Agentic AI
,
Artificial Intelligence & Machine Learning
,
Black Hat

Onapsis Co-Founder and CEO Mariano Nunez on Why Cloud Migration Exposes SAP Systems

Michael Novinson (MichaelNovinson) •
August 11, 2026    

Mariano Nunez, CEO, co-founder, Onapsis

Attackers are increasingly targeting internet-exposed SAP systems as businesses migrate their operations to the cloud. This change strips away the network barriers that once protected these systems, handing adversaries direct, remote access to critical business data, said Mariano Nunez, co-founder and CEO of Onapsis.

See Also: AI Phishing Now Frighteningly Normal, Hard to Detect

SAP now underpins nearly 80% of global transaction revenue, making it an attractive target as businesses connect their systems to support B2B, B2C and AI-driven interfaces, Nunez said. That same connectivity, once reserved for internal users, now gives attackers a more direct route into business-critical applications without first needing to breach a corporate network.

“What leaders do is deploy compensating controls: Monitor for exploitation, reduce the attack surface and make sure artificial intelligence-generated code is scanned for defects before it goes into ERP and business platforms,” he said.

In this video interview with ISMG at Black Hat USA 2026, Nunez also discussed:

How AI slashes exploit development time from days to minutes;
Why AI-driven attacks no longer require deep SAP expertise;
Where enterprise ERP security controls fall short today.

Nunez drives cybersecurity strategy focused on protecting business-critical applications. He has more than 20 years of cybersecurity experience and developed the first open-source ERP penetration-testing framework. He has discovered critical vulnerabilities in SAP, Oracle, IBM and Microsoft applications.