Best SAP Security Podcasts (2025)

1
How to Enhance Business Ownership of SAP Access Risk 26:10

Play Pause

3d ago26:10

26:10

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP. One of the biggest challenges in managing SAP access risk is getting the business to take ownership. In this episode, we explore: Why business users often don’t engage with access risk The role of process design and education How techn…

1
Auto-Color Linux Malware Exploits SAP Zero-Day CVE-2025-31324 36:36

7d ago36:36

36:36

In this episode, we uncover the Auto-Color Linux malware, a stealthy and highly persistent Remote Access Trojan (RAT) that is rapidly emerging as one of the most dangerous threats of 2025. First identified by Palo Alto Networks’ Unit 42 and later analyzed by Darktrace, Auto-Color has now been linked to active exploitation of CVE-2025-31324, a criti…

1
Minimize SAP Migration Challenges, Cybersecurity Maturity, and Radical Transparency - Christopher Carter - BSW #404 58:31

22d ago58:31

58:31

Are you running SAP? The clock is ticking... Standard maintenance end-of-life is set for the end of 2027. Migration to S/4HANA must be completed by then (or 2030 if you buy into SAP’s special three-year reprieve). While that may appear to be enough time, companies currently working toward an S/4HANA transition are finding the journey challenging, a…

1
Critical Flaws in CyberArk Conjur and HashiCorp Vault Put Enterprise Secrets at Risk 37:29

29m ago37:29

37:29

Enterprise secrets managers—long considered the most secure components in modern infrastructure—are now under fire. In a groundbreaking report, cybersecurity firm Cyata revealed 14 critical zero-day vulnerabilities across CyberArk Conjur and HashiCorp Vault, exposing flaws that allow unauthenticated attackers to achieve remote code execution (RCE),…

1
Prompt Injection Nightmare: Critical AI Vulnerabilities in ChatGPT, Copilot, Gemini & More 56:52

1h ago56:52

56:52

Enterprise AI assistants are revolutionizing productivity—but they’re also opening new doors for cyberattacks. In this episode, we explore explosive research from Zenity Labs, which reveals that leading AI tools like ChatGPT, Microsoft Copilot, Google Gemini, Cursor, and Salesforce Einstein are vulnerable to prompt injection attacks—a class of expl…

1
Salesforce Marketing Cloud in a New AI Agentic World 49:42

18m ago49:42

49:42

“AI and agentic marketing is at the top of the list” as the next growth catalyst for customer engagement, Salesforce Marketing Cloud Chief Steve Hammond tells Bloomberg Intelligence, flagging the company’s move to deploy autonomous, context-aware agents that personalize outreach in milliseconds. In this Tech Disruptors episode, Hammond sits down wi…

1
From Google to LVMH: ShinyHunters’ Salesforce Breaches Spark Global Ransom Crisis 46:37

6h ago46:37

46:37

A new wave of cyber extortion is sweeping across global enterprises, and the battlefield is Salesforce CRM. The notorious **ShinyHunters group—tracked internally by Google as UNC6040/UNC6240—**has launched a coordinated series of breaches using vishing (voice phishing) to compromise employee credentials, exfiltrate sensitive customer data, and dema…

1
Cisco Hit by Vishing Attack: CRM Breach Exposes Millions of User Profiles 31:43

9h ago31:43

31:43

Cisco has confirmed a new data breach after a vishing (voice phishing) attack tricked a company representative into exposing access to a third-party CRM system. Detected on July 24, 2025, the breach compromised basic user details such as names, emails, and phone numbers of Cisco.com registrants. While the data was non-sensitive, the incident unders…

1
Ox Security Unveils Agent Ox: AI Tool That Writes Tailored Fixes for Software Vulnerabilities 52:37

12h ago52:37

52:37

The world of application security is shifting dramatically as AI begins to move from simply flagging vulnerabilities to actively fixing them. Ox Security has launched Agent Ox, a groundbreaking AI-powered extension designed to automate secure, organization-specific code fixes. Unlike generic coding assistants that offer boilerplate advice, Agent Ox…

1
Meta Deletes 6.8 Million Scam Accounts as AI-Powered Fraud Rings Exploit WhatsApp 34:45

14h ago34:45

34:45

Meta has removed 6.8 million accounts tied to criminal scam centers in the first half of 2025, marking one of the most aggressive crackdowns on digital fraud in the company’s history. The move comes amid an alarming surge in online scams that cost global victims $16.6 billion in 2024 alone, a 33% increase from the year before. Many of these scams a…

1
Say Easy, Do Hard - AI Governance in the Supply Chain - Richard Bird, Nick Mistry - BSW #407 54:55

22h ago54:55

54:55

Recent findings of AI ecosystem insecurities and attacks show the importance of needing AI governance in the supply chain. And this supply chain is rapidly expanding to include not only open-source software but also collaborative platforms where custom models, agents, prompts, and other AI resources are used. And with this expansion of third-party …

1
Say Easy, Do Hard - AI Governance in the Supply Chain - Nick Mistry, Richard Bird - BSW #407 54:55

1d ago54:55

54:55

Recent findings of AI ecosystem insecurities and attacks show the importance of needing AI governance in the supply chain. And this supply chain is rapidly expanding to include not only open-source software but also collaborative platforms where custom models, agents, prompts, and other AI resources are used. And with this expansion of third-party …

1
Say Easy, Do Hard - AI Governance in the Supply Chain - Richard Bird, Nick Mistry - BSW #407 54:55

22h ago54:55

54:55

Recent findings of AI ecosystem insecurities and attacks show the importance of needing AI governance in the supply chain. And this supply chain is rapidly expanding to include not only open-source software but also collaborative platforms where custom models, agents, prompts, and other AI resources are used. And with this expansion of third-party …

1
Meta Found Liable: Jury Rules Against Tech Giant in Flo Health Privacy Case 30:59

1d ago30:59

30:59

In a landmark decision, a California jury has ruled Meta guilty of violating user privacy laws in a class-action lawsuit tied to the popular Flo Health period tracking app. Plaintiffs alleged that Meta, through embedded software tools and tracking pixels, collected deeply personal menstrual and fertility data — from period dates to pregnancy goals …

1
TSMC Insider Threat: Six Arrested in Taiwan Over 2nm Chip Trade Secrets 1:06:45

1d ago1:06:45

1:06:45

In a stunning development, Taiwanese authorities have arrested six individuals suspected of stealing trade secrets from Taiwan Semiconductor Manufacturing Co. (TSMC), the world’s most advanced semiconductor producer. At the heart of the case is TSMC’s 2-nanometer (2nm) chip technology, a crown jewel in the global race for next-generation AI and hig…

1
MFA Bypass, SonicWall, BIOS Shade, Sex Toys, FBI Warning, Claude v GPT-5, Josh Marpet - SWN #500 32:30

1d ago32:30

32:30

MFA Bypass, SonicWall, BIOS Shade, Sex Toys, FBI Warnings, Claude vs GPT-5, Josh Marpet, and more on the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-500

1
Approov Secures £5M to Fortify Mobile App and API Security Against AI-Driven Threats 55:37

2d ago55:37

55:37

In a major step for mobile and API cybersecurity, Approov, the Edinburgh-based security firm specializing in real-time mobile attestation and API protection, has raised £5 million (approximately $6.7 million) in Series A funding. The round, led by the Investment Fund for Scotland with support from Souter Investments, Lanza techVentures, and Scottis…

1
Big Tech Buys Little Tech: Will SAP Ruin SmartRecruiters? 27:31

1d ago27:31

27:31

In this solo summer edition of the HR Famous Podcast, host Tim Sackett unpacks one of the biggest HR tech acquisitions of the year: SAP SuccessFactors acquiring SmartRecruiters. Tim gives his unfiltered, insider take on why this move matters, how it stacks up against Workday and Oracle, and whether SAP will actually leverage the cutting-edge, AI-dr…

1
Pwn2Own Ireland 2025: $1M WhatsApp Exploit Bounty Raises the Stakes 1:07:32

1d ago1:07:32

1:07:32

This October, Pwn2Own Ireland 2025 will take over Cork with one of the most ambitious cybersecurity competitions yet. Co-sponsored by Meta and organized by Trend Micro’s Zero Day Initiative (ZDI), the event is putting record-breaking payouts on the line — including up to $1 million for a zero-click WhatsApp exploit that can deliver remote code exec…

1
AT&T COO on Goal to Hold US Fiber Market Lead 36:59

2d ago36:59

36:59

AT&T aims to maintain a lead in the US fiber market to sustain growth as its core wireless business slows. In this episode of Tech Disruptors, Jeff McElfresh, Chief Operating Officer of AT&T, speaks with Bloomberg Intelligence analyst John Butler about the company’s plan to expand its base to more than 60 million locations by 2030, from just over 3…

1
Uniting software development and application security - Will Vandevanter, Jonathan Schneider - ASW #342 58:07

2d ago58:07

58:07

Maintaining code is a lot more than keeping dependencies up to date. It involved everything from keeping old code running to changing frameworks to even changing implementation languages. Jonathan Schneider talks about the engineering considerations of refactoring and rewriting code, why code maintenance is important to appsec, and how to build con…

1
Nvidia Triton Inference Server Vulnerabilities Expose AI Infrastructure to Attack 1:02:48

2d ago1:02:48

1:02:48

A major warning has hit the AI community: Nvidia’s Triton Inference Server — one of the most widely used open-source platforms for deploying and scaling AI models — has been found to contain critical vulnerabilities that could allow attackers to take complete remote control of affected systems. The discovery, made by cloud security firm Wiz, reveal…

1
CISA & FEMA Release $100M in Cybersecurity Grants to Strengthen State, Local, and Tribal Defenses 43:50

2d ago43:50

43:50

The U.S. Department of Homeland Security, through CISA and FEMA, has announced over $100 million in new cybersecurity grant funding for Fiscal Year 2025 — a critical investment aimed at protecting America’s most vulnerable digital frontlines. The funding is split between the State and Local Cybersecurity Grant Program (SLCGP), allocating $91.7 mill…

1
AI Jailbreaks on the Rise: How Hackers Are Extracting Training Data from LLMs 1:26:28

3d ago1:26:28

1:26:28

In this episode, we examine the rapidly growing threat of AI jailbreaks — a cybersecurity challenge reshaping the landscape of large language models (LLMs) and enterprise chatbots. According to the IBM 2025 Cost of a Data Breach Report, 13% of all data breaches now involve AI systems, with the vast majority stemming from jailbreak attacks that circ…

1
350,000 Patient Records Exposed: Inside the Northwest Radiologists Data Breach 40:18

3d ago40:18

40:18

In this episode, we investigate the Northwest Radiologists data breach, a devastating cyberattack that compromised the personal and medical information of approximately 350,000 patients in Washington State between January 20 and January 25, 2025. What began as a so-called “network disruption” was later revealed to be a massive breach that exposed a…

1
Weekly Enterprise Security News and Tips on Building Security From Day 1 - Guillaume Ross - ESW #418 1:45:52

3d ago1:45:52

1:45:52

The Weekly Enterprise News (segments 1 and 2) This week, we’ve had to make some last minute adjustments, so we’re going to do the news first, split into two segments. This week, we’re discussing: Some interesting funding Two acquisitions - one picked up for $250M, the other slightly larger, at $25 BILLION Interesting new companies! On the 1 year an…

1
Pipes, Thorium, Excel, ATM Hillbilly Cannibal Attack, Lambdas, AIs, Aaran Leyland - SWN #499 35:55

5d ago35:55

35:55

Pipes, Thorium, Excel, Weird Ports, ATM Hillbilly Cannibal Attack, Lambdas, National Guard, AIs, Aaran Leyland, and More on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-499

1
Adversary Emulation, Cyber Education & Community Building with Day Johnson 28:53

6d ago28:53

28:53

🚨 How do you build a 4,000+ strong student-tech community from scratch?Eden Naftali and Amitai sat down with Day Johnson, Security Engineer at @amazon , ex-Datadog, founder of CyberWox Academy.What they covered 👇- Detection engineering that works at scale- What breaks IR processes (and how to fix them)- Real talk on breaking into security without s…

1
Critical Honeywell Experion PKS Vulnerabilities Threaten Global Industrial Control Systems 1:16:35

6d ago1:16:35

1:16:35

In this episode, we analyze the multiple vulnerabilities recently disclosed in Honeywell’s Experion Process Knowledge System (PKS), a widely deployed industrial control and automation solution that underpins operations in energy, chemical plants, manufacturing, healthcare, and transportation sectors worldwide. Reported by CISA and Positive Technolo…

1
Hacking Washing Machines - PSW #885 1:58:07

6d ago1:58:07

1:58:07

In the security news: Hacking washing machines, good clean fun! Hacking cars via Bluetooth More Bluetooth hacking with Breaktooth Making old vulnerabilities great again: exploiting abandoned hardware Clorox and Cognizant point fingers AI generated Linux malware Attacking Russian airports When user verification data leaks Turns out you CAN steal car…

1
Inside the July 2025 PyPI Phishing Scam: How Hackers Stole Developer Credentials 54:17

7d ago54:17

54:17

In this episode, we investigate the growing cybersecurity storm targeting the Python Package Index (PyPI) — the backbone of Python’s software distribution ecosystem. A recent phishing campaign in July 2025 has developers on high alert, as attackers impersonated PyPI using a deceptive domain (pypj.org) to trick maintainers into handing over their cr…

1
IoT Security Crisis: Dahua Smart Camera Vulnerabilities Expose Surveillance Systems 1:02:05

7d ago1:02:05

1:02:05

In this episode, we examine the alarming discovery of critical security vulnerabilities in Dahua smart cameras, one of the world’s most widely deployed surveillance systems. Researchers at Bitdefender uncovered two zero-click flaws — CVE-2025-31700 and CVE-2025-31701 — that allow unauthenticated remote attackers to gain root access to Dahua devices…

1
SAP on How AI is Furthering the State of the Cloud Transition 47:25

7d ago47:25

47:25

AI “is about aligning the semantics of the data, and that’s again why I believe a suite of applications has advantages. If not, the customer has to do it themselves,” Jan Gilg, SAP’s chief revenue officer for the Americas and Global Business Suite, tells Anurag Rana, senior technology analyst at Bloomberg Intelligence. In this Tech Disruptors episo…

1
Dropzone AI Secures $37M to Tackle Alert Fatigue with Autonomous SOC Analysts 17:11

7d ago17:11

17:11

In this episode, we dive into Dropzone AI’s landmark $37 million Series B funding round, bringing the company’s total raised to over $57 million. Backed by major investors, Dropzone AI is accelerating the development of its AI-powered SOC analysts — tools designed to autonomously investigate and resolve security alerts across critical threat catego…

1
Axonius Buys Cynerio for $100M+: Closing Healthcare’s Biggest Cybersecurity Blind Spot 1:36:30

8d ago1:36:30

1:36:30

In this episode, we explore Axonius’s landmark acquisition of Cynerio, a healthcare cybersecurity company specializing in protecting vulnerable medical devices like MRI machines, infusion pumps, and ventilators. The deal — valued at over $100 million in cash and stock — marks Axonius’s first-ever acquisition and signals a major strategic expansion …

1
Aligning Security Objectives, Ditch the Ego, Lead for Real and Succeed - BSW #406 29:45

8d ago29:45

29:45

In the leadership and communications section, The CISO code of conduct: Ditch the ego, lead for real, The books shaping today’s cybersecurity leaders, How to Succeed in Your Career When Change Is a Constant, and more! Show Notes: https://securityweekly.com/bsw-406

1
Critical Lenovo Firmware Flaws Expose Millions to Persistent UEFI Attacks 42:00

8d ago42:00

42:00

In this episode, we examine a critical firmware security crisis shaking Lenovo devices worldwide. Security researchers at Binarly have uncovered six serious vulnerabilities in the Insyde BIOS firmware used in Lenovo’s IdeaCentre and Yoga product lines. Four of these flaws, rated high severity, reside in the System Management Mode (SMM) — a privileg…

1
Promptfoo Secures $18.4M to Combat AI Security Threats in Generative AI 36:50

8d ago36:50

36:50

In this episode, we dive into Promptfoo’s groundbreaking $18.4 million Series A funding round, led by Insight Partners and supported by Andreessen Horowitz, bringing the AI security startup’s total funding to $23.4 million. Founded in 2024, Promptfoo has quickly emerged as a leader in securing Large Language Models (LLMs) and generative AI applicat…

1
Aligning Security Objectives, Ditch the Ego, Lead for Real and Succeed - BSW #406 29:45

8d ago29:45

29:45

In the leadership and communications section, The CISO code of conduct: Ditch the ego, lead for real, The books shaping today’s cybersecurity leaders, How to Succeed in Your Career When Change Is a Constant, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-406…

1
Aligning Security Objectives, Ditch the Ego, Lead for Real and Succeed - BSW #406 29:45

8d ago29:45

29:45

In the leadership and communications section, The CISO code of conduct: Ditch the ego, lead for real, The books shaping today’s cybersecurity leaders, How to Succeed in Your Career When Change Is a Constant, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-406…

1
SHRM Annual Recap, AI Hype, Layoff Myths & the Top 100 Recruiting Tech List 30:19

8d ago30:19

30:19

In this solo summer edition of HR Famous, Tim Sackett flies solo with a hot debrief from the 2025 SHRM Annual Conference in San Diego. From presidential keynotes to AI overload and his signature recruiting tech list, Tim delivers an unfiltered look at what really went down at the world’s largest HR event. Here’s what you’ll get in this jam-packed e…

1
1.1 Million Private Messages Leaked: Inside the Tea App Privacy Disaster 23:58

8d ago23:58

23:58

A platform designed to protect women’s safety in dating has instead become a nightmare for its users. In this episode, we uncover the catastrophic Tea app data breach, which exposed more than 59 GB of highly sensitive user data due to a fundamental security failure: a completely public Firebase storage bucket with no authentication, no encryption, …

1
Popup Porn, LoveSense, Tea, Fire Ant, Scatterede Spider, AI Pricing, Josh Marpet... - SWN #498 31:06

8d ago31:06

31:06

Popup Porn, LoveSense, Tea, Fire Ant, Scatterede Spider, AI Pricing, Josh Marpet, and more on the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-498

1
Job Scams, Corporate Espionage, and Digital Deception: Inside the Deepfake Crisis 1:16:30

9d ago1:16:30

1:16:30

Deepfake technology has evolved from a fringe novelty into one of the most serious cybersecurity and national security threats of our time. In this episode, we examine how artificial intelligence–generated synthetic media is being weaponized to impersonate CEOs, manipulate elections, infiltrate corporate networks, and damage reputations worldwide. …

1
Microsoft Exposes Major macOS Flaws in Transparency, Consent, and Control 1:23:13

9d ago1:23:13

1:23:13

In this episode, we dive deep into Microsoft Threat Intelligence’s latest findings on two critical macOS vulnerabilities that shook Apple’s privacy defenses. The flaws, identified as CVE-2025-31199 (Sploitlight) and CVE-2024-44133 (HM Surf), specifically targeted Apple’s Transparency, Consent, and Control (TCC) framework, the system designed to gua…

1
Novo Nordisk Foundation and the Evolution of Quantum Computing 44:44

9d ago44:44

44:44

Quantum computing remains an area of high interest as use cases hinge on improving qubits and making them less error-prone for calculations. According to Professor Lene Oddershede, chief scientific officer for Planetary Science & Technology at the Novo Nordisk Foundation, the field is on the cusp of exponential growth in the coming years. She joins…