Security Logging for SAP BTP
As adoption of SAP BTP grows, so does the need to maintain trust in the business processes that depend on the platform. As organizations increasingly rely on BTP to extend SAP functionality and support analytics, automation, integration, and AI-enabled innovation, it becomes essential to monitor security-relevant events across global accounts, subaccounts, connections, integrations, and application […]
SAP Security Notes, June 2026
SAP security note 3746332 addresses CVE-2026-44748, an XML Signature Wrapping vulnerability in SAML authentication for SAP NetWeaver AS ABAP and ABAP Platform. The vulnerability allows an authenticated low-privileged attacker to obtain a valid signed SAML or signed XML message, manipulate the XML structure, and submit a modified document that may still pass signature validation if […]
Key Takeaways of the DBIR 2026 for SAP Solutions
BackgroundThe Verizon Data Breach Investigations Report, widely known as the DBIR, is one of the most respected annual reports in the cybersecurity industry. Published by Verizon, the report analyzes real-world security incidents and confirmed data breaches to identify attack vectors, threat actors, and defensive measures. Since its first edition in 2008, the DBIR has become […]
SAP Security Notes May 2026: Supply-Chain Attack and Critical Vulnerabilities Explained
The SAP security advisories for May 2026 address several high-impact vulnerabilities, including a targeted software supply-chain attack, a “Hot News” SQL injection in S/4HANA, a missing authentication check in Commerce Cloud, and a high-risk OS command injection. Organizations should treat these notes as urgent and prioritize remediation to mitigate significant risks. Executive Summary SAP’s security […]
Mini Shai-Hulud: Understanding the SAP Supply Chain Malware
Mini Shai-Hulud is a malware campaign that targeted the software supply chain for SAP cloud development by injecting malicious code into specific npm packages. Active for a few hours on April 29, 2026, the attack was designed to steal sensitive credentials, including GitHub tokens, npm tokens, and cloud credentials from developers using these tools. This […]
From SAP Logs to Security Intelligence: Integrating SAP with Splunk
Splunk is one of the world’s most widely used platforms for collecting, indexing, and analyzing data from across enterprise environments, including servers, applications, cloud services, and network devices. It is commonly used by security operations teams as a Security Information and Event Management (SIEM) platform to centralize log data, correlate events, detect threats, investigate incidents, […]