Onapsis Podcast

Onapsis
  • 0.0 (0)
  • Business
  • Updated Biweekly

Welcome to our Onapsis Podcast, a podcast brought to you by Onapsis, the global leader in SAP cybersecurity. Join us as we delve into the fascinating world of safeguarding SAP systems from cyber threats and uncover the secrets to protecting your organization's most critical assets. In each episode, our expert hosts and special guests will explore a variety of captivating topics surrounding SAP cybersecurity, shedding light on the challenges, best practices, and cutting-edge solutions that help businesses maintain the integrity and resilience of their SAP landscapes. From the latest emerging threats to innovative techniques for vulnerability management and threat detection, our podcast provides invaluable insights for professionals working with SAP systems or those interested in learning more about the importance of securing the digital core. Onapsis delivers complete SAP security for the autonomous enterprise, protecting critical SAP applications from AI-powered threats while securely accelerating SAP AI and RISE adoption. As the global leader in SAP cybersecurity and compliance, the SAP-endorsed Onapsis Platform leverages the unmatched threat intelligence from Onapsis Research Labs and our Agentic AI Fabric to proactively prevent breaches, automate continuous compliance, and secure custom code for a Clean Core across RISE with SAP, S/4HANA, and hybrid landscapes. You have a business to run — Onapsis protects your core so you can transform with speed and confidence without trade-offs. Connect with Onapsis on LinkedIn, X, or visit onapsis.com.

  1. Sep 17

    Hacking & Defending SAP Live – Beyond the Perimeter: Managing the Expanded Attack Surface of SAP Cloud Migrations

    As organizations migrate from on-premise environments to the cloud, they set themselves up for speed and innovation. At the same time, this transition often creates complex interconnections where on-premise and cloud environments are linked, increasing the attack surface and exposing potential attack paths between them. A large part of the issues that could potentially be exploited by attackers rely on SAP customer’s hands and, if not properly secured, threat actors can exploit misconfigurations in services like SAP Cloud Connector, existing BTP Applications, SAP Cloud Connector, SAP BTP, SAP Destinations service and existing SAP RFC Destinations. They can take advantage of these services to move laterally across environments spanning different clouds and on-premise infrastructure. In this episode of Hacking & Defending SAP Applications – Live, we go beyond the theoretical risks to demonstrate how threat actors exploit the subtle security gaps that may be inadvertently created during cloud adoption. In this episode we analyze the “Cloud vs. On-Prem” transition from an attacker’s perspective, revealing how misconfigurations, insecure integrations, and visibility gaps can turn a strategic modernization effort into a security liability. Most importantly, we will provide actionable strategies and technical recommendations for SAP and Security leaders to proactively secure their hybrid or full-cloud landscapes, ensure continuous compliance, and maintain a robust security posture throughout the transition and beyond.

    Hacking & Defending SAP Live – Beyond the Perimeter: Managing the Expanded Attack Surface of SAP Cloud Migrations

  2. Jul 16

    Protecting Brand Value: An Executive Threat Briefing on SAP Security

    For the world’s leading luxury houses, SAP is not just enterprise software. It is the silent guardian of client discretion, heritage sourcing, and the operational precision that defines your maison. As luxury brands accelerate cloud and AI-driven transformation, sophisticated threat actors are evolving in parallel. They are no longer stopping at perimeter defenses. They are moving directly into the enterprise core, where a single breach can compromise client trust, disrupt limited-edition allocations, and erode the brand mystique you have spent decades cultivating. Because in luxury, a breach is not just operational. It is reputational. You Will Learn: Anatomy of an SAP Breach: How attackers pivot from adjacent systems into the SAP core, and why traditional defenses are insufficient Luxury-Specific Business Impact: Quantifying brand equity loss, client trust erosion, and the operational fallout of SAP compromise The Compliance Myth: Why being audit-ready does not equal being secure A Roadmap to Resilience: Practical steps to harden SAP environments while preserving the client experience

    Protecting Brand Value: An Executive Threat Briefing on SAP Security

  3. Jul 9

    Hacking & Defending SAP Live: How Mythos-like AI Models Can Hack SAP Applications

    Historically, compromising SAP environments required years of specialized, niche knowledge of proprietary architecture. AI LLMs like Mythos, GPT-5.5-Cyber and even open source ones have obliterated that barrier to entry. Today, AI-powered offensive tools are democratizing cybercrime, translating complex SAP architectures for average attackers and enabling them to find, weaponize, and execute exploits against SAP applications at scale. In this episode we demonstrate real-world scenarios on how threat actors are able to leverage AI to map out vulnerabilities in SAP applications, generate precise exploits and execute sophisticated attacks to breach the SAP core. By leveraging AI as a force multiplier, virtually anyone can now orchestrate sophisticated attacks that bypass generic security controls and compromise critical business data. Once you understand how sophisticated threats are being used to compromise SAP applications, we will show you how to protect yourself and secure your systems to ensure operational resilience. Key Takeaways - How attackers use LLMs to decipher complex SAP architectures, leverage proprietary protocols, and craft targeted exploits without prior SAP training. - A live demonstration of AI-driven compromise within the SAP application layer. - Witnessing an attacker use AI to move laterally to the SAP core and access sensitive business data. - How Onapsis equips security teams with the automated visibility, governance and defense needed to counter AI-paced offensive threats.

    Hacking & Defending SAP Live: How Mythos-like AI Models Can Hack SAP Applications

  4. Jul 2

    Fireside Chat: Security and Compliance in the Shared Responsibility Model with OG&E and Onapsis

    In partnership with Onapsis, this ASUG webcast will deliver insights designed to support your work with SAP technology. RISE with SAP delivers significant technological and procedural advancements to help organizations address evolving business needs. Central to the solution is the Shared Responsibility Model, which outlines the roles of customers, partners, and SAP in jointly delivering business value. But don’t let the word “shared” mislead you—responsibility doesn’t always mean accountability. The decisions you make at the very start of your project can define the success of your build, go-live, and hypercare phases. Join Ian Anderson from Oklahoma Gas & Electric Company as he shares real-world insights on navigating this new model. Learn how early strategic choices—both procedural and technical—laid the groundwork for sustained success throughout their RISE with SAP journey.

    Fireside Chat: Security and Compliance in the Shared Responsibility Model with OG&E and Onapsis

  5. Jun 25

    Hacking & Defending SAP Applications Live: Clean Core, Dark Shadows

    As organizations adopt a Clean Core strategy, the attack surface of the SAP landscape has split into two distinct fronts: the rapid innovation of SAP BTP developments and the deep-rooted complexity of ABAP custom code. Security can no longer afford to treat these as blindspots. One missed vulnerability in a BTP app can leak your most sensitive data; one rogue line of ABAP can grant a rogue developer the keys to the kingdom. In this episode, we present two high-stakes threat scenarios, based on real-world incidents, that every SAP customer must prepare for: The BTP Blindspot: We demonstrate how an innocent developer mistake in a custom BTP application, such as an insecure API endpoint or a broken authentication check, becomes an open door to the core of the business. Watch as an attacker exploits this flaw without any credentials to silently exfiltrate sensitive enterprise data. The Trojan Horse: We go deep into the ABAP core to show how a rogue developer or contractor can bypass standard checks to insert a sophisticated backdoor in an ABAP program. By injecting a few lines of malicious code, the actor secures SAP_ALL privileges, allowing them to modify financial records and master data in production while bypassing compliance controls.

    Hacking & Defending SAP Applications Live: Clean Core, Dark Shadows

  6. Jun 18

    The Unprecedented Rise in SAP Attacks: Lessons from Mandiant & Onapsis

    For years, the sheer complexity of SAP environments provided a form of security through obscurity. The newly released Mandiant 2026 M-Trends Report shatters this paradigm. According to the data, SAP NetWeaver has emerged as the most exploited enterprise vulnerability of the year. Threat actors are no longer stumbling into these environments; they are targeting them with unprecedented speed and precision. This session moves beyond basic patching to dissect the latest zero-day exploit campaigns, evaluate the impact of AI-driven threats, and outline a unified defense strategy to protect your most critical business-operational assets. Executive Takeaways The M-Trends Revelations: A direct briefing on the key findings from Mandiant’s M-Trends 2026 Report and why SAP NetWeaver is now the prime target. Impact of a Zero-Day: An overview of the active exploit campaign and how threat actors operate inside the application layer. AI Acceleration: Understanding how AI is shrinking defender response windows and how to counter automated threats. Continuous Resiliency: Joint actionable guidance from Mandiant and Onapsis to proactively secure your systems and eliminate critical security silos.

    The Unprecedented Rise in SAP Attacks: Lessons from Mandiant & Onapsis

  7. Jun 11

    Hacking & Defending SAP Applications Live: The SAP Zero-Day That Changed Everything

    This webinar offers a comprehensive analysis of CVE-2025-31324, the first mass-exploited SAP zero day vulnerability. Onapsis Research Labs successfully intercepted and reverse-engineered the complete, multi-stage exploit chain used by sophisticated threat actors. The attack methodology will be detailed—from the initial vulnerability trigger to post-exploitation persistence. The presentation includes a live demonstration of the attack, outlines the immediate, tactical countermeasures developed in joint collaboration with SAP to ensure effective security implementation, and how Onapsis customers stay ahead of the threat.

    Hacking & Defending SAP Applications Live: The SAP Zero-Day That Changed Everything

  8. Mar 12

    From Discovery to Defense: SAP & Onapsis Joint Response to Zero-Day CVE-2025-31324

    When zero-day CVE-2025-31324 surfaced, organizations had to react quickly. SAP and Onapsis worked closely to analyze the threat, validate exploitation activity, and deliver protections for customers worldwide. In this joint session, you’ll get a behind-the-scenes look at how security research and collaboration accelerate guidance, patching, and response to this zero-day. Hear from the experts about what happened, what was learned, and what every SAP customer should be doing now to strengthen their landscape. Key Takeaways: Recommended steps SAP customers should take to reduce future risk SAP’s quick response to address CVE-2025-31324 How SAP and Onapsis collaborated to better understand what threat actors were exploiting Timeline walkthrough: from discovery to analysis to guidance What active exploitation revealed about modern SAP threat actors How SAP & Onapsis Research Labs collaboration strengthens enterprise resilience

    From Discovery to Defense: SAP & Onapsis Joint Response to Zero-Day CVE-2025-31324
See All (62)

About

Welcome to our Onapsis Podcast, a podcast brought to you by Onapsis, the global leader in SAP cybersecurity. Join us as we delve into the fascinating world of safeguarding SAP systems from cyber threats and uncover the secrets to protecting your organization's most critical assets. In each episode, our expert hosts and special guests will explore a variety of captivating topics surrounding SAP cybersecurity, shedding light on the challenges, best practices, and cutting-edge solutions that help businesses maintain the integrity and resilience of their SAP landscapes. From the latest emerging threats to innovative techniques for vulnerability management and threat detection, our podcast provides invaluable insights for professionals working with SAP systems or those interested in learning more about the importance of securing the digital core. Onapsis delivers complete SAP security for the autonomous enterprise, protecting critical SAP applications from AI-powered threats while securely accelerating SAP AI and RISE adoption. As the global leader in SAP cybersecurity and compliance, the SAP-endorsed Onapsis Platform leverages the unmatched threat intelligence from Onapsis Research Labs and our Agentic AI Fabric to proactively prevent breaches, automate continuous compliance, and secure custom code for a Clean Core across RISE with SAP, S/4HANA, and hybrid landscapes. You have a business to run — Onapsis protects your core so you can transform with speed and confidence without trade-offs. Connect with Onapsis on LinkedIn, X, or visit onapsis.com.

Information

  • Creator
    Onapsis
  • Years Active
    2024 - 2026
  • Episodes
    62
  • Rating
    Clean
  • Copyright
    © Onapsis Inc.
  • Show Website
    Onapsis Podcast