Best SAP Security Podcasts (2025)

1
SAP’s July 2025 Patch Day: Critical Flaws, CVE-2025-30012, and Ransomware Risk 1:02:01

Play Pause

1d ago1:02:01

1:02:01

In this episode, we break down SAP’s July 2025 Security Patch Day—a high-stakes moment for any enterprise relying on SAP’s core business applications. With 27 new and 4 updated security notes released, including seven rated as critical, this patch cycle directly targets some of the most serious vulnerabilities seen in SAP environments in recent mem…

1
SafePay Ransomware Rises, North Korea Adopts ClickFix 24:20

3h ago24:20

24:20

Resources: https://linktr.ee/ReliaQuestShadowTalk Have you heard of SafePay ransomware? Join host Kim along with intelligence analysts Hayden and John as they discuss: SafePay Targets Ingram Micro (1:16) Updates on Iran-Israel (5:43) North Korea Adopts ClickFix & Attacks Web3 (8:24) Insights from ReliaQuest Customer Incidents (13:14) Kim Bromley: S…

1
AI Double Agents to Blame, Scattered Spider Pivots to Planes 17:40

9h ago17:40

17:40

🎙️ Scattered Spider's new target? Airlines.Eden Koby Naftali & Amitai Cohen break down the latest in the cloud:1️⃣ A connectivity tool vuln & Open WebUI misconfig putting orgs at risk2️⃣ Why attackers are still tricking help desks (and how!)3️⃣ The "lethal trifecta" of AI agent danger, explained 🧠🤖0:25 – Scattered Spider targets the aviation indust…

1
SAP Uses Its Own Sustainability Tools to Boost Green Goals 2:25

3h ago2:25

2:25

In today's Cloud Wars Minute, I take a look at how SAP is advancing its sustainability agenda by becoming its own test subject. Highlights 00:03 — SAP has announced that it's utilizing its own sustainability software to further the company's sustainability goals by acting as the ultimate test subject. Its pushing the boundaries of its sustainabilit…

1
SANS Stormcast Wednesday, July 9th, 2025: Microsoft Patches; Opposum Attack; 7:44

12h ago7:44

7:44

Microsoft Patch Tuesday, July 2025 Today, Microsoft released patches for 130 Microsoft vulnerabilities and 9 additional vulnerabilities not part of Microsoft's portfolio but distributed by Microsoft. 14 of these are rated critical. Only one of the vulnerabilities was disclosed before being patched, and none of the vulnerabilities have so far been e…

1
Taiwan Sounds the Alarm: TikTok, WeChat, and the Chinese Data Threat 1:06:28

13h ago1:06:28

1:06:28

In this episode, we examine Taiwan’s growing alarm over Chinese mobile applications, especially TikTok and WeChat, in light of rising global concern over data privacy and foreign surveillance. A recent inspection by Taiwan’s National Security Bureau (NSB) revealed that these apps aggressively collect personal data and transmit it to servers located…

1
The Evolution of Atomic macOS Stealer: Backdoors, Keyloggers, and Persistent Threats 45:00

23h ago45:00

45:00

This episode exposes the growing menace of Atomic macOS Stealer (AMOS) — a rapidly evolving malware-as-a-service (MaaS) platform targeting macOS users worldwide. Once seen as a simple data stealer, AMOS has matured into a potent, long-term threat featuring keyloggers, a persistent backdoor, and system-level access, all designed to exfiltrate data a…

1
CitrixBleed Returns: CVE-2025-5777 and the Exploitation of NetScaler Devices 1:02:21

19h ago1:02:21

1:02:21

In this episode, we dissect CitrixBleed 2—a newly disclosed and actively exploited vulnerability affecting Citrix NetScaler ADC and Gateway appliances. Tracked as CVE-2025-5777 (and possibly also CVE-2025-6543), this critical flaw mirrors the notorious original CitrixBleed by allowing attackers to extract sensitive memory content, including user se…

1
SANS Stormcast Tuesday, July 8th, 2025: Detecting Filename (Windows); Atomic Stealer now with Backdoor; SEO Scams 5:29

1d ago5:29

5:29

What s My File Name Malware may use the GetModuleFileName API to detect if it was renamed to a name typical for analysis, like sample.exe or malware.exe https://isc.sans.edu/diary/What%27s%20My%20%28File%29Name%3F/32084 Atomic macOS infostealer adds backdoor for persistent attacks Malware analyst discovered a new version of the Atomic macOS info-st…

1
106GB Exposed? Telefónica, HellCat, and the Silent Data Breach 50:33

1d ago50:33

50:33

In this episode, we explore a shadowy and unconfirmed—but highly consequential—data breach at Spanish telecommunications giant Telefónica. Allegedly orchestrated by the HellCat ransomware group, the breach involves a staggering 106GB of exfiltrated data, including internal communications, customer records, and employee information. Telefónica has y…

1
Ingram Micro’s SafePay Ransomware Breach: Human-Operated Threats and Supply Chain Fallout 59:56

2d ago59:56

59:56

The recent ransomware attack on Ingram Micro, a global technology distribution giant, reveals not only a sophisticated human-operated cyber assault—but also the fragile state of modern supply chain cybersecurity. In this episode, we break down how attackers, believed to be affiliated with the SafePay ransomware group, penetrated Ingram Micro’s infr…

1
The Illusion of Shutdowns: What Hunters International's Closure Really Means 42:41

2d ago42:41

42:41

In a sudden and cryptic announcement, the notorious ransomware group Hunters International has declared its shutdown, citing “recent developments” and pledging to release decryption keys to victims. Active since late 2022 and suspected to be a rebrand of the earlier Hive ransomware gang, Hunters International has been responsible for attacks on nea…

1
CISA Flags CVE-2025-6554: Patching Chrome’s Critical Flaw Before It’s Too Late 40:49

2d ago40:49

40:49

A newly discovered and actively exploited zero-day vulnerability in Google Chrome has sent ripples through the cybersecurity community. Known as CVE-2025-6554, this critical type confusion flaw in Chrome’s V8 JavaScript and WebAssembly engine enables remote attackers to perform arbitrary read/write operations or execute code via a single malicious …

1
SANS Stormcast Monday, July 7th, 2025: interesting usernames; More sudo issues; CitrixBleed2 PoC; Short Lived Certs 5:48

2d ago5:48

5:48

Interesting ssh/telnet usernames Some interesting usernames observed in our honeypots https://isc.sans.edu/diary/A%20few%20interesting%20and%20notable%20ssh%20telnet%20usernames/32080 More sudo trouble The host option in Sudo can be exploited to execute commands on unauthorized hosts. https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-s…

1
ANSSI vs. Houken: France Battles Advanced Chinese Hacking Threat 33:16

5d ago33:16

33:16

In this episode, we uncover a high-stakes cyber campaign targeting the heart of French digital infrastructure. ANSSI, France’s national cybersecurity agency, has exposed a Chinese-linked hacking group known as Houken (UNC5174 or Uteus) responsible for a widespread espionage operation since late 2024. This state-adjacent threat actor infiltrated cri…

1
Psychological Manipulation and AI Fraud: How Spain Exposed a $12M Scam 17:21

5d ago17:21

17:21

In this episode, we examine a growing threat reshaping financial crime in Europe: sophisticated, technology-driven investment fraud. Spanish law enforcement has recently dismantled a fraud operation that spanned multiple years, deceived over 300 victims, and resulted in more than $11.8 million in losses. What made this case particularly notable was…

1
CVE-2025-20309: Critical Cisco Root Access Flaw Threatens VoIP Security 41:32

5d ago41:32

41:32

A devastating vulnerability—CVE-2025-20309—has been discovered in Cisco’s Unified Communications Manager (Unified CM) and its Session Management Edition (SME), threatening the security of over a thousand internet-exposed VoIP systems globally. In this episode, we break down this critical flaw, which scores a perfect CVSS 10.0, and explore why it's …

1
macOS Under Siege: NimDoor Malware Targets Telegram, Wallets, and Keychains 43:09

6d ago43:09

43:09

A new, highly advanced malware strain—NimDoor—has emerged as the latest cyber weapon in the arsenal of North Korean state-sponsored hackers, specifically targeting macOS systems used by cryptocurrency and Web3 organizations. This episode explores the complex tactics and alarming capabilities of NimDoor, a malware family showcasing a blend of C++ an…

1
Cisco Unified CM Vulnerability: Root Access Risk for Enterprise VoIP Networks 56:02

6d ago56:02

56:02

A newly disclosed vulnerability—CVE-2025-20309—in Cisco's Unified Communications Manager (Unified CM) and Session Management Edition has sent shockwaves through enterprise VoIP and IT security teams. The flaw stems from hardcoded root SSH credentials that could allow unauthenticated remote attackers to gain full control of affected systems. In this…

1
Forminator Flaw Exposes WordPress Sites to Takeover Attacks: Vulnerability Threatens 600,000+ Sites 50:32

6d ago50:32

50:32

A critical new WordPress vulnerability—CVE-2025-6463—has been discovered in the widely used Forminator plugin, affecting over 600,000 active installations and putting hundreds of thousands of websites at risk of full compromise. In this episode, we dive deep into the mechanics, risks, and remediation of this arbitrary file deletion flaw and explain…

1
Kelly Benefits Breach: Over 550,000 Victims and the Rising Identity Theft Crisis 1:08:04

6d ago1:08:04

1:08:04

In one of the latest large-scale data breaches to hit the U.S. private sector, Kelly Benefits, a provider of payroll and benefits administration services, disclosed a significant cybersecurity incident impacting over 553,000 individuals. The breach, which occurred in December 2024 but was only revealed in April 2025, exposed sensitive personal info…

1
AI Agents, Data Quality and the Next Era of Software Fit | Tinder on Customers 29:51

6d ago29:51

29:51

Bonnie Tinder is the founder and CEO of Raven Intelligence, an independent B2B peer review site that amplifies the voice of the customer. She focuses on software customers, consulting partners, and software vendors and helps identify the best partners for their needs. In this episode, Bonnie shares insights from a recent Salesforce event, exploring…

1
SANS Stormcast Thursday July 3rd, 2025: sudo problems; polymorphic zip files; cisco vulnerablity 5:20

6d ago5:20

5:20

Sudo chroot Elevation of Privilege The sudo chroot option can be leveraged by any local user to elevate privileges to root, even if no sudo rules are defined for that user. https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Polymorphic ZIP Files A zip file with a corrupt End of Central Directory Record may extract different …

1
FileFix, HTA, and MotW Bypass—The Alarming Evolution of HTML-Based Attacks 46:04

7d ago46:04

46:04

A newly disclosed exploit dubbed FileFix is redefining how attackers bypass Microsoft Windows' built-in security protections—specifically the Mark-of-the-Web (MotW) mechanism. Developed and detailed by security researcher mr.d0x, this attack takes advantage of how browsers save HTML files and how Windows handles HTA (HTML Application) files. The re…

1
Sophisticated Cyberattack on the International Criminal Court: Justice in the Crosshairs 19:37

7d ago19:37

19:37

The International Criminal Court (ICC), the world’s foremost tribunal for prosecuting war crimes, genocide, and crimes against humanity, has confirmed yet another sophisticated cyberattack, highlighting the persistent threat facing high-profile global institutions. This marks the second targeted intrusion against the ICC in recent years, and althou…

1
Critical Flaws in Microsens NMP Web+ Threaten Industrial Network Security 43:40

7d ago43:40

43:40

In a major red flag for the industrial cybersecurity community, three newly disclosed vulnerabilities in Microsens NMP Web+, a popular network management solution used across critical infrastructure, have revealed just how fragile many ICS environments remain. The flaws—two rated critical and one high—allow unauthenticated attackers to bypass authe…

1
Citrix Bleed 2, Scattered Spider Hits Aviation 26:51

7d ago26:51

26:51

Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Kim along with intelligence analysts Ivan and John as they discuss: Citrix Bleed 2 Scattered Spider Hits Aviation From ClickFix to FileFix Ransomware Threats from Q2 Kim Bromley: Senior Cyber Threat Intelligence Analyst on the ReliaQuest Threat Research Team. She joined ReliaQuest in June …

1
Ajay Patel Talks AI Strategy and Enterprise Adoption Trends | Cloud Wars Live 8:41

7d ago8:41

8:41

Ajay Patel is the General Manager of Apptio and IBM IT automation. He and Kieron Allen sat down to talk about how enterprises are transitioning from AI experimentation to real business impact. They explored key challenges like cost transparency, governance, and data readiness, as well as the rise of agentic AI to automate workflows at scale. Ajay a…

1
Qantas Data Breach: Third-Party Hack Exposes Millions of Frequent Flyers 24:36

7d ago24:36

24:36

In a stark reminder of the aviation industry's growing exposure to cyber threats, Australian airline Qantas recently confirmed a serious data breach—this time not from its own systems, but from a third-party platform used by one of its customer contact centers. The breach exposed personal data for up to six million customers, including names, dates…

1
Slack API Terms Update Restricts Data Exports and LLM Usage 2:02

7d ago2:02

2:02

Welcome to the Cloud Wars Minute — your daily cloud news and commentary show. Each episode provides insights and perspectives around the “reimagination machine” that is the cloud. In today’s Cloud Wars Minute, I dive into Slack’s bold move to restrict API access to bulk data exports, effectively blocking the use of its platform data for LLM trainin…

1
Berlin Regulator Targets DeepSeek AI Over Data Transfers to China 43:41

8d ago43:41

43:41

Germany’s battle over digital sovereignty and data privacy has intensified, with the Berlin Commissioner for Data Protection formally requesting that Google and Apple remove the DeepSeek AI application from their app stores. The move stems from allegations that DeepSeek, a Chinese-developed generative AI platform, violates the EU’s General Data Pro…

1
CISA Flags Citrix NetScaler Flaws: What CVE-2025-6543 Means for Federal and Private Networks 56:41

8d ago56:41

56:41

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Citrix NetScaler vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog—an urgent signal for federal agencies and private enterprises alike. At the center of this update is CVE-2025-6543, a memory overflow flaw affecting NetScaler ADC and Gateway appli…

1
Cato Networks Secures $359M to Fuel AI-Powered SASE Expansion 17:12

8d ago17:12

17:12

Cato Networks just raised $359 million in Series G funding, pushing its valuation past $4.8 billion and its total funding beyond the $1 billion mark—a milestone that cements its place as one of the most formidable players in the rapidly expanding Secure Access Service Edge (SASE) market. In this episode, we unpack what this massive investment means…

1
Chrome’s Latest Zero-Day: CVE-2025-6554 and Remote Code Execution Risks 54:24

8d ago54:24

54:24

A new high-severity zero-day vulnerability in Google Chrome—CVE-2025-6554—has sent shockwaves across the cybersecurity landscape. This episode dives into the technical details, real-world impact, and broader implications of this actively exploited flaw. Tracked as a type confusion bug in Chrome’s V8 JavaScript engine, the vulnerability allows attac…

1
SignUp Software Insights on Optimizing Dynamics 365 With ISV Partnerships 19:39

8d ago19:39

19:39

In this episode of the Office of the CFO Podcast, John Siefert hosts Rob Ashe, VP of North America, SignUp Software, and Blaine Grzegorek, Senior Solution Architect, Sikich, for a conversation on the benefits of partnering with ISVs, top considerations when selecting an ISV, and the impact of AI agents. Key Takeaways: Risks of building your own sol…

1
Hottest Cloud Vendors: Google Cloud Still #1, but Oracle, SAP Closing In 5:12

8d ago5:12

5:12

In today’s Cloud Wars Minute, I break down the latest growth rankings among the top 10 cloud providers, highlight Google Cloud’s continued lead, and show how legacy giants like Oracle and SAP are rapidly transforming into cloud powerhouses. Highlights 00:15 — I wanted to share with you the latest numbers for the Cloud Wars Growth Chart, where we ta…

1
Russia’s 16KB Curtain: Cloudflare Throttling and the Future of the RuNet 1:45:31

9d ago1:45:31

1:45:31

Russia has entered a new phase of digital authoritarianism. In a sweeping move, Russian Internet Service Providers (ISPs) have begun systematically throttling access to Cloudflare and other Western-backed services, including infrastructure giants Hetzner and DigitalOcean. This throttling is so severe that it restricts downloads to just 16 kilobytes…

1
Ahold Delhaize Data Breach: 2.2 Million Employee Records Exposed 37:44

9d ago37:44

37:44

Ahold Delhaize, one of the world’s largest food retailers, is now the subject of one of the most significant ransomware breaches in recent U.S. history. Affecting over 2.2 million current and former employees, this incident—claimed by the cybercrime group INC Ransom—highlights the rising threat posed by ransomware-as-a-service operations targeting …

1
Why Canada Banned Hikvision: National Security vs. Geopolitics 52:07

9d ago52:07

52:07

Canada has taken a definitive stance in the escalating global scrutiny of Chinese technology, ordering surveillance giant Hikvision to cease all operations within its borders. Citing national security concerns and acting on the advice of intelligence agencies, the Canadian government has banned the use of Hikvision products across its public sector…

1
Scattered Spider Takes Flight: Inside the Cybercrime Group’s Move into Aviation 43:38

9d ago43:38

43:38

As the aviation industry becomes more digitally interconnected, its exposure to sophisticated cyber threats continues to grow. One of the most dangerous actors in this space—Scattered Spider, a financially motivated and technically skilled cybercrime group—has recently shifted its focus to target the aviation sector. With recent incidents involving…

1
SANS Stormcast Monday June 30th, 2025: Scattered Spider; AMI BIOS Exploited; Secure Boot Certs Expiring; Microsoft Resliliency Initiative 7:29

9d ago7:29

7:29

Scattered Spider Update The threat actor known as Scattered Spider is in the news again, this time focusing on airlines. But the techniques used by Scattered Spider, social engineering, are still some of the most dangerous techniques used by various threat actors. https://cloud.google.com/blog/topics/threat-intelligence/unc3944-proactive-hardening-…

1
Fortnite and the FTC: How Epic Games Misled Players into Unwanted Purchases 54:56

12d ago54:56

54:56

In a landmark case that reshapes the conversation around digital ethics, the Federal Trade Commission’s $520 million settlement with Epic Games over its Fortnite monetization tactics highlights a critical issue facing the modern digital economy: the weaponization of interface design to manipulate users. Central to the case is the use of “dark patte…

1
Microsoft 365 Direct Send Exploited: How Phishing Emails Masquerade as Internal Messages 41:44

12d ago41:44

41:44

Phishing has long been a favored weapon of cybercriminals, but a recent revelation about Microsoft 365’s Direct Send feature has elevated the threat to a new level—from inside the firewall. Designed for internal systems to send notifications without authentication, Direct Send can be abused by malicious actors to spoof emails that appear to origina…

1
Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Risk 47:26

12d ago47:26

47:26

A critical flaw in the Open VSX Registry—an open-source alternative to the Visual Studio Code Marketplace—recently put over 8 million developers at risk of mass compromise. This vulnerability, discovered in the platform’s GitHub Actions workflow, exposed a super-admin publishing token that could have enabled malicious actors to overwrite or inject …

1
CitrixBleed 2: Critical NetScaler Vulnerability Enables Session Hijacking and MFA Bypass 18:41

12d ago18:41

18:41

A new critical vulnerability in Citrix NetScaler ADC and Gateway systems, dubbed CitrixBleed 2 (CVE-2025-5777), has emerged as a serious threat to remote access infrastructure. This memory exposure flaw allows unauthenticated attackers to extract session tokens directly from device memory — enabling session hijacking and even bypassing multi-factor…

1
SANS Stormcast Friday, June 27th, 2025: Open-VSX Flaw; Airoha Bluetooth Vulnerablity; Critical Cisco Identity Service Engine Vuln; 6:47

12d ago6:47

6:47

Open-VSX Flaw Puts Developers at Risk A flaw in the open-vsx extension marketplace could have let to the compromise of any extension offered by the marketplace. https://blog.koi.security/marketplace-takeover-how-we-couldve-taken-over-every-developer-using-a-vscode-fork-f0f8cf104d44 Bluetooth Vulnerability Could Allow Eavesdropping A vulnerability i…

1
OneClik Cyberattack Campaign Targets Energy Sector Using Microsoft ClickOnce and AWS 1:18:25

13d ago1:18:25

1:18:25

A sophisticated cyber-espionage campaign named OneClik is actively targeting energy, oil, and gas organizations using a combination of legitimate cloud infrastructure and novel attack techniques. The campaign, attributed to an unknown but likely state-affiliated actor, leverages Microsoft's ClickOnce deployment technology to deliver custom Golang-b…

1
Central Kentucky Radiology’s 2024 Data Breach Affects 167,000 51:40

13d ago51:40

51:40

In October 2024, Central Kentucky Radiology (CKR), a Lexington-based imaging provider, became the latest victim of a growing trend in healthcare cyberattacks. An unauthorized actor accessed CKR’s systems over a two-day period, compromising sensitive data for approximately 167,000 individuals. The stolen information includes names, Social Security n…

1
Bonfy.AI Launches $9.5M Adaptive Content Security Platform to Govern AI and Human Data 1:09:30

13d ago1:09:30

1:09:30

In a major development at the intersection of cybersecurity and AI governance, Israeli startup Bonfy.AI has officially launched its adaptive content security platform, backed by $9.5 million in seed funding. The company’s mission is bold and timely: to secure content generated by both humans and AI across modern SaaS ecosystems — including high-ris…

1
Zero-Day Level Cisco ISE Flaws: Urgent Patch Required for Enterprise Security 54:30

13d ago54:30

54:30

Cisco has disclosed two critical security vulnerabilities in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products, both earning a maximum CVSS severity score of 10.0. These flaws—CVE-2025-20281 and CVE-2025-20282—allow unauthenticated remote attackers to execute arbitrary commands on the underlying operating syst…