ERP security

SAP Security Patch Day August 2026 delivered 28 new Security Notes, including six affecting SAP MII, putting new pressure on manufacturing security and remediation teams.

Pathlock and KPMG are targeting the access-risk layer behind ERP modernization, where AI agents, automation, elevated privileges, and transaction controls are turning identity governance into an audit-readiness priority.

A critical Oracle E-Business Suite vulnerability affecting Oracle Payments faced active exploitation attempts, putting renewed attention on how quickly enterprises patch legacy ERP environments tied to finance and payment workflows002E Cybersecurity Dive reported on July 1 that researchers observed exploitation...

AWS has expanded Security Hub to provide targeted protection for AI workloads and security monitoring for Microsoft Azure, enabling the discovery and evaluation of Azure resources alongside AWS findings, thereby enhancing visibility and governance across multi-cloud and hybrid ERP environments.

The White House launched the Gold Eagle initiative, an AI-driven cybersecurity clearinghouse aimed at enhancing coordination among government, private sectors, and open-source partners to expedite the identification and remediation of software vulnerabilities amid increasing pressure from advanced AI systems.

July's record-breaking patch cycle from Microsoft, ServiceNow, and SAP highlights a new reality for enterprise security teams. AI is accelerating vulnerability discovery, shrinking remediation windows, and expanding the attack surface across ERP systems, cloud platforms, identity infrastructure, and business-critical workflows.

NTT DATA Business Solutions and Pathlock have joined forces to deliver always-on SAP cybersecurity — combining a managed SOC with AI-native application controls to protect finance, procurement, and supply chain workflows against unauthorized access, fraud, and misconfiguration at global scale.

In 2026, three distinct approaches to SAP migration are highlighted by Lwart Environmental Solutions, which opts to extend its current system for operational stability; Victrola, which successfully executes a greenfield migration to SAP Cloud ERP with significant reporting efficiencies; and Reveal USA, which emphasizes proving value before transformation by guaranteeing an 8x return on investment, reflecting a market grappling with simultaneous technical, operational, and security challenges.

Zalaris won the Large Enterprise Transformation Award for its successful payroll modernization project with Ryanair, while Onapsis was recognized as runner-up for its ERP security transformation that integrated risk management into enterprise processes.

NIST is changing how CVEs are enriched in the National Vulnerability Database, reducing the consistency of risk signals used to prioritize vulnerabilities. For ERP security teams, the shift increases reliance on vendor guidance and system-specific context to assess exposure.

As organizations transition to SAP S/4HANA and hybrid-cloud architectures, the necessity for a layered Zero Trust security approach, supported by Unified Risk Management and consolidated monitoring solutions, becomes critical to address the expanded attack surface.

In 2025, SAP customers expressed increasing concern over cyberattacks, particularly regarding data exfiltration and integration risks, while patch management remained a significant challenge, highlighting the necessity for enhanced security strategies and investments in SAP-specific protections.

Black Friday serves as a critical evaluation for ERP systems, revealing their capability for real-time operational control amid spikes in demand, and highlighting the need for strong data governance, operational visibility, and continuous analysis to enhance resilience and readiness for future challenges.

Onapsis CEO Mariano Nunez talks about the importance of cybersecurity in today's ERP landscape, shared security responsibility, and why it is vital to embed security from the start.