Latest Threats and Vulnerabilities to Mission-Critical SAP Applications

Explore the latest threats and vulnerabilities to mission-critical SAP applications in this 51-minute conference talk from BSidesLV 2021. Delve into the world of Enterprise Resource Planning (ERP) systems, understanding their critical role in business operations and the increasing shift to cloud-based solutions. Examine the findings from SAP Research Labs and Common Ground's content creation, uncovering the motivations behind threat actors targeting these systems. Analyze attack statistics, time windows, and the implications of SAP's 2020 6287 vulnerability. Learn about default and critical users, the life cycle of attacks, and witness a live demonstration. Gain valuable insights on SAP vulnerability remediation, identifying attack groups, and assessing the reliability of SAP patches. Discover practical takeaways, access the comprehensive report, and participate in a Q&A session covering topics such as determining attack knowledge and estimating remediation timelines.