Emanuela (Ema) Ionas is a Security Researcher at the Onapsis Research Labs, where she focuses on uncovering vulnerabilities within business-critical applications. With a technical foundation in DevSecOps, Ema transitioned to deep-dive security research to address the growing complexity of protecting enterprise systems. Based in Romania, she brings a creative approach to threat analysis, driven by a commitment to the “greater good” of cybersecurity.
Missing Authorization Checks, Information Disclosure, and Cross-Site Scripting (XSS) were the top three patched vulnerabilities in 2025. Missing Authorization Checks alone accounted for nearly one-third of all security notes, as many SAP functionalities fail to default to protected states. These flaws leave systems exposed to data theft, unauthorized modification, and service disruption, making timely application…