[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:owasp\u002Ftop10-2021-a02":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"owasp","top10-2021-a02","A02:2021","A02:2021 Cryptographic Failures",17,"OWASP Foundation","**What it asks for.** This category, previously named Sensitive Data Exposure, focuses on failures related to cryptography that expose sensitive data. Examples include transmitting data in clear text, using old or weak algorithms or protocols, default or weak keys, missing certificate validation, poor randomness and storing passwords with fast or unsalted hashes.\n\n**In practice.** Organisations classify data to know what needs protection, encrypt sensitive data in transit and at rest with current algorithms, manage keys properly and avoid storing sensitive data that is not needed. Passwords are stored with adaptive, salted hashing. Evidence includes cryptographic standards, TLS configuration scans, key management procedures and data classification records.\n\n**Common gaps.** Internal traffic is often left unencrypted on the assumption that the network is trusted. Key management, rather than the algorithm, is frequently the weak point.",null,"https:\u002F\u002Fowasp.org\u002FTop10\u002FA02_2021-Cryptographic_Failures\u002F","Read it at OWASP","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"burger-king-japan-breach-exposes-11m-app-users-personal-data","Burger King Japan Breach Exposes 11M App Users' Personal Data","2026-10-16T15:20:48.695+00:00",{"slug":23,"title":24,"published_at":25},"gobalance-key-exposure-flaw-enables-onion-address-hijacking","GoBalance Key Exposure Flaw Enables .onion Address Hijacking","2026-10-09T10:20:58.801+00:00",{"slug":27,"title":28,"published_at":29},"weak-cryptographic-key-in-rejetto-hfs-enables-rce-via-session-forgery","Weak Cryptographic Key in Rejetto HFS Enables RCE via Session Forgery","2026-10-05T22:20:37.234+00:00",{"slug":31,"title":32,"published_at":33},"hardcoded-secrets-and-ai-credentials-outpacing-security-visibility","Hardcoded Secrets and AI Credentials Outpacing Security Visibility","2026-10-05T14:21:26.33+00:00",{"slug":35,"title":36,"published_at":37},"rejetto-hfs-prng-flaw-enables-cookie-forgery-and-rce-patch-now","Rejetto HFS PRNG Flaw Enables Cookie Forgery and RCE — Patch Now","2026-10-05T12:20:56.256+00:00",{"slug":39,"title":40,"published_at":41},"rejetto-hfs-weak-prng-allows-admin-session-forgery-and-rce","Rejetto HFS Weak PRNG Allows Admin Session Forgery and RCE","2026-10-05T10:21:07.064+00:00",{"slug":43,"title":44,"published_at":45},"500000-active-credentials-exposed-in-public-github-repos","500,000 Active Credentials Exposed in Public GitHub Repos","2026-10-01T10:20:32.463+00:00",{"slug":47,"title":48,"published_at":49},"ai-coding-agents-are-doubling-the-rate-of-secrets-sprawl","AI Coding Agents Are Doubling the Rate of Secrets Sprawl","2026-09-24T19:22:35.3+00:00",{"slug":51,"title":52,"published_at":53},"hard-coded-key-in-solarwinds-arm-enables-unauthenticated-remote-code-execution","Hard-Coded Key in SolarWinds ARM Enables Unauthenticated Remote Code Execution","2026-09-19T12:21:10.728+00:00",{"slug":55,"title":56,"published_at":57},"hard-coded-jwt-key-in-issabel-pbx-enables-unauthenticated-remote-code-execution","Hard-Coded JWT Key in Issabel PBX Enables Unauthenticated Remote Code Execution","2026-09-16T18:21:17.685+00:00",{"slug":59,"title":60,"published_at":61},"critical-flaws-in-aveva-pipeline-integrity-monitor-expose-ics-environments","Critical Flaws in AVEVA Pipeline Integrity Monitor Expose ICS Environments","2026-09-10T17:20:25.415+00:00",{"slug":63,"title":64,"published_at":65},"9300-leaked-aws-keys-expose-corporate-accounts-to-full-takeover","9,300+ Leaked AWS Keys Expose Corporate Accounts to Full Takeover","2026-08-21T16:20:24.278+00:00",[67,72,77,81,86,91],{"slug":68,"name":69,"problem":70,"stories":71},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",10,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",7,{"slug":78,"name":79,"problem":80,"stories":76},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":82,"name":83,"problem":84,"stories":85},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",6,{"slug":87,"name":88,"problem":89,"stories":90},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",4,{"slug":92,"name":93,"problem":94,"stories":95},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",3,[97,103,108,114,118,123,127,131],{"family":98,"item":99,"code":100,"title":101,"together":102},"gdpr","32","Article 32","Security of processing",12,{"family":104,"item":105,"code":106,"title":107,"together":71},"cis","7","Control 7","Continuous Vulnerability Management",{"family":109,"item":110,"code":111,"title":112,"together":113},"nist-800-53","ia-5","IA-5","Authenticator Management",9,{"family":104,"item":115,"code":116,"title":117,"together":113},"4","Control 4","Secure Configuration of Enterprise Assets and Software",{"family":109,"item":119,"code":120,"title":121,"together":122},"si-2","SI-2","Flaw Remediation",8,{"family":124,"item":125,"code":126,"title":126,"together":122},"itil","overview","ITIL",{"family":104,"item":128,"code":129,"title":130,"together":85},"12","Control 12","Network Infrastructure Management",{"family":104,"item":132,"code":133,"title":134,"together":85},"16","Control 16","Application Software Security"]