https://snok.ai/en/news/blog/ Articles by SNOK Sp. z o.o. experts: SAP Security Patch Day, Security Tuesday, Tech Thursday, Weekly Digest, master data management and agentic automation. en-GB Fri, 14 Aug 2026 10:00:00 GMT https://snok.ai/en/news/blog/weekly-review-w33-what-comes-in-the-box/ https://snok.ai/en/news/blog/weekly-review-w33-what-comes-in-the-box/ Fri, 14 Aug 2026 10:00:00 GMT Jacek Bugajski SAP AI Security Agentic AI UiPath Cybersecurity NIS2 Mistral Nine items from the week of 7-13 August 2026: SAP's August bundle and the note you cannot install, Mistral on SAP's AI platform in a German data centre, the question of incremental value in RISE, a model OpenAI paused, an open-weight model that walked out of its evaluation sandbox, the anatomy of a validation gate, the rebuilt UiPath Community tier, a graph that records decision provenance, and the limits of running a large model on site. https://snok.ai/en/news/blog/sap-mdg-vs-informatica-mdm-after-acquisitions/ https://snok.ai/en/news/blog/sap-mdg-vs-informatica-mdm-after-acquisitions/ Thu, 13 Aug 2026 10:00:00 GMT Michał Korzeń MDM master data golden record SAP MDG Reltio Informatica SAP Business Data Cloud Gartner Salesforce acquired Informatica, SAP acquired Reltio. Within six months the two largest independent master data management platforms moved under application platform vendors. Here is the difference between SAP MDG and MDM, and the three questions to ask before you choose. https://snok.ai/en/news/blog/sap-patch-day-august-2026/ https://snok.ai/en/news/blog/sap-patch-day-august-2026/ Tue, 11 Aug 2026 13:00:00 GMT Michał Korzeń Safe Tuesday sap-security Patch Day SecurityBridge NIS2 CVE 31 items, four rated critical, a headline flaw at CVSS 10.0 - the top of the scale. The audit question is not whether you know about them. It is how long it takes you to go from published note to deployed patch, and what evidence you have. https://snok.ai/en/news/blog/secure-ai-generated-abap-securitybridge/ https://snok.ai/en/news/blog/secure-ai-generated-abap-securitybridge/ Mon, 10 Aug 2026 11:00:00 GMT Jarosław Zdanowski SAP ABAP SecurityBridge AI security NIS2 custom code An assistant generates ABAP faster than a human can read it, and pull requests co-authored with AI carry up to 2.74 times more security findings. Here are the seven mechanisms by which that code damages an SAP system, three layers of defence built on SecurityBridge, and an accountability model that answers the real question: who signs the transport. https://snok.ai/en/news/blog/securitybridge-sap-certified-s4hana-cloud-private-edition/ https://snok.ai/en/news/blog/securitybridge-sap-certified-s4hana-cloud-private-edition/ Mon, 10 Aug 2026 10:00:00 GMT Jacek Bugajski SAP SecurityBridge RISE with SAP S/4HANA SAP security The SAP Integration and Certification Center confirmed that SecurityBridge Platform 7 integrates with SAP S/4HANA Cloud Private Edition using standard integration technologies. What it changes in RISE projects, and what it does not cover. https://snok.ai/en/news/blog/ai-generated-abap-who-signs-the-transport/ https://snok.ai/en/news/blog/ai-generated-abap-who-signs-the-transport/ Mon, 10 Aug 2026 08:00:00 GMT Jacek Bugajski SAP ABAP AI security Clean Core custom code The barrier to writing code inside SAP disappeared faster than the gates that inspect it. On the new crowd of ABAP authors, on why the compiler was never a security test, and on the question that keeps coming back: who signs off on the assistant's work. A column by Jacek Bugajski. https://snok.ai/en/news/blog/weekly-review-w32-what-the-tool-can-do-and-what-it-is-allowed-to-do/ https://snok.ai/en/news/blog/weekly-review-w32-what-the-tool-can-do-and-what-it-is-allowed-to-do/ Fri, 07 Aug 2026 10:00:00 GMT Jacek Bugajski OWASP Agentic AI AI Security UiPath SAP Cybersecurity AI Act Seven items from the week of 31 July - 6 August 2026: the 2026 edition of the OWASP Top 10 for LLM applications moves Excessive Agency up to third place, Red Hat finds that only 31 percent of companies have mature oversight of agentic AI, UiPath shows Maestro Case numbers and Autopilot as a coding agent, Polish retailer Żabka confirms an incident through a vendor account, SAP calls agent sprawl a board-level issue, and agentic browsers still fall to hidden instructions. https://snok.ai/en/news/blog/uipath-document-understanding-26-7-coded-workflows/ https://snok.ai/en/news/blog/uipath-document-understanding-26-7-coded-workflows/ Thu, 06 Aug 2026 10:00:00 GMT Jacek Bugajski UiPath Document Understanding IXP coded workflows e-invoicing document automation The new Document Understanding preview closes three architectural gaps at once: document processing becomes callable straight from C# code, the extraction model travels through environments together with the automation, and the pipeline starts in the mailbox and ends with a redacted, compliant document. We explain what this changes. https://snok.ai/en/news/blog/lenovo-thinkstation-pgx-gb10-hands-on/ https://snok.ai/en/news/blog/lenovo-thinkstation-pgx-gb10-hands-on/ Wed, 05 Aug 2026 10:00:00 GMT Jacek Bugajski Lenovo ThinkStation PGX NVIDIA GB10 local LLM on-premise AI Hermes Agent Before it shipped to a client, a Lenovo ThinkStation PGX spent some time in our lab. 128 GB of unified memory, a 120-billion-parameter model running locally and an AI agent working entirely offline. Here is what is inside and what we learned. https://snok.ai/en/news/blog/quo-vadis-engineer/ https://snok.ai/en/news/blog/quo-vadis-engineer/ Tue, 04 Aug 2026 09:00:00 GMT Jacek Bugajski vibe coding AI software engineering security skills shadow IT AI agents column Code got cheap and judgment got expensive. A column by Jacek Bugajski on what is left of the engineer in the age of vibe coding: why our sense of speed lies to us, where the false sense of security of unread code comes from, and five questions to ask before generated code reaches production. https://snok.ai/en/news/blog/sap-data-breach-siem-blind-spot/ https://snok.ai/en/news/blog/sap-data-breach-siem-blind-spot/ Tue, 04 Aug 2026 09:00:00 GMT Michał Korzeń Safe Tuesday SAP security SecurityBridge SIEM data breach GDPR KSC NIS2 A valid logon, zero alerts, and over a few hours hundreds of thousands of customer records leave SAP. The SIEM will not see it, because it monitors the network and logons - not what a user does inside the application. And the regulator will ask for facts, not suppositions. https://snok.ai/en/news/blog/master-data-polish-enterprises-report/ https://snok.ai/en/news/blog/master-data-polish-enterprises-report/ Mon, 03 Aug 2026 08:00:00 GMT Michał Korzeń master data MDM KSeF e-invoicing S/4HANA data quality report Poland A 28-page SNOK report on master data in Polish companies: consolidation of the MDM market, mandatory e-invoicing as a daily test of customer records, the ERP migration calendar and what actually makes clean-up programmes work. Every figure carries its source. https://snok.ai/en/news/blog/weekly-review-w31-the-inventory-nobody-has/ https://snok.ai/en/news/blog/weekly-review-w31-the-inventory-nobody-has/ Fri, 31 Jul 2026 10:00:00 GMT Jacek Bugajski SAP Cybersecurity AI Agentic AI AISecurity NIS2 AI Act Eleven stories from the week of 27-31 July 2026 around a single question: what exactly is running in your systems, and what can you prove about it. A worm in Word documents spreads through Copilot, an Anthropic model cuts the cost of attacking a NIST candidate from 2⁶⁴ to 2³⁸, shared Claude conversations reach search engines, and NVIDIA gathers more than thirty companies into an alliance for open AI security tooling. https://snok.ai/en/news/blog/uipath-delegate-agent-for-a-person/ https://snok.ai/en/news/blog/uipath-delegate-agent-for-a-person/ Thu, 30 Jul 2026 10:00:00 GMT Jacek Bugajski UiPath Delegate computer use AI agents automation UiPath Labs governance Twenty years of enterprise automation rested on a single assumption: pick a process, document it, build a robot. UiPath Delegate moves the unit of automation from the process to the person - an employee shows a task once, on their own computer, and gets an executor. We explain how it works and how to use the coming weeks so that on launch day you start with a pilot instead of an analysis. https://snok.ai/en/news/blog/nis2-ksc-sap-register-by-3-october/ https://snok.ai/en/news/blog/nis2-ksc-sap-register-by-3-october/ Tue, 28 Jul 2026 11:00:00 GMT Jarosław Zdanowski Safe Tuesday SAP security SecurityBridge NIS2 KSC TrustBroker SAP NetWeaver Poland's amended cybersecurity act has been in force since 3 April 2026, and the application to the register of essential and important entities is due by 3 October. Most fines are deferred by two years, but the first audit in 2028 will ask for evidence from the period running right now. In most companies SAP produces no evidence at all, because nobody watches it. https://snok.ai/en/news/blog/data-factory-master-data-in-sixty-seconds/ https://snok.ai/en/news/blog/data-factory-master-data-in-sixty-seconds/ Tue, 28 Jul 2026 09:00:00 GMT Michał Korzeń MDM master data golden record deduplication video SAP S/4HANA data governance Master data has a built-in flaw: there is nothing to show. So we showed it as a production line. Sixty seconds on what happens to a record between the source system and the management report - and where the metaphor stops working. https://snok.ai/en/news/blog/master-data-after-twenty-years/ https://snok.ai/en/news/blog/master-data-after-twenty-years/ Mon, 27 Jul 2026 09:00:00 GMT Jacek Bugajski MDM master data golden record deduplication SAP S/4HANA Business Partner CVI From SAP MDM on the NetWeaver stack to a master data layer you can stand up in weeks. Why most MDM programmes fall short, what CVI actually does before an S/4HANA conversion, and how to measure your own duplicates before you invite anyone in. A column by Jacek Bugajski. https://snok.ai/en/news/blog/weekly-review-w30-model-that-cheated-its-own-exam/ https://snok.ai/en/news/blog/weekly-review-w30-model-that-cheated-its-own-exam/ Fri, 24 Jul 2026 10:00:00 GMT Jacek Bugajski SAP Cybersecurity AI Agentic AI UiPath AISecurity AI Act Twelve stories from the week of 21-24 July 2026 with one shared thread: capability is outpacing control. An OpenAI model escapes its sandbox, AI agents become an attack surface, a nine-year-old Linux kernel flaw grants root, SAP closes a strong quarter, and AMD and Lenovo enter the race for AI hardware. https://snok.ai/en/news/blog/hitl-gates-uipath-maestro-ai-trust-layer/ https://snok.ai/en/news/blog/hitl-gates-uipath-maestro-ai-trust-layer/ Thu, 23 Jul 2026 10:00:00 GMT Jacek Bugajski UiPath Maestro AI Trust Layer human-in-the-loop AI agents Action Center AI Act An AI agent can already prepare a payment, change vendor data and close a ticket. The real question is: who approved it? We show how human-in-the-loop gates are designed in UiPath Maestro and the AI Trust Layer - autonomy under control instead of an illusion of control. https://snok.ai/en/news/blog/sap-hardening-process-not-project/ https://snok.ai/en/news/blog/sap-hardening-process-not-project/ Tue, 21 Jul 2026 10:00:00 GMT Jarosław Zdanowski SAP hardening SAP security SAP Basis SAP* RFC SAP kernel NIS2 SAP audit Your company stands on documents, and those stand on the SAP foundation. In 90 seconds we show the five layers of hardening and why a single patch is not enough. https://snok.ai/en/news/blog/three-acts-of-sap-ai-agent-security/ https://snok.ai/en/news/blog/three-acts-of-sap-ai-agent-security/ Tue, 21 Jul 2026 10:00:00 GMT Jacek Bugajski SAP SAP Joule AI security GRC agentic AI From the launch of SAP Joule, through the AI units licensing currency, to a vision of more than 200 agents in the Autonomous Enterprise - and behind it all, a question about security, permissions and SOD that you have to ask before you sign. A column by Jacek Bugajski. https://snok.ai/en/news/blog/sap-testing-release-confidence-not-test-count/ https://snok.ai/en/news/blog/sap-testing-release-confidence-not-test-count/ Mon, 20 Jul 2026 10:00:00 GMT Jacek Bugajski SAP S/4HANA UiPath Test Cloud SAP testing quality engineering agentic testing The S/4HANA transformation changes the nature of testing: the question is no longer how many tests you ran, but whether you know what changed and which business processes are at risk. Six lessons from a UiPath webinar plus our own experience with UiPath Test Cloud. https://snok.ai/en/news/blog/gemini-cli-botnet-sap-mdm-flaws-ai-act-enforcement/ https://snok.ai/en/news/blog/gemini-cli-botnet-sap-mdm-flaws-ai-act-enforcement/ Fri, 17 Jul 2026 10:00:00 GMT Jacek Bugajski SAP Cybersecurity AI Agentic AI UiPath AISecurity AI Act The week the same mechanism that lowers the cost of work also lowered the cost of attack: a criminal rebuilt botnet infrastructure in six minutes by talking to a model, AI discovered previously unknown flaws in SAP MDM, and the AI Act is about to enter its next phase of application. https://snok.ai/en/news/blog/when-not-to-automate-rpa-failure/ https://snok.ai/en/news/blog/when-not-to-automate-rpa-failure/ Thu, 16 Jul 2026 10:00:00 GMT Jacek Bugajski RPA UiPath automation agentic AI The whole market keeps repeating: automate everything, bring in the AI agents. We make the opposite move. Here are four signs a process will burn your budget before it returns a single euro - and a simple test that catches them before you start. https://snok.ai/en/news/blog/sap-security-patch-day-july-2026/ https://snok.ai/en/news/blog/sap-security-patch-day-july-2026/ Tue, 14 Jul 2026 10:00:00 GMT Jarosław Zdanowski Safe Tuesday bezpieczenstwo-sap SecurityBridge SAP NetWeaver SAP Commerce Cloud NIS2 SAP has released its July security patch bundle: 16 new notes, 1 GitHub advisory and 3 updates to earlier notes. Four HotNews vulnerabilities lead the list, including a memory corruption flaw in NetWeaver AS ABAP with CVSS 9.9. Here is what to patch first. https://snok.ai/en/news/blog/rpa-vs-agentic-automation-skills/ https://snok.ai/en/news/blog/rpa-vs-agentic-automation-skills/ Mon, 13 Jul 2026 10:00:00 GMT Jacek Bugajski Agentic AI RPA UiPath skills recruitment RPA is not dying - it is shifting its place in the puzzle. Agents take over the thinking, robots stay for the doing, and the most interesting shift is happening in people. A personal, bird's-eye view of the market, teams and hiring. https://snok.ai/en/news/blog/build-ai-agent-uipath-production/ https://snok.ai/en/news/blog/build-ai-agent-uipath-production/ Thu, 09 Jul 2026 10:00:00 GMT Jacek Bugajski Tech Thursday ai-automation UiPath Maestro UiPath Agent Builder AI governance Building an AI agent is not a prompt and an API call - it is an engineering process with eight gates. We walk you through, step by step, how an agentic solution is built on UiPath: from process qualification, through BPMN visualisation, to production oversight. https://snok.ai/en/news/blog/jadepuffer-agentic-ransomware-sap-cve/ https://snok.ai/en/news/blog/jadepuffer-agentic-ransomware-sap-cve/ Tue, 07 Jul 2026 10:00:00 GMT Jarosław Zdanowski Safe Tuesday sap-security AI security ransomware SAP NetWeaver SecurityBridge UiPath Maestro Over the course of a few weeks, an AI agent stood on both sides of the attack: as JADEPUFFER, a fully autonomous ransomware, and as a tool companies are just letting into their SAP systems - under siege from a cascade of critical vulnerabilities. We explain why the difference is not the model, but the leash. https://snok.ai/en/news/blog/agentic-ransomware-sap-cve-ai-sovereignty/ https://snok.ai/en/news/blog/agentic-ransomware-sap-cve-ai-sovereignty/ Fri, 03 Jul 2026 10:00:00 GMT Jacek Bugajski SAP Cybersecurity AI Agentic AI UiPath AISecurity The week the first fully agentic ransomware appeared, SAP froze costs to fund an AI push, and the market started saying the same thing: an AI agent is a new attack surface, and the answer is control - over the model, the data and the governance layer. https://snok.ai/en/news/blog/claude-sonnet-5-uipath-agentic-automation/ https://snok.ai/en/news/blog/claude-sonnet-5-uipath-agentic-automation/ Thu, 02 Jul 2026 10:00:00 GMT Jacek Bugajski Tech Thursday AI Automation UiPath Maestro UiPath Agent Builder AI Trust Layer Anthropic priced Claude Sonnet 5 at a level that changes the calculus for agentic automation architects. For UiPath clients - Agent Builder, Coded Agents, Maestro - this is not an engine swap. It is a change in how many verification steps you can afford without breaking the budget.