Security SAP security firm Onapsis and SAP warn SAP systems are targeted by threat actors within 72 hours after security patches are released. Threat actors reverse-engineered the patches to exploit recently addressed vulnerabilities and use them to target SAP installs. Attackers attempted to access SAP systems to modify configurations and users and exfiltrate sensitive business information. New unsecured SAP applications deployed in cloud (IaaS) environments are targeted in less than three hours by cyber attacks. SAP and SAP worked with Cybersecurity and Infrastructure Security Agency and German cybersecurity agency BSI to warn SAP customers to install security updates.”]
Source: https://securityaffairs.co/wordpress/116431/reports/sap-systems-under-attacks.html