{"id":1512,"date":"2018-07-25T14:20:57","date_gmt":"2018-07-25T14:20:57","guid":{"rendered":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?p=1512"},"modified":"2019-06-26T19:50:33","modified_gmt":"2019-06-26T19:50:33","slug":"new-research-confirms-erp-applications-under-attack-by-cybercriminals","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/","title":{"rendered":"New Research Confirms ERP Applications are Under Attack by Cybercriminals"},"content":{"rendered":"

\"New<\/p>\n

This morning, new research<\/a> from digital risk management firm, Digital Shadows<\/a>, and ERP cybersecurity and compliance firm, Onapsis<\/a>, revealed evidence\u00a0that widely-used ERP applications are under attack by cybercriminals.<\/p>\n

The report shows a dramatic rise in cyberattacks on widely-used ERP applications such as SAP and Oracle<\/strong>, which combined currently have 9,000 known security vulnerabilities. Many large organizations have implemented ERP solutions from these vendors, relying on products such as SAP Business Suite, SAP S\/4HANA and Oracle E-Business Suite\/Financials.<\/p>\n

Enterprises reply on these applications to support important business processes like payroll, inventory management, manufacturing, financial planning, sales, logistics critical intellectual property, personally identifiable information (PII) from employees, customers and suppliers (among other sensitive information) and more.<\/p>\n
Widget not in any sidebars
\n

The report also provides in-depth evidence that well-known cybercriminals, nation-state actors and hactivists are expanding their operations and campaigns to target these high-value assets, which include\u00a0both hacking and distributed denial of service (DDoS) attempts.<\/p>\n

\u201cThis collaboration with Digital Shadows provides a breadth and depth of threat intelligence that is unprecedented,\u201d said Juan Pablo Perez-Etchegoyen, CTO at Onapsis. \u201cBy showing how these applications are being actively targeted by a variety of threat actors across different geographies and industries, we hope to overcome the misconceptions in the industry and help CIOs, CISOs and their organizations head off and manage the risk of wide-scale attacks on ERP applications, which could have a devastating impact, as well as macroeconomic implications.\u201d<\/span><\/p>\n

This research is considered so critical that the\u00a0<\/span>Department of Homeland Security\u2019s United States Computer Emergency Readiness Team (US-CERT) issued an alert today<\/span><\/a>\u00a0warning of the risk of these ERP application attacks. Attacks of this nature were first warned about in May 2016 when the\u00a0<\/span>US-CERT issued an alert<\/span><\/a>\u00a0advising of a significant threat that included\u00a0<\/span>the exploitation of 36 global organizations<\/span><\/a>\u00a0through the abuse of a then five-year-old vulnerability in SAP applications<\/span>.<\/span><\/p>\n

According to Digital Shadows, these warnings have been proven to\u00a0to be prescient with the new research revealing:<\/p>\n

Cybercriminal organizations are exploiting ERP applications, leveraging known vulnerabilities and targeting high-value assets such as SAP HANA.<\/span><\/p>\n

\n
    \n
  1. A 100 percent increase in the number of publicly-available exploits for SAP and Oracle ERP applications over the last three years.<\/li>\n
  2. A 160 percent increase in the activity and interest in ERP-specific vulnerabilities from 2016 to 2017.<\/li>\n<\/ol>\n<\/div>\n

    Well-known hacktivists and cyber criminal groups are expanding their tactics, techniques and procedures (TTPs) to now specifically target ERP applications.<\/span><\/p>\n

      \n
    1. H<\/span>acktivist groups, such as those affiliated with the Anonymous collective, have expanded their operations to include penetrating and disrupting mission-critical ERP platforms, having targeted these platforms in over\u00a0<\/span>nine operations since 2013.<\/span><\/li>\n
    2. Well-known malware kits such as Dridex are being evolved to steal user credentials and data from behind-the-firewall ERP applications.<\/li>\n
    3. Nation-state affiliated actors have been attributed for the compromise of ERP applications in order to access highly-sensitive information and\/or disrupt critical business processes.<\/li>\n<\/ol>\n

      In addition, cloud, mobile and digital transformations are rapidly expanding the ERP cyber attack environment. More than 17,000 SAP and Oracle ERP applications were found to be exposed on the internet, many running vulnerable versions and unprotected components, and threat actors are actively sharing information to take advantage of this opportunity, Digital Shadows reports.<\/p>\n

      Prior to this report, ERP cybersecurity issues had remained immensely ignored due to the lack of publicly-disclosed breaches and information about the threat actors.<\/p>\n

      \u201cThreat actors are continually evolving their tactics and targets to profit at the expense of organizations. On the one hand, with the type of data that ERP platforms hold, this isn\u2019t shocking. However, we were surprised to find just how real and severe the problem is,\u201d said Rick Holland, CISO and VP of Strategy at Digital Shadows.<\/span><\/p>\n

      Whether or not you have been affected, we encourage you to\u00a0download the report now<\/a>\u00a0for details of the research and the key actions you need to take.<\/span><\/p>\n

      \n

      Looking for more? Download our\u00a0<\/span>ERP buyers guide<\/a>\u00a0for free and compare the top-24 products available on the market with full page vendor profiles. The guide includes four key capabilities to look for in an ERP solution, plus five questions to ask yourself and five questions to ask the software provider before purchasing. It’s the perfect resource for anyone looking to find right ERP for their business\/organization.<\/span><\/p>\n

      And don’t forget to follow us on\u00a0Twitter<\/a>,\u00a0Facebook\u00a0<\/a>and\u00a0LinkedIn<\/a>\u00a0for all the latest in the ERP space!<\/em><\/p>\n

      \t\t\t

      \"Download<\/a> \"Download<\/a> \"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

      This morning, new research from digital risk management firm, Digital Shadows, and ERP cybersecurity and compliance firm, Onapsis, revealed evidence\u00a0that widely-used ERP applications are under attack by cybercriminals. The report shows a dramatic rise in cyberattacks on widely-used ERP applications such as SAP and Oracle, which combined currently have 9,000 known security vulnerabilities. Many large […]<\/p>\n","protected":false},"author":34,"featured_media":1513,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[378,123],"acf":[],"yoast_head":"\nNew Research Confirms ERP Applications are Under Attack by Cybercriminals<\/title>\n<meta name=\"description\" content=\"New research from Digital Shadows and Onapsis this morning confirms that widely-used ERP applications are under attack by cybercriminals.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Research Confirms ERP Applications are Under Attack by Cybercriminals\" \/>\n<meta property=\"og:description\" content=\"New research from Digital Shadows and Onapsis this morning confirms that widely-used ERP applications are under attack by cybercriminals.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/\" \/>\n<meta property=\"og:site_name\" content=\"Solutions Review | ERP\" \/>\n<meta property=\"article:published_time\" content=\"2018-07-25T14:20:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-26T19:50:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Elizabeth Quirk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Worktech_Review\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elizabeth Quirk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/\",\"name\":\"New Research Confirms ERP Applications are Under Attack by Cybercriminals\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg\",\"datePublished\":\"2018-07-25T14:20:57+00:00\",\"dateModified\":\"2019-06-26T19:50:33+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\"},\"description\":\"New research from Digital Shadows and Onapsis this morning confirms that widely-used ERP applications are under attack by cybercriminals.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg\",\"width\":800,\"height\":400,\"caption\":\"New Research Confirms ERP Applications are Under Attack by Cybercriminals\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New Research Confirms ERP Applications are Under Attack by Cybercriminals\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\",\"name\":\"Solutions Review | ERP\",\"description\":\"Software, Vendors, News and Reviews\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\",\"name\":\"Elizabeth Quirk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"caption\":\"Elizabeth Quirk\"},\"description\":\"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com\",\"sameAs\":[\"https:\/\/x.com\/Worktech_Review\"],\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New Research Confirms ERP Applications are Under Attack by Cybercriminals","description":"New research from Digital Shadows and Onapsis this morning confirms that widely-used ERP applications are under attack by cybercriminals.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/","og_locale":"en_US","og_type":"article","og_title":"New Research Confirms ERP Applications are Under Attack by Cybercriminals","og_description":"New research from Digital Shadows and Onapsis this morning confirms that widely-used ERP applications are under attack by cybercriminals.","og_url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/","og_site_name":"Solutions Review | ERP","article_published_time":"2018-07-25T14:20:57+00:00","article_modified_time":"2019-06-26T19:50:33+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg","type":"image\/jpeg"}],"author":"Elizabeth Quirk","twitter_card":"summary_large_image","twitter_creator":"@Worktech_Review","twitter_misc":{"Written by":"Elizabeth Quirk","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/","name":"New Research Confirms ERP Applications are Under Attack by Cybercriminals","isPartOf":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg","datePublished":"2018-07-25T14:20:57+00:00","dateModified":"2019-06-26T19:50:33+00:00","author":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546"},"description":"New research from Digital Shadows and Onapsis this morning confirms that widely-used ERP applications are under attack by cybercriminals.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#primaryimage","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg","contentUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2018\/07\/New-Research-Confirms-ERP-Applications-are-Under-Attack-by-Cybercriminals.jpg","width":800,"height":400,"caption":"New Research Confirms ERP Applications are Under Attack by Cybercriminals"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/new-research-confirms-erp-applications-under-attack-by-cybercriminals\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/"},{"@type":"ListItem","position":2,"name":"New Research Confirms ERP Applications are Under Attack by Cybercriminals"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/","name":"Solutions Review | ERP","description":"Software, Vendors, News and Reviews","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546","name":"Elizabeth Quirk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","caption":"Elizabeth Quirk"},"description":"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com","sameAs":["https:\/\/x.com\/Worktech_Review"],"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/1512"}],"collection":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/comments?post=1512"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/1512\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media\/1513"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media?parent=1512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/categories?post=1512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/tags?post=1512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}