Hernán Formoso
Hernan Formoso is a passionate SAP Security Expert and Cybersecurity Advocate dedicated to defending the world’s most critical business applications. With deep expertise in vulnerability identification and advanced threat detection, Hernan leads cutting-edge research to secure complex SAP environments. He frequently discovers and responsibly discloses critical vulnerabilities, delivering specialized training to help global organizations navigate the ever-evolving cybersecurity landscape.
Kerberos & RC4 – What It Means for SAP Customers and How Onapsis Helps
Microsoft is changing how Windows Kerberos handles RC4, an old, insecure encryption algorithm that has historically been the default service ticket encryption for user-account SPNs (the category most SAP service accounts fall into) whose msDS-SupportedEncryptionTypes attribute is unset. The final enforcement phase begins July 2026. SAP environments with service accounts in this state, and keytabs…
SAP Patch Day: December 2024
Our team supported SAP in patching four vulnerabilities in December covered with two Notes, including the only HotNews Note of the month.