Sign up to save your podcasts
Or
Share SAP Cybersecurity by NO MONKEY
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
SAP Cybersecurity by NO MONKEY
SAP Cybersecurity by NO MONKEY episodes
- Content-Based Attacks: SAP System's Blind SpotDiscover the files your scanner never sees, and what AI does with them
TAKEAWAYS
- Understand why endpoint and EDR tools have no visibility into SAP file uploads
- Learn how content based attacks differ from classic malware and why they are worse
- Discover which everyday file formats can carry executable content into your landscape
- See where SAP's responsibility ends and yours begins in cloud deployments
- Recognise how retrieval pipelines turn ordinary documents into prompt injection vectors
HOST & GUEST:
Host: Waseem Ajrab – Managing Director, NO MONKEYGuest: Joerg Schneider-Simon – Chief Technology Officer & Co-Founder, bowbridgeCHAPTERS
01:22 Joerg's journey in cybersecurity and focus on file security02:26 How SAP security has evolved over the years03:21 The shift from perimeter security to external integrations04:17 The changing cybersecurity landscape for SAP05:55 Limitations of traditional antivirus in SAP environments09:34 SAP's API for content security and its evolution13:55 Security misconceptions in cloud SAP deployments17:19 Content security challenges in cloud and Rise environments20:33 Impact of interconnected systems and attack surfaces22:27 The role of AI and large language models in security risks25:03 Understanding content-based attacks and their risks30:24 Content types that introduce security risks34:41 How AI and LLMs expand attack surfaces37:18 Prompt injections and vulnerabilities in AI applications41:10 Risks of retrieval augmented generation (RAG) in enterprise AI43:00 Strategies for modern enterprise content security49:10 Key message: Question your security assumptionsNew episodes drop regularly, featuring conversations with cybersecurity experts, SAP practitioners, and industry leaders who've been in the trenches. No vendor pitches. No fluff. Just actionable insights you can apply today.
Because curiosity is free – but recovery isn't.
42 min - Why a New Generation of Threat Actors Targets SAPWhat the dark web reveals about who is coming for your systems
TAKEAWAYS
- Discover why criminal interest in SAP has risen sharply in recent years
- Learn how threat actors now specialize in SAP access, data and social engineering
- Understand why stolen data stays dangerous long after the breach is closed
- Separate the real AI threats from the hype around them
- Focus on the two priorities that cover most of your SAP risk
HOST & GUEST
Waseem Ajrab – Host: Managing Director, NO MONKEYMannie W. – Guest: Head of Research, Lab 1CHAPTERS
00:00 Introduction to SAP Cybersecurity and Guest Mannie01:28 Mannie's Journey into Dark Web Threat Intelligence04:03 Why the Dark Web is a Valuable Source of Threat Intelligence06:10 Increased Interest in Targeting SAP Systems 08:12 Differences Between Traditional and SAP Security 09:32 Specialization of Threat Actors in SAP and ERP Systems12:11 Misconceptions About SAP Security and Risks14:23 Impact of AI on Cyber Threats and Attack Methods16:24 Future Developments in AI and Cyber Attacks18:41 Weaponization of Stolen Enterprise Data21:46 Why Incident Response Often Ends Too Early23:05 Practical Recommendations After a Breach24:19 Supply Chain Risks and Data Breach Implications25:57 Collaboration Between CTI and Incident Response29:02 Key Priorities for Protecting SAP EnvironmentsNew episodes drop regularly, featuring conversations with cybersecurity experts, SAP practitioners, and industry leaders who've been in the trenches. No vendor pitches. No fluff. Just actionable insights you can apply today.
Because curiosity is free – but recovery isn't.
33 min - The Death of Traditional SAP Security20 Years of Vulnerabilities That Refuse to Die
In this episode, Frederik Weidemann (Orgaverse) sits down with Waseem to discuss why traditional SAP security approaches are fundamentally broken. From OS command execution that still works in 2026 to cloud architectures that nobody understands, Frederik walks through two decades of SAP vulnerabilities that organizations keep repeating. Discover why patches aren't the answer, how AI is changing offensive security forever, and what organizations actually need to do to mature SAP security.
TAKEAWAYS
- Why SAP vulnerabilities discovered 20 years ago still compromise systems today
- How OS command execution remains a critical risk across multiple attack vectors
- The shared responsibility model that most cloud customers fundamentally misunderstand
- Why BTP is becoming the new DMZ for SAP landscapes (and why that's dangerous)
- How AI is automating vulnerability discovery faster than organizations can patch
HOST & GUEST
Host: Waseem Ajrab | NO MONKEYGuest: Frederik Weidemann | OrgaverseCHAPTERS
01:20 Frederik Weidemann's 20-year journey in SAP security03:08 The evolution of SAP security awareness since 200605:44 Why security researchers still fear touching SAP08:31 Recent trends in SAP vulnerabilities and patch patterns11:41 OS command execution: Why removing one report doesn't solve the problem14:46 The complexity of securing SAP operating systems19:55 How BTP is changing the enterprise attack surface25:04 API management and integration suite security risks31:34 Zero trust in SAP: Identity management as the foundation32:23 The challenge of navigating identity provisioning39:10 AI's impact on offensive security and vulnerability discovery46:05 Understanding ABAP as an offensive tool, not business logic51:50 Integrating AI and Joule into security workflows56:19 The mindset shift organizations need right nowNew episodes drop regularly, featuring conversations with cybersecurity experts, SAP practitioners, and industry leaders who've been in the trenches. No vendor pitches. No fluff. Just actionable insights you can apply today.
Because curiosity is free – but recovery isn't.
58 min - AI and Responsibility: Securing SAP's Digital CoreWhen AI agents decide, who answers the auditor?
TAKEAWAYS
Why tracing and auditing every AI agent decision is an audit requirement, not optional
How AI makes SAP's existing attack surface more visible, not biggerThe shift from humans executing tasks to humans managing agents managing agentsWhy organizations need AI to scale defenses against automated attacksRisk management frameworks for deploying AI in SAP (NIST, OWASP Top 10, ISO 27001)HOST & GUEST:
Waseem Ajrab – Host: Head of Security Advisory, NO MONKEYJosé Marquez – Guest: Chief AI Officer, SAP Practice at PwC USCHAPTERS
02:11 José's journey from ABAP developer to Chief AI Officer04:00 How AI agents change SAP from execution to decision making07:57 Why AI makes attack surfaces more visible, not expanded09:28 Autonomous AI agents and the accountability challenge12:47 Tracing, logging, and auditing: The audit question every organization will face17:17 Common gaps when organizations have high AI ambition but low governance18:46 Standards for monitoring AI agents like human employees22:07 AI's impact on security operations and automated attacks31:26 The new role: Humans managing agents managing agents33:33 Risks of over-reliance on AI-driven security decisions40:56 Protecting SAP's digital core with AI risk governance44:53 Balancing automation, human oversight, and organizational strategy45:22 The biggest opportunity (scale) vs. the biggest risk (forgetting how to think critically)New episodes drop regularly, featuring conversations with cybersecurity experts, SAP practitioners, and industry leaders who've been in the trenches. No vendor pitches. No fluff. Just actionable insights you can apply today.
Because curiosity is free – but recovery isn't.
41 min - Why SAP Is Still a Goldmine for AttackersDiscover what 20 years of vulnerability research reveals about SAP security
TAKEAWAYS
• Discover why SAP obscurity no longer works as security• Learn what attackers exploit in real SAP penetration tests• Understand the business impact of SAP breaches (real cases)• Identify common patterns that leave SAP systems vulnerable• Adopt the "assume breach" mindset for SAP environmentsHOST & GUEST:
Waseem Ajrab – Host: Head of Security Advisory, NO MONKEYJoris Van De Vis – Guest: Director Security Research, Security BridgeChapters
03:06 The Journey into SAP Cybersecurity
05:54 Complexity as a Double-Edged Sword09:01 The Business Impact of SAP Breaches12:12 Common Vulnerabilities in SAP Systems14:54 The Importance of Monitoring and Patching18:03 The Challenge of Legacy Systems20:50 The Human Factor in SAP Security24:55 The Human Element in Technology27:00 Understanding Compliance vs. Security30:04 Cloud Migration Myths and Realities34:15 Identifying Patterns in Vulnerabilities41:51 Mindset Shift: Assume Breach43:09 Innovations in SAP Security ToolsNew episodes drop regularly, featuring conversations with cybersecurity experts, SAP practitioners, and industry leaders who've been in the trenches. No vendor pitches. No fluff. Just actionable insights you can apply today.
Because curiosity is free – but recovery isn't.41 min - Navigating C‑Level Executives Through SAP CybersecurityHow to get SAP security on the board agenda, when ransom attacks are louder but SAP is more critical.
TAKEAWAYS
- SAP security has evolved significantly since 2012.
- Continuous security is essential for effective SAP risk management.
- Organizations often rely too heavily on audits for security.
- There is a gap in communication between technical teams and C-level executives.
- Proactive measures can prevent significant security incidents.
- AI can enhance both security measures and threat detection.
- Transparency in security practices is crucial for effective management.
- Organizations need to start addressing glaring security issues immediately.
- The complexity of SAP systems requires specialized security approaches.
- Security is a continuous process, not a one-time project.
CHAPTERS
03:00 The Evolution of SAP Security
06:05 Challenges in SAP Cybersecurity09:06 The Role of C-Level in Cybersecurity11:58 Understanding SAP Cyber Risk15:12 Bridging the Gap in Cybersecurity Communication24:00 Understanding SAP Security Risks29:59 The Role of Audits in Cybersecurity35:55 Continuous Security: A Proactive Approach41:56 Bridging the Gap Between Cybersecurity and SAP48:04 Future Trends in SAP SecurityHOST & GUEST:
- Waseem Ajrab – Host, NO MONKEY
- Christoph Nagy – Guest, Security Bridge
CONNECT WITH US:
Website: https://www.no-monkey.com/LinkedIn: https://www.linkedin.com/company/no-monkey/Subscribe to stay updated on SAP security!
44 min - Building Modern SAP SOCThe Role of Offensive Mindset in Cyber Defense
TIMESTAMPS:
03:00 - Maxim's Journey into Cyber Defense05:44 - The Evolving Mindset of SOC Operations08:28 - The Role of Education in Cybersecurity11:02 - Understanding SAP's Unique Challenges in SOC13:42 - Effective Detection Strategies for SAP Systems16:27 - Building a Threat Hunting Framework18:46 - The Future of Threat Hunting and SOC Operations21:07 - Understanding Threat Hunting in SAP Environments24:30 - Compliance vs. Security: A Critical Distinction28:11 - Reactive vs. Proactive SOC Teams32:08 - Bridging the Gap: SOC Analysts and SAP Experts35:45 - Implementing SAP Security in SOC OperationsHOST & GUEST:
- Waseem Ajrab – Host, NO MONKEY
- Maxim Deweerdt – Guest, NVISO
KEY TAKEAWAYS:
- Understanding the adversary's goals is crucial for SOC operations
- Proactive SOC teams assume compromise and focus on detection
- SAP is often treated as a black box in SOCs due to complexity
- Effective detection requires collaboration between SAP and SOC teams
- Quality of detection rules is more important than quantity
- Compliance and security should be clearly differentiated
CONNECT WITH US:
Website: https://www.no-monkey.com/LinkedIn: https://www.linkedin.com/company/no-monkey/Subscribe to stay updated on SAP security!
41 min - Uncovering SAP BTP Attack VectorsNavigating the Complexities of SAP Cybersecurity
TIMESTAMPS:
03:45 - Transitioning to Cloud: Impact on Security07:26 - Understanding SAP BTP: Basics and Structure11:02 - Exploring BTP Environments14:30 - The Role of ABAP in BTP16:53 - Shared Responsibility in Cloud Security22:27 - The Attackers Playbook and Pentesting23:54 - Understanding SSH and Security in Cloud Foundry27:35 - Service Keys and Their Risks30:38 - Best Practices for Application Security34:14 - Exploring Kyma and Cloud Connector Security40:55 - Top Recommendations for Reducing BTP RiskHOST & GUEST:
- Waseem Ajrab – Host, NO MONKEY
- Julian Petersohn – Guest, Fortinet
KEY TAKEAWAYS:
- BTP is essential for modern SAP security
- Misconfigurations are a leading cause of vulnerabilities
- Shared responsibility is crucial in cloud environments
- Monitor your applications continuously
- Develop applications with security in mind
- Regularly update and patch systems
CONNECT WITH US:
Website: https://www.no-monkey.com/LinkedIn: https://www.linkedin.com/company/no-monkey/Subscribe for more SAP security insights!
47 min - Introduction to SAP CybersecurityTackling SAP Security Together: A New Podcast Journey
TIMESTAMPS:
00:00 - Introduction: Why This Podcast Exists03:09 - The Importance of SAP Security05:55 - Understanding the SAP Ecosystem08:46 - The Three Lines of Defense in SAP Security11:50 - NO MONKEY's Approach to SAP Security14:38 - Future of the Podcast and Key TakeawaysHOST & GUEST:
- Waseem Ajrab – Host, NO MONKEY
- Jochen Fischer – Guest
KEY TAKEAWAYS:
- SAP cybersecurity needs to be more human and actionable
- The SAP ecosystem includes 500,000+ customers and 300 million users
- Security must be a collaborative effort between IT and business leaders
- NO MONKEY's approach: People → Process → Technology
- Curiosity is free – recovery isn't
CONNECT WITH US:
Website: https://www.no-monkey.com/LinkedIn: https://www.linkedin.com/company/no-monkey/Subscribe to never miss an episode!
22 min
About SAP Cybersecurity by NO MONKEY
From the publisher's feed
Welcome to SAP Cybersecurity by NO MONKEY – where we make SAP security real, relevant, and actionable.
Hosted by Waseem Ajrab, this podcast breaks down the complexities of SAP cybersecurity into conversations that matter. Whether you're a CISO, SAP admin, SOC analyst, or auditor, we tackle the challenges you face every day: securing critical SAP environments, bridging the gap between security and business, and protecting the digital backbone of global operations.
With over 500,000 SAP customers running critical business processes, securing these systems isn't just an IT issue – it's a business imperative. But SAP security doesn't have to be intimidating or isolated. Through expert interviews and practical insights, we explore:
- Real-world attack vectors and defense strategies
- How to connect SAP security with SOC operations
- Cloud security challenges in SAP BTP environments
- Building effective collaboration between IT Security, SAP teams, and business leaders
- Turning cybersecurity from a cost center into a business enabler
NO MONKEY's approach is simple: People → Process → Technology. We believe security starts with empowering the right people, establishing smart processes, and only then choosing the right tools.
New episodes drop regularly, featuring conversations with cybersecurity experts, SAP practitioners, and industry leaders who've been in the trenches. No vendor pitches. No fluff. Just actionable insights you can apply today.
Because curiosity is free – but recovery isn't.