An ERP add-in is a software extension that connects to an enterprise resource planning (ERP) platform, such as Microsoft Dynamics, to provide extra features or link it with other systems. It may interact with business workflows and data such as project files, customer records, or operational information.
Because add-ins can have access to sensitive systems and information, they can become a security risk if their permissions, code, or supporting repositories are poorly protected. Attackers may target a vendor or its development and collaboration environments to seek access to data or connected services. Defenders should review add-in permissions, secure development and file-sharing systems, and monitor access to ERP-connected resources. A public ransomware claim involving an ERP supplier does not, by itself, prove that an add-in or ERP system was compromised.