According to Neuroınform, in the first quarter of 2025, the number of security vulnerabilities among Russian retailers increased by 28% compared to the same period last year. Alexander Dmitriev, General Manager of the company, said that there is a violation of access to significant data and resources among the most common security deficits in the first place. This problem was not necessary to prevent passwords in web applications, 34% of all the discovered events, and 21% was not necessary for authentication problems in the APIs.
According to experts, violation of access control is one of the most dangerous security deficits because it directly threatens the security of the company’s infrastructure. The company’s experts found an internal data leakage such as IP addresses and access to public materials offered from the internet or access to configuration files. In addition, attackers also have the opportunity to easily access systems and start targeted attacks, and users with accounting in accounting in script files.
Lack of blocking while passing passwords continues to be a serious threat to web applications. This kind of vulnerability allows criminals to choose passwords using weak or standard combinations of criminals using automatic tools. With the lack of authentication of two factors, this opens doors to endanger administrative panels and other attacks on servers and other attacks of companies. Finally, according to analysts, the lack of authentication in the APIs becomes a new but critical threat to work. Without appropriate protection, API services become vulnerable to attacks, which can lead to data leakage and even regulatory fines.
Source: Ferra
I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.
