Two security firms say hackers are targeting unpatched business systems from Oracle and SAP. The firms, Digital Shadows and Onapsis, said in a study released this week at least a dozen companies and government agencies have been targeted while thousands are subject to exploitation of old security flaws.