[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpiWKrZSE4IsZb9IC2QVqi66rdklswLg_mdPym8HijuA":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":18,"created_at":19,"published_at":20,"article":21,"tags":25,"podcasts":38},"fb494829-59f5-421f-b707-55d7337d166e","millions-of-ftp-servers-expose-data-through-lack-of-encryption","70fe56aa-012d-42d3-a754-c514444541fe","Millions of FTP Servers Expose Data Through Lack of Encryption","Despite being a 50-year-old protocol with well-known security flaws, FTP continues to be widely deployed without proper encryption, with 2.45 million internet-facing servers lacking encryption support. This exposes organizations to credential theft and data interception, as FTP transmits usernames, passwords, and file contents in plain text. The persistence of unencrypted FTP deployments demonstrates a critical failure in secure configuration practices and highlights the ongoing risk of using legacy protocols without proper security controls.","**Immediate actions:**\n- Audit all internet-facing FTP servers and identify those lacking encryption support\n- Implement FTPS or SFTP to replace unencrypted FTP services immediately\n- Disable or firewall FTP servers that cannot be secured until proper encryption is enabled\n\n**Long-term improvements:**\n- Establish security baselines requiring encryption for all file transfer protocols\n- Migrate legacy FTP implementations to modern secure file transfer solutions\n- Implement network segmentation to isolate file transfer services from public internet access\n\n**Monitoring measures:**\n- Deploy continuous scanning to detect unencrypted services on network perimeters\n- Monitor FTP traffic for unencrypted transmissions and credential exposure attempts",[12,13,14,15,16,17],"CIS Control 3.3","CIS Control 11.1","NIST SC-8","NIST SC-13","ISO 27001 A.13.1.1","GDPR Article 32","published","2026-04-20T10:09:08.885126+00:00","2026-04-20T10:09:08.782+00:00",{"id":7,"url":22,"slug":23,"title":24},"https:\u002F\u002Fwww.securityweek.com\u002Fhalf-of-the-6-million-internet-facing-ftp-servers-lack-encryption\u002F","half-of-the-6-million-internet-facing-ftp-servers-lack-encryption-a1d447","Half of the 6 Million Internet-Facing FTP Servers Lack Encryption",[26,32],{"id":27,"name":28,"slug":29,"description":30,"color":31},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":33,"name":34,"slug":35,"description":36,"color":37},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[]]