Web Apps Are Becoming Less Secure

guest · Mar 12, 2019

Web Apps Are Becoming Less Secure
March 12, 2019
https://www.darkreading.com/vulnera...-apps-are-becoming-less-secure/d/d-id/1334143

Buggy Web applications continue to be one of the biggest security weaknesses for a majority of organizations. A new report shows that in fact, the problem actually appears to be getting worse.

Positive Technologies analyzed data from Web application security assessments that the company conducted for clients throughout 2018. The analysis showed a three-fold increase in the number of critical vulnerabilities present in Web applications compared to 2017.
More than two-thirds of the apps (67%) contained critical vulnerabilities such as insufficient authorization errors, arbitrary file upload, path traversal, and SQL injection flaws.

The cause is not easy to pinpoint. "But 83% of vulnerabilities are code vulnerabilities, and critically dangerous ones as well. This suggests that during development, not enough attention is paid to safety," Galloway says.
Click to expand...

Positive Technologies: number of critical vulnerabilities in web applications tripled in 2018

Floyd 57 · Mar 12, 2019

Update your dependencies boys and girls

guest · Jun 27, 2019

Positive Technologies: financial institutions' websites most frequently attacked
June 26, 2019
https://www.ptsecurity.com/ww-en/ab...stitutions-websites-most-frequently-attacked/

For this research, experts selected 140,000 attacks which targeted specific sites and created an attack chain². These chains make it possible to identify the attackers' steps.
The study showed that the three most common attacks are simple and effective: SQL Injection, Path Traversal, and Cross-Site Scripting³. However, the experts noted some peculiarities for specific sectors.

The experts also note that government institutions’ websites are still exposed to dangerous attacks aimed at gaining server control and stealing database information. This means gaining control of the attacked website, having access to the OS and to all files on the server.

Positive Technologies experts assert that all websites, regardless of sector, are attacked daily.
The report concludes that the greatest daily number of attack chains per application was found on the sites of financial institutions (151 chain) compared to other industries. Having visibility of the whole attack chain enables businesses to have a holistic overview of hacks to localize threats and protect resources more effectively.
Click to expand...

Attacks on web applications: 2018 in review

guest · Feb 14, 2020

A Positive Technologies study finds 82% of web application vulnerabilities lie in the source code
February 13, 2020
https://www.techrepublic.com/article/report-9-times-out-of-10-hackers-can-attack-website-visitors/

A recent report from Positive Technologies studied web application vulnerabilities and found that more than half of all sites have high-risk vulnerabilities.

The company's "Web Application Vulnerabilities and Threats: Statistics for 2019" report found signs that companies are beginning to prioritize security but are still failing to do everything necessary when protecting web applications and users.
Nine times out of 10, hackers are able to easily attack website visitors and 82% of web application vulnerabilities lie in the source code.

"Password-only authentication is a contributing factor in most authentication attacks. Lack of two-factor authentication makes attacks very easy," said Evgeny Gnedin, head of information security analytics at Positive Technologies.
The company's research found the average number of vulnerabilities per application has fallen by a third compared to 2018 and companies are taking security more seriously in not just public-facing web applications but in their internal ones, too.
Click to expand...

Positive Technologies: 82 Percent of Web Application Vulnerabilities are in the Source Code

Positive Technologies has released its report Web Application Vulnerabilities and Threats: Statistics for 2019, which found that 9 times out of 10, hackers can attack site visitors. Experts also found that 16 percent of applications contain vulnerabilities that allow attackers to take full control of the system, and on 8 percent of systems, full control of the web application server allowed attacking the local network.

With full access to the web server, hackers can also place their own content on the attacked site (deface it) or even attack site visitors - for example, by infecting their computers with malware.
Click to expand...

Log in or Sign up

Web Apps Are Becoming Less Secure

guest Guest

Floyd 57 Registered Member

guest Guest

guest Guest

Log in or Sign up

Web Apps Are Becoming Less Secure

guest Guest

Floyd 57 Registered Member

guest Guest

guest Guest

Useful Searches