[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 7 sources · 5 days · First seen · Last updated

SAP and ERP system cybersecurity vulnerabilities

Overview

Security experts have identified significant vulnerabilities within Enterprise Resource Planning (ERP) systems, specifically focusing on SAP environments. Onapsis warned that the complex architectures of these systems require dedicated security strategies and integration into existing Security Operations Center processes, particularly following the discovery of critical vulnerabilities in September.

Further analysis highlights a growing gap in DevSecOps implementation for SAP. While organizations aim to integrate security throughout the software development life cycle, SAP’s monolithic architecture makes patching difficult. It currently takes an average of 97 days to test and deploy SAP patches, a timeline that lags significantly behind the 72 hours required for cybercriminals to weaponize new vulnerabilities. Research indicates a 210 percent increase in the active exploitation of SAP vulnerabilities between 2024 and 2025.

Entities

SAP · Onapsis · Kaseya · David Baggett · Nadine Rahman

Timeline

  1. [TECHNOLOGY] 2 sources
    SAP environments face critical DevSecOps security gaps

    As the DevSecOps market grows, a critical security gap has emerged in SAP environments, where slow patching cycles leave business-critical applications vulnerable to rapid exploitation.

  2. [TECHNOLOGY] 5 sources
    ERP systems require specialized security focus, Onapsis warns

    Onapsis warns that ERP systems like SAP require specialized security due to their complexity, following recent critical vulnerabilities. Meanwhile, Kaseya reports human error as a top cybersecurity threat.

Sources

dev.to · hasselwander.co.uk · it-daily.net · neue-pressemitteilungen.de · presse-board.de · prmitteilung.de · saferworld.org.uk