Best SAP Security Podcasts (2025)

1
Technical Series: How to Make use of SAP SU24 Variants 24:14

Play Pause

3d ago24:14

24:14

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP. In this session, we walk through a practical, real-world demonstration of how SU24 authorization defaults and SU24 variants can significantly reduce manual maintenance when building SAP roles. Using the widely-used MIGO transaction as …

1
SANS Stormcast Wednesday, November 12th, 2025: Microsoft Patch Tuesday; Gladinet Triofox Vulnerability; SAP Patches 6:03

23d ago6:03

6:03

Microsoft Patch Tuesday for November 2025 https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+for+November+2025/32468/ Gladinet Triofox Vulnerability Triofox uses the host header in lieu of proper access control, allowing an attacker to access the page managing administrators by simply setting the host header to localhost. https://cloud.google.com/b…

1
Evo Nordics #671 - Resistance To Readiness Leading Change In SAP Implementations 37:12

8h ago37:12

37:12

Today's episode is hosted by Ethan Little and they are joined on the podcast by Anupam Goyal, Head of Finance Core at Scania Group, Ramu Katepalli, SAP Global Program Manager at HCLTech and Halvor Belbo Lukerstuen, Director of Human Experience Management at NTT DATA Business Solutions Nordics. The conversation explores how organisations move from r…

1
SANS Stormcast Friday, December 5th, 2025: Compromised Govt System; React Vuln Update; Array Networks VPN Attacks 4:35

11h ago4:35

4:35

Nation-State Attack or Compromised Government? [Guest Diary] An IP address associated with the Indonesian Government attacked one of our interns' honeypots. https://isc.sans.edu/diary/Nation-State%20Attack%20or%20Compromised%20Government%3F%20%5BGuest%20Diary%5D/32536 React Update Working exploits for the React vulnerability patched yesterday are n…

1
SANS Stormcast Thursday, December 4th, 2025: CDN Headers; React Vulnerabiity; PickleScan Patch 6:44

1d ago6:44

6:44

Attempts to Bypass CDNs Our honeypots recently started receiving scans that included CDN specific headers. https://isc.sans.edu/diary/Attempts%20to%20Bypass%20CDNs/32532 React Vulnerability CVE-2025-55182 React patched a critical vulnerability in React server components. Exploitation is likely imminent. https://react.dev/blog/2025/12/03/critical-se…

1
SANS Stormcast Wednesday, December 3rd, 2025: SmartTube Compromise; NPM Malware Prompt Injection Attempt; Angular XSS Vulnerability 6:06

2d ago6:06

6:06

SmartTube Android App Compromise The key a developer used to sign the Android YouTube player SmartTube was compromised and used to publish a malicious version. https://github.com/yuliskov/SmartTube/issues/5131#issue-3670629826 https://github.com/yuliskov/SmartTube/releases/tag/notification Two Years, 17K Downloads: The NPM Malware That Tried to Gas…

1
Technical Series: How to Build SAP Single Roles 8:28

3d ago8:28

8:28

Listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP. In our latest technical series episode, we unpack one of the most important building blocks in SAP authorisations: single roles. Our experts explore the different ways organisations design single roles to balance provisioning efficienc…

1
SANS Stormcast Tuesday, December 2nd, 2025: Analyzing ToolShell from Packdets; Android Update; Long Game Malicious Browser Ext. 5:49

3d ago5:49

5:49

Hunting for SharePoint In-Memory ToolShell Payloads A walk-through showing how to analyze ToolShell payloads, starting with acquiring packets all the way to decoding embedded PowerShell commands. https://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Hunting%20for%20SharePoint%20In-Memory%20ToolShell%20Payloads/32524 Android Security Bulletin December 20…

1
Unlocking Data Protection: Vishnu Varma on Cybersecurity Challenges 53:55

4d ago53:55

53:55

Send us a text In this episode, Joe sits down with Vishnu Varma to explore the evolving landscape of cybersecurity and data management. Vishnu shares his journey from India to the US, detailing his experiences at Cisco and the rise of cloud security. They delve into the challenges of managing vast amounts of data in the age of AI, discussing how Bo…

1
SANS Stormcast Monday, December 1st, 2025: More ClickFix; Teams Guest Access; Geoserver XXE Vulnerablity 5:42

4d ago5:42

5:42

Fake adult websites pop realistic Windows Update screen to deliver stealers via ClickFix The latest variant of ClickFix tricks users into copy/pasting commands by displaying a fake blue screen of death. https://www.acronis.com/en/tru/posts/fake-adult-websites-pop-realistic-windows-update-screen-to-deliver-stealers-via-clickfix/ B2B Guest Access Cre…

1
Evo Nordics #670 - Regulation V Innovation - How To Avoid A Red Flag Scenario In Legislation 55:54

8d ago55:54

55:54

Today's episode is hosted by Chris Hackett and they are joined on the podcast by Maryem Nasri, Global Data Governance Coordinator at Ericsson, Diane Reynolds, Head of Business Development Group Risk at SEB and Mathias Goeltzner, Regional OBS Coordinator at Tesla.The conversation explores how organisations navigate the tension between regulation and…

1
Evo Nordics #669 - Engaging Senior Leadership To The Importance Security & GRC 49:26

8d ago49:26

49:26

Today's episode is hosted by Chris Hackett and they are joined on the podcast by Christopher Bosch, CISO at Evolved Aerospace and Elisia Chessel, Senior Security Architect at Klarna.The conversation explores how organisations can strengthen their approach to security and GRC by effectively engaging senior leadership. Through a broad discussion on c…

1
Evo Nordics #668 - Happy Developers Make Happy Code 35:40

8d ago35:40

35:40

Today's episode is hosted by Alvin Boampong and they are joined on the podcast by Shrutakeerti Behura, Technical Lead at Volvo Cars and Fredrik Vanbruggen, DevOps Lead at Precise Biometrics.The conversation explores how organisations can cultivate environments where developers feel motivated, supported and empowered to excel. By examining practical…

1
SANS Stormcast Wednesday, November 26th, 2025: Attacks Against Messaging; Passwords in Random Websites; Fluentbit Vuln; #thanksgiving 6:07

9d ago6:07

6:07

Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications Spyware attacks messaging applications in part by triggering vulnerabilities in messaging applications but also by deploying tools like keystroke loggers and screenshot applications. https://www.cisa.gov/news-events/alerts/2025/11/24/spyware-allows-cyber-threat-actors-targ…

1
SANS Stormcast Tuesday, November 25th, 2025: URL Mapping and Authentication; SHA1-Hulud; Hacklore 6:11

10d ago6:11

6:11

Conflicts between URL mapping and URL based access control. Mapping different URLs to the same script, and relying on URL based authentication at the same time, may lead to dangerous authentication and access control gaps. https://isc.sans.edu/diary/Conflicts%20between%20URL%20mapping%20and%20URL%20based%20access%20control./32518 Sha1-Hulud, The Se…

1
From Sewers To Subsea: Rethinking Data Centers And Defense 52:57

11d ago52:57

52:57

Send us a text We trace a winding path from offshore rigs to elite red team ops and into subsea data centers, using one sewer-side breach as the spark for a new way to secure and scale compute. Along the way we unpack social engineering basics, the blue vs red culture clash, and whether AI is building features or changing outcomes. • junk folders, …

1
Episode 25: AI Won’t Save You - Jon Reed on the Real Work Behind Transformation 1:42:29

11d ago1:42:29

1:42:29

Guest: Jon Reed - CoFounder diginomica - Enterprise Analyst Host: Alexander Greb - Consulting Director - cbs corporate business solutions Summary: In this conversation, Jon Reed discusses the role of AI in business transformation, emphasizing that AI should be viewed as an accelerant rather than a standalone solution. He highlights the importance o…

1
SANS Stormcast Monday, November 24th, 2025: CSS Padding in Phishing; Oracle Identity Manager Scans Update; 4:59

11d ago4:59

4:59

Use of CSS stuffing as an obfuscation technique? Phishing sites stuff their HTML with benign CSS code. This is likely supposed to throw of simple detection engines https://isc.sans.edu/diary/Use%20of%20CSS%20stuffing%20as%20an%20obfuscation%20technique%3F/32510 Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day Early exploit attem…

1
Evo Nordics #667 - The Future Of Security & AI 44:46

15d ago44:46

44:46

Today's episode is hosted by Chris Hackett and they are joined on the podcast by Staffan Fredriksson, CISO at Regent AB, Konrad Jelen, Director of Data & AI at KOLOMOLO and Johan Lido, Chief Architect and Architect Manager at AFA Försäkring.The conversation explores the evolving intersection of security and AI, reflecting on how organisations can r…

1
Evo Nordics #666 - Building & Leading High-Performing Cloud Teams 51:31

15d ago51:31

51:31

Today's episode is hosted by Alvin Boampong and they are joined on the podcast by Sara Razavi, Solutions & Cloud Ecosystem Program Lead at Ericsson, Vikas Kumar, Senior Cloud Advisor and Irfan Shadeque, Business Infrastructure Manager at Volvo Group.The conversation explores how organisations can build and lead high-performing cloud teams that supp…

1
Evo Nordics #665 - Future-Proof Strategy - Thriving Through Turbulence 40:53

15d ago40:53

40:53

Today's episode is hosted by Ethan Little and they are joined on the podcast by Jonas Grahm, Strategy Execution Data Management & Owner at Orbiting Portfolio, Mathias Arvidsson, Cofounder & CEO at Norrminds and Pritam Sarkar, IT Manager at Scania.The conversation explores how leaders can build a future-proof strategy that supports long-term resilie…

1
Evo Nordics #664 - Scaling Teams - Lessons From Startups To Enterprises 59:08

15d ago59:08

59:08

Today's episode is hosted by Georgia Benton and they are joined on the podcast by Valeria Viana Gusmao, Senior Technical Lead & Engineering Manager at Strawberry, Sarwarul Rizvi, Engineering Manager at Keystone Education Group, Sunilraj Sudhakar, Product Coach & Business Agility Consultant at Ericsson and Sawan Budhbhatti, General Manager & Softwar…

1
SANS Stormcast Friday, November 21st, 2025: Oracle Idendity Manager Scans; SonicWall DoS Vuln; Adam Wilson (@sans_edu) reducing prompt injection. 14:09

14d ago14:09

14:09

Oracle Identity Manager Exploit Observation from September (CVE-2025-61757) We observed some exploit attempts in September against an Oracle Identity Manager vulnerability that was patched in October, indicating that exploitation may have occurred prior to the patch being released. https://isc.sans.edu/diary/Oracle%20Identity%20Manager%20Exploit%20…

1
SANS Stormcast Thursday, November 20th, 2025: Unicode Issues; FortiWeb More Vulns; DLink DIR-878 Vuln; Operation WrtHug and ASUS Routers 6:34

15d ago6:34

6:34

Unicode: It is more than funny domain names. Unicode can cause a number of issues due to odd features like variance selectors and text direction issues. https://isc.sans.edu/diary/Unicode%3A%20It%20is%20more%20than%20funny%20domain%20names./32472 FortiWeb Multiple OS command injection in API and CLI A second silently patched vulnerability in FortiW…

1
SANS Stormcast Wednesday, November 19th, 2025: Kong Tuke; Cloudflare Outage 4:38

16d ago4:38

4:38

KongTuke Activity This diary investigates how a recent Kong Tuke infections evolved all the way from starting with a ClickFix attack. https://isc.sans.edu/diary/KongTuke%20activity/32498 Cloudflare Outage Cloudflare suffered a large outage today after an oversized configuration file was loaded into its bot protection service https://x.com/dok2001 G…

1
SANS Stormcast Tuesday, November 18th, 2025: Binary Expression Decoding. Tea NPM Pollution; IBM AIX NIMSH Vulnerability 4:58

17d ago4:58

4:58

Decoding Binary Numeric Expressions Didier updated his number to hex script to support simple arithmetic operations in the text. https://isc.sans.edu/diary/Decoding%20Binary%20Numeric%20Expressions/32490 Tea Token NPM Pollution The NPM repository was hit with around 150,000 submissions that did not contain any useful contributions, but instead atte…

1
Inside The Global Push For Offensive Cyber And Smarter Defense 45:32

18d ago45:32

45:32

Send us a text We trace how cyber policy tries to catch up with fast-moving threats, from decades-old laws to a new push for offensive capabilities. Along the way, we unpack what real resilience looks like for SMEs, critical infrastructure, and the talent pipeline that holds it all together. • Verona’s route from public policy to cybersecurity • Wh…

1
Episode 24: Formula 1 Pitlane Lessons for SAP Transformations - Marc Priestley 1:10:32

18d ago1:10:32

1:10:32

Guest: Marc Priestley - Ex-Chief Mechanic - McLaren Racing Formula One Host: Alexander Greb - Consulting Director - cbs corporate business solutions Summary: Former McLaren Chief Mechanic Marc Priestley reveals how World Champion Formula One teams think, innovate, and adapt under extreme pressure — and why that mindset is exactly what most SAP tran…

1
SANS Stormcast Monday, November 17th, 2025: New(isch) Fortiweb Vulnerability; Finger and ClickFix 7:10

18d ago7:10

7:10

Fortiweb Vulnerability Fortinet, with significant delay, acknowledged a recently patched vulnerability after exploit attempts were seen publicly. https://isc.sans.edu/diary/Honeypot+FortiWeb+CVE202564446+Exploits/32486 https://labs.watchtowr.com/when-the-impersonation-function-gets-used-to-impersonate-users-fortinet-fortiweb-auth-bypass/ https://fo…

1
Evo Nordics #663 - The Evolution Of Work - How Change Drives Businesses Forward 1:02:37

23d ago1:02:37

1:02:37

Today's episode is hosted by Ethan Little and they are joined on the podcast by Johan Söderström, Senior Advisor and Enterprise Lead at Implema, Toni Forsberg, Digital Transformation Manager for Global Finance at Ericsson, Vaishnavi Kumar, Program Manager for Data AI Analytics SAP Master Data at H&M Group and Halvor Belbo Lukerstuen, Director of Hu…

1
Evo Nordics #662 - Visionary Voices 40:47

23d ago40:47

40:47

Today's episode is hosted by Sophie Gould and they are joined on the podcast by Erik Zindel, VP Hydrogen & Decarbonization Strategy at Siemens Energy.The conversation explores how organisations are shaping the future of sustainable energy through long-term thinking and visionary leadership. As the discussion unfolds, it highlights the strategic rol…

1
Evo Nordics #661 - Next Generation Dynamics - Innovation In Real Time 53:04

23d ago53:04

53:04

Today's episode is hosted by Martha Rayner and they are joined on the podcast by Alfez Lindström, CX Solution Architect / Retail Lead, Microsoft Dynamics at Fujitsu, Ove Bristrand, Digital Business Manager and Owner at NetIntegrate and Fredrik Lindgren, Senior Sales Executive, AI Business Process at Microsoft Sweden.The conversation explores how ne…

1
Evo Nordics #660 - Future Proofing The Dynamics Consultant - Skills Tools & Trends You Need In 2025 40:55

23d ago40:55

40:55

Today's episode is hosted by Martha Rayner and they are joined on the podcast by Mårten Damm, Senior Consultant M-Files at Columbus, Joe Mehanna, Project & Service Delivery Manager at Fellowmind Sverige, and Shruti Moudgil, Regional Implementation Manager at Scania Group.The conversation explores the evolving role of Dynamics consultants, highlight…

1
Evo Nordics #659 - Is AI Replacing Our Jobs 43:42

23d ago43:42

43:42

Today's episode is hosted by Sam Russell and they are joined on the podcast by Hanna Isacson, Product Manager, AI & Automation at ICA Gruppen, Nicolas Nikula, Director, Analytics / Processes / Systems at Fiskars Group, and Ata Marzban, Team Lead, Engineering & AI Product at Klarna Bank.The conversation explores the impact of artificial intelligence…

1
Evo Nordics #658 - Balancing Cloud Innovation With Cost Efficiency 52:30

23d ago52:30

52:30

Today's episode is hosted by Alvin Boampong and they are joined on the podcast by Markus Kamarik, Head of Infrastructure at OptiGroup, Garun Awasthi, Cloud Specialist at SEB, Albina Abdulina, Head of Cloud Integration at Keolis Sverige AB, and Viktor Junling, Head of Cloud CoE at If Insurance.The conversation explores balancing cloud innovation wit…

1
Cloud Detection Engineering, AI in the SOC and Parallel Parking with Alex Hurtado 25:38

21d ago25:38

25:38

Detection engineering just got real! Eden Naftali and Amitai sit down with detection engineering powerhouse Alex Hurtado - and it's a must-listen for anyone in cloud security. 👇 🔍 What's inside: The evolution of detection engineering in the cloud — and why traditional rules no longer apply Why DIY detections > vendor defaults How AI is reshaping de…

1
SANS Stormcast Friday, November 14th, 2025: SmartApeSG and ClickFix; Formbook Obfuscation Tricks; Sudo-rs Vulnerabilities; SANS Holiday Hack Challenge 10:09

21d ago10:09

10:09

SmartApeSG campaign uses ClickFix page to push NetSupport RAT A detailed analysis of a recent SamtApeSG campaign taking advantage of ClickFix https://isc.sans.edu/diary/32474 Formbook Delivered Through Multiple Scripts An analysis of a recent version of Formbook showing how it takes advantage of multiple obfuscation tricks https://isc.sans.edu/diar…

1
SANS Stormcast Thursday, November 13th, 2025: OWASP Top 10 Update; Cisco/Citrix Exploits; Test post quantum readiness 6:33

22d ago6:33

6:33

OWASP Top 10 2025 Release Candidate OWASP published a release candidate for the 2025 version of its Top 10 list https://owasp.org/Top10/2025/0x00_2025-Introduction/ Citrix/Cisco Exploitation Details Amazon detailed how Citrix and Cisco vulnerabilities were used by advanced actors to upload webshells https://aws.amazon.com/blogs/security/amazon-disc…

1
KI, Sicherheit und Compliance: Eine neue industrielle Dreifaltigkeit (German) 17:12

25d ago17:12

17:12

Künstliche Intelligenz verändert die Innovationsprozesse von Unternehmen – aber nur, wenn sie sicher ist. In diesem Gespräch erklärt Stefan Bamberg, Director Sales and Key Account Management bei Wibu-Systems, wie Schutz, Lizenzierung und Compliance das Fundament für vertrauenswürdige KI und nachhaltige Geschäftsmodelle bilden. Highlights: Die doppe…

1
Technical Series: Basic SAP Authorisation Concepts - SAP Transactions & Fiori Applications, Authorisation Objects, Fields and Values 12:24

24d ago12:24

12:24

Watch or listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP. Introducing Our Technical Series: The Building Blocks of SAP Role Design. In the first episode of our new Technical Series, we unpack the foundations of SAP authorisations — what they are, how they function, and why they matte…

1
Technical Series: Authorisation Default Values 8:29

24d ago8:29

8:29

Watch or listen to the SAP Security & GRC podcast – helping you on your journey to effective access risk management in SAP. In our latest technical podcast episode, we dive deep into a crucial piece of the SAP authorisation puzzle — authorisation default values. You’ll discover: How authorisation defaults determine which checks are performed during…

1
SANS Stormcast Tuesday, November 11th, 2025: 3CX Related Scans; Watchguard Default Password; 7:25

24d ago7:25

7:25

It isn t always defaults: Scans for 3CX Usernames Our honeypots detected scans for usernames that may be related to 3CX business phone systems https://isc.sans.edu/diary/It%20isn%27t%20always%20defaults%3A%20Scans%20for%203CX%20usernames/32464 Watchguard Default Password Controversy A CVE number was assigned to a default password commonly used in W…

1
The FUTURE of Device Authentication is Here NOW 45:11

26d ago45:11

45:11

Send us a text We explore why most breaches are identity failures and how to flip the model with hardware-backed, device-bound credentials that never move. Jason shares global threat trends, startup lessons, and a blueprint for preventing credential theft across people, agents, and machines. • life on the road, burnout signals and recovery • global…

1
SANS Stormcast Monday, November 10th, 2025: Code Repo Requests; Time Delayed ICS Attacks; Encrypted LLM Traffic Sidechannel Attacks 7:06

25d ago7:06

7:06

Honeypot Requests for Code Repository Attackers continue to scan websites for source code repositories. Keep your repositories outside your document root and proactively scan your own sites. https://isc.sans.edu/diary/Honeypot%3A%20Requests%20for%20%28Code%29%20Repositories/32460 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads Ne…

1
Evo Nordics #657 - Where AI Meets DevOps & Test 46:35

30d ago46:35

46:35

Today's episode is hosted by Alvin Boampong and they are joined on the podcast by Tanusree Mukherjee, Test & Release Manager at Ericsson, Kalyan Routhu, DevOps Lead and AI Area Lead, Christoffer Forsberg, Cloud Manager at Infor, and Miguel Chourio, Team Lead at Ericsson.The conversation explores the evolving role of DevOps in modern technology ecos…

1
Evo Nordics #656 - What's Next For Cloud Strategy For The Nordics 1:06:06

30d ago1:06:06

1:06:06

Today's episode is hosted by Alvin Boampong and they are joined on the podcast by Alok Gupta, System Manager for Cloud and NFVI at Ericsson, Jimmy Stahl, Senior Cloud Architect at Länsförsäkringar, Can Onatli, Head of IT Infrastructure & Operations at Life Europe AB, and Praveen Joshi, Head of Technology Business Operations at Ericsson.The conversa…

1
Evo Nordics #655 - Building Self Sufficient Teams 40:35

30d ago40:35

40:35

Today's episode is hosted by Georgia Benton and they are joined on the podcast by Tomas Duhourq, Engineering Manager at Spotify, Kaia Hillier, Director of Product Operations at Epidemic Sound, Ashley Westcott, Head of Product at Klarna, and Sunil Subramanian, Head of Product at Volvo.The conversation explores how technology leaders approach collabo…

1
VSCode Extension Secrets, RediShell, & Living-off-the-LLM 29:34

28d ago29:34

29:34

🔍 From discovering VS Code supply chain risks → to uncovering Redis Shell vulnerabilities. Eden Naftali and Amitai sat down to unpack: 👇 How VS Code extensions became a critical supply chain risk (w/ Rami McCarthy) What RediShell reveals about attacker innovation Where AI is being weaponized in modern malware 🎙️ Listen now to our NEW Crying Out Clo…

1
SANS Stormcast Friday, November 7th, 2025: PowerShell Log Correlation; RondoBox Disected; Google Chrome and Cisco Patches 5:31

28d ago5:31

5:31

Binary Breadcrumbs: Correlating Malware Samples with Honeypot Logs Using PowerShell [Guest Diary] Windows, with PowerShell, has a great scripting platform to match common Linux/Unix command line utilities. https://isc.sans.edu/diary/Binary%20Breadcrumbs%3A%20Correlating%20Malware%20Samples%20with%20Honeypot%20Logs%20Using%20PowerShell%20%5BGuest%20…

1
SANS Stormcast Thursday, November 6th, 2025: Domain API Update; Teams Spoofing; VShell Report 5:43

29d ago5:43

5:43

Updates to Domainname API Some updates to our domainname API will make it more flexible and make it easier and faster to get the complete dataset. https://isc.sans.edu/diary/Updates%20to%20Domainname%20API/32452 Microsoft Teams Impersonation and Spoofing Vulnerabilities Checkpoint released details about recently patched spoofing and impersonation v…