Paul Laudanski
Paul Laudanski, Director of Security Research at Onapsis, brings to his role over twenty years of experience in cybersecurity, threat research and engineering, threat intelligence, and counterintelligence. Paul is also a member of the Onapsis Research Labs team and is dedicated to hunting down vulnerabilities within business critical applications which have helped to remediate over 1,000 zero day vulnerabilities within SAP and Oracle applications. Paul holds a BA in mathematics from Rider University and lives in Tacoma, Washington with his family.
Embedded SAP Security vs. Independent Platforms: A Risk-Based Guide
When securing SAP, a debate often arises: is it better to use an “embedded” tool that runs inside SAP or an “independent” platform that runs outside of it? While embedded tools seem convenient, they present significant risks. A truly resilient and effective SAP security strategy requires an independent, external platform. This approach provides superior resilience…
A Guide to Access Risk Management in SAP
Struggling with SAP access control? This definitive guide breaks down the four pillars of access risk management to help you prevent SoD conflicts and enforce least privilege.
Securing SAP Knowledge Management: Why Skipping Configuration Leads to Critical Risks
Learn why default SAP Knowledge Management (KM) configurations create critical security risks. Our guide covers 5 key settings to prevent vulnerabilities.
SAP Security in 2025: Protecting Your Enterprise from Modern Cyber ThreatsÂ
Discover how the SAP security landscape is evolving in 2025, driven by digital transformation, outsourcing, and sophisticated zero-day attacks. Learn why protecting your business-critical SAP systems from modern cyber threats is no longer a question of ‘if,’ but ‘when,’ and explore key steps for enterprise protection.
Revisiting CH4TTER: Takeaways One Year After this SAP Threat Landscape Report
Onapsis CTO & Onapsis Director of Security Research discusses learnings from one year after our SAP threat landscape report: CH4TTER.
Active Exploitation of SAP Vulnerability CVE-2017-12637
CISA warned organizations about the active exploitation of CVE-2017-12637. This known vulnerability was initially patched by SAP in 2017. However in some cases, installations could be exposed despite the patch being applied, as warned by SAP in 2024.
SAP Security Breach Cited as a Major Factor in Company’s Bankruptcy
Onapsis Director of Security Research discusses a recent case of an SAP security breach as a contributing factor in a company’s bankruptcy.
Year in Review: Risk & The Importance of SAP Application Protection
Onapsis Director of Security Research discusses trends in the SAP threat landscape, understanding the importance of SAP application protection, and the role of Onapsis Research Labs in ensuring a safer global economy.
Information Security and the Integrity of Financial Reporting
Securing Information Integrity and trust will always remain important in relationships and transactions. This requires that information is secure and simple to understand and that the process to produce that information is also secure. The Enron Scandal along with Arthur Andersen, their accounting firm are the lessons from which laws were created, such as the…