Sharing what we know
Our blog features articles written by SNOK experts - people who work day to day on projects in SAP, cybersecurity, automation, data and Enterprise AI.
We write about real project experience, analyse technology trends, and share our own perspective on solutions that genuinely affect how organisations operate. We like sharing what we know, because technology isn't just our line of work - it's something we're genuinely curious about.
Filter by category

From Risk to Resilience - securing the SAP landscape
A Lunch & Learn session held in Polish, co-hosted with SUSE for SAP teams responsible for security and business continuity. The programme follows the whole defence path of an SAP landscape: the operating system and virtualisation layer, user sign-on, and attack detection inside SAP itself. Lunch afterwards leaves time to talk to the team that recently completed an SAP security hardening project at a large public-sector institution and wrote up what it learned in the book "SAP Cybersecurity from A to Z".

Trick or Threat - Weekly Digest W44, Halloween edition
SNOK's review of 23-29 October 2026 in thirteen tarot cards: SAP TechEd and SAP Joule Work, Azure in dollars, SAP Joule Studio, PHP2Shell in CISA KEV, a fake Teams helpdesk, Gheist, OpenAI agents in tests, AGENTS.md, shadow AI, Gemini 4 Carbon, Qwen, Anthropic's S-1 and Apollo.

Quo vadis, AI - when we switch off the internet ourselves
On 21 October governments and institutions across Europe took parts of their own websites offline, because two PHP flaws found with the help of AI made it possible to take over the server. A column on how AI shortens the path from code to exploit, what that means for energy and telecoms, and why the ability to disconnect is becoming a core capability.

Golden record in MDM: record matching, survivorship rules and the data steward
A golden record for a customer, supplier, material or employee comes out of three separate decisions: which records describe the same thing, which value wins in each field, and who signs off the result. We build it alongside SAP, without replacing the ERP.

Shadow AI and AI agents at work - what UiPath governs and what stays outside the platform
AI agents reach organisations through five channels, and most of them bypass IT. We look at threats from outside and from within, the controls UiPath provides, the defaults worth changing on day one, and eight areas no automation platform will cover.

UiPath named a Leader in the Forrester Wave for process orchestration - trust in AI agents is designed into the process
UiPath is a Leader in The Forrester Wave: Adaptive Process Orchestration Software, Q3 2026. Forrester assessed whether platforms let organisations trust AI inside complex processes. What the evaluation covered, what it could not, and five design decisions we make on every UiPath Maestro project.

Fire in the foundations - weekly review W43
SNOK's review of 16-22 October 2026: PHP2Shell, the malicious LiteLLM release, Node.js and Oracle patches, AI models in vulnerability research, MITRE ATT&CK v20, OpenAI's agent reports, the Cairn campaign, NVIDIA OpenShell with SAP Joule Studio and UiPath Delegate.

UiPath Maestro explained: what it is, when to use it and what changed in September and October 2026
UiPath Maestro is the layer that runs a whole process: AI agents, robots, people and API calls. We cover the three canvases - BPMN, Case and Flow - where Orchestrator ends and Maestro begins, the September and October 2026 releases with their GA and Preview status, and the scenarios where Maestro earns its place.

Legacy is no longer just debt - the ECB letter, the Polish regulator and SAP ECC
By 31 October, banks supervised directly by the European Central Bank must submit an action plan against AI-enabled cyber threats, and legacy systems are part of it. Poland's financial regulator has set the same expectations for its whole market. Why an SAP ECC conversion date is not yet a protection plan.

Central ATC on SAP BTP - does one run also check ABAP code security?
During an SAP S/4HANA conversion, custom ABAP code checks move to the central ATC on SAP BTP. On 16 October SecurityBridge announced that its Code Risk Analyzer now runs in that same check run. What this changes in a conversion plan, and which new connection needs securing along the way.

Producer, director, screenwriter and occasional supporting actor - how we make films at SNOK
A company film no longer needs a studio, but it still needs a director. How our video workshop runs: scenes written as HTML pages in HyperFrames, voice and music from ElevenLabs, a second AI agent as reviewer and a human signing off every shot. Plus the story of NOK, which is SNOK minus the S.

Read the source, not the headline - weekly review W42
SNOK's review of 9-15 October 2026: SAP and Mistral AI, Patch Tuesday alongside SAP Security Patch Day, Nadella on models as insider risks, the SAP Security Baseline Template, outside agents, UiPath Agent review, OWASP GenAI, small local models and agents driving SAP GUI.
No articles match these filters.
