Technology security professionals see a staggering variety of cyberattacks and are constantly on guard for new threats on the horizon. But even the most weathered IT pro feels a rise in blood pressure when they hear this phrase: cross-site scripting.
Sep 21, '17 by Joerg Schneider-Simon
SAP recently issued a security note addressing a vulnerability in the SAP E-Recruiting application:
“When a user registers to the e-recruiting application, he/she receives a link by email to confirm access to the provided email address. However,...
Aug 29, '17 by Joerg Schneider-Simon
Many businesses rely on SAP CRM (Customer Relationship Management) and SRM (Supplier Relationship Management) applications to manage workflows, standardize processes and centralize data. But, while these applications are eminently useful, they might...
Jul 19, '17 by Joerg Schneider-Simon
Considering how SAP systems are often interlinked with critical financial data, human resources records, and even vital infrastructure, a cyberattack could be devastating.
Jul 12, '17 by Joerg Schneider-Simon
Sharing files is a common part of any company’s day. Documents are shared between departments, invoices are sent from suppliers, and resumes are sent from candidates. Departments such as Accounts Receivable, HR, Procurement, and more all handle...
May 9, '17 by Joerg Schneider-Simon
Directory traversals are one of the most common SAP cybersecurity attacks, accounting for 20% of the security notes published by SAP. In these attacks, cybercriminals gain unwanted access to sensitive files or system directories, potentially...
Apr 13, '17 by Joerg Schneider-Simon
External cybersecurity threats pose a very real risk to SAP systems of all sizes. One of the most common vehicles for hackers is the injection attack – both SQL injections and OS command injections. Preventing these attacks requires proactive...
Mar 15, '17 by Joerg Schneider-Simon
If you’re a manager tasked with SAP security, it’s likely that you spend a significant amount of time focused on internal and process-based security threats. However, you may be unaware of the external cybersecurity threats that can put your...

