Report: Cybercriminals target difficult-to-secure ERP systems with new attacks

A joint report from Digital Shadows and Onapsis highlights a rising trend of attacks against ERP systems (SAP and Oracle), noting thousands of internet-facing ERP instances, active exploitation of known vulnerabilities (including a long-standing SAP flaw), credential leaks on public forums, and attacker use of discovery methods like Google Dorks and Shodan; the report details the risk to critical business data and offers mitigation guidance such as continuous vulnerability assessment, interface/API hardening, privileged-user monitoring, and threat-intelligence monitoring.