are sent from candidates. Departments such as Accounts Receivable, HR, Procurement, and more all handle...
[](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-directory-traversal-attacks)
### [Cybersecurity for SAP Managers: Directory Traversal Attacks](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-directory-traversal-attacks)
May 9, '17 by Joerg Schneider-Simon
Directory traversals are [one of the most common SAP cybersecurity attacks](https://www.infosecurity-magazine.com/news/sap-netweaver-flaws/), accounting for 20% of the security notes published by SAP. In these attacks, cybercriminals gain unwanted access to sensitive files or system directories, potentially...
[](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-injection-attacks)
### [Cybersecurity for SAP Managers: Injection Attacks](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-injection-attacks)
Apr 13, '17 by Joerg Schneider-Simon
External cybersecurity threats pose a very real risk to SAP systems of all sizes. One of the most common vehicles for hackers is the injection attack – both SQL injections and OS command injections. Preventing these attacks requires proactive...
[](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-cross-site-scripting-xss)
### [Cybersecurity for SAP Managers: Cross-Site Scripting (XSS)](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-cross-site-scripting-xss)
Mar 15, '17 by Joerg Schneider-Simon
If you’re a manager tasked with SAP security, it’s likely that you spend a significant amount of time focused on internal and process-based security threats. However, you may be unaware of the external cybersecurity threats that can put your...
[](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-dos-attacks)
### [Cybersecurity for SAP Managers: DoS Attacks](https://explore.bowbridge.net/blog/cybersecurity-for-sap-managers-dos-attacks)
Feb 21, '17 by Joerg Schneider-Simon
In years past, corporate IT departments exerted complete control over who used their SAP applications. Any endpoint that accessed SAP was known and secured. As a result, managers tasked with SAP security were concerned about *internal* business- and...
[](https://explore.bowbridge.net/blog/macro-malware-and-secure-documents-what-you-need-to-know)
### [Macro Malware and “Secure” Documents: What You Need to Know](https://explore.bowbridge.net/blog/macro-malware-and-secure-documents-what-you-need-to-know)
Jan 25, '17 by Joerg Schneider-Simon
Many users safely employ macros to streamline repetitive processes. Unfortunately, many cybercriminals also use macros to hide malicious code in an attempt to steal information or money.
After several quiet years, macro malware is experiencing a...
[](https://explore.bowbridge.net/blog/can-your-sap-application-spread-malware)
### [Can Your SAP Application Spread Malware Like Facebook Did?](https://explore.bowbridge.net/blog/can-your-sap-application-spread-malware)
Jan 3, '17 by Joerg Schneider-Simon
In late November 2016, the low-tech ransomware program “Locky” began spreading via scalable vector graphics (SVG) images sent through Facebook Messenger.
### Don't miss the latest SAP security news
#### bowbridge
- [Solutions](https://www.bowbridge.net/en/sap-cybersecurity-solutions/)
- [Resources](https://www.bowbridge.net/en/sap-cybersecurity-resources/)
- [About bowbridge](https://www.bowbridge.net/en/about-bowbridge-software/)
- [Support](https://www.bowbridge.net/en/sap-cybersecurity-support/)
- [Contact](https://www.bowbridge.net/en/contact-bowbridge/)
- [Customer Login](https://www.bowbridge.net/customer-portal/)
#### Contact
**GERMANY**
Tel: +49 (0) 6227 - 69899 - 50
Fax: +49 (0) 6227 - 69899-59
Email: [info@bowbridge.net](mailto:info@bowbridge.net)
**USA**
Tel: +1 650 - 617 - 3408
Fax: +1 650 - 617 - 3201
Email: [us-sales@bowbridge.net](mailto:us-sales@bowbridge.net)
#### Connect With Us
- [English](https://www.bowbridge.net/en/)
- [Deutsch](https://www.bowbridge.net/)
Copyright © 2023 bowbridge Software GmbH. All rights reserved. [Privacy Policy](https://www.bowbridge.net/en/privacy-policy)
