[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgZAXxnyFOIxQ_7PSZnt6C_ezaJk4qtPWgKJrrtgkRNM":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"70fe56aa-012d-42d3-a754-c514444541fe","Half of the 6 Million Internet-Facing FTP Servers Lack Encryption","half-of-the-6-million-internet-facing-ftp-servers-lack-encryption-a1d447","The continued use of the half-century-old protocol exposes enterprises and end users to various types of attacks. The post Half of the 6 Million Internet-Facing FTP Servers Lack Encryption appeared first on SecurityWeek.","Censys research reveals approximately 6 million internet-accessible FTP servers worldwide, with 2.45 million (41%) showing no evidence of encryption support. The 50-year-old FTP protocol continues to expose enterprises and users to credential theft and data interception despite a 40% year-over-year decline in deployments. Most unencrypted servers are in the US, China, Germany, and Hong Kong, with Pure-FTPd, ProFTPD, and vsftpd being the most common implementations.","Half of 6 million internet-facing FTP servers lack encryption support.","https:\u002F\u002Fwww.securityweek.com\u002Fhalf-of-the-6-million-internet-facing-ftp-servers-lack-encryption\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F12\u002Fcleo-file-transfer-exploit-attack.jpeg","2026-04-20T09:41:04+00:00","2026-04-20T10:00:15.857104+00:00",7,[17,20,22,25,27],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":19},"Censys",{"name":23,"type":24},"IIS (Internet Information Services)","technology",{"name":26,"type":24},"SFTP",{"name":28,"type":24},"FTPS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40,45],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":46},{"id":47,"icon":31,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":53,"vendors":132},[54,83,105],{"slug":55,"name":56,"problem":57,"products":58},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":84,"name":85,"problem":86,"products":87},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"detectify","Detectify","\u002Fvendor-logos\u002Fdetectify.png","surface-monitoring","Detectify Surface Monitoring","https:\u002F\u002Fdetectify.com\u002Fproduct\u002Fsurface-monitoring","Continuous discovery and testing of internet-facing subdomains and services.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","attack-surface-intelligence","Attack Surface Intelligence","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fattack-surface-intelligence","External attack surface management that discovers internet-facing assets and prioritises their exposures.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},{"slug":106,"name":107,"problem":108,"products":109},"patch-management","Automated patch management","Known holes get closed in days, not months.",[110,117,124],{"vendor_slug":111,"vendor_name":18,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":106,"product_name":121,"url":122,"description":123},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",[133],{"slug":134,"name":21,"logo_path":135,"roles":136},"censys","\u002Fvendor-logos\u002Fcensys.png",[137],"reported_by",{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":149},"millions-of-ftp-servers-expose-data-through-lack-of-encryption","Millions of FTP Servers Expose Data Through Lack of Encryption","Despite being a 50-year-old protocol with well-known security flaws, FTP continues to be widely deployed without proper encryption, with 2.45 million internet-facing servers lacking encryption support. This exposes organizations to credential theft and data interception, as FTP transmits usernames, passwords, and file contents in plain text. The persistence of unencrypted FTP deployments demonstrates a critical failure in secure configuration practices and highlights the ongoing risk of using legacy protocols without proper security controls.",[143,144,145,146,147,148],"CIS Control 3.3","CIS Control 11.1","NIST SC-8","NIST SC-13","ISO 27001 A.13.1.1","GDPR Article 32",{}]