[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:owasp\u002Ftop10-2021-a02":3},{"item":4,"lessons":16,"controls":67,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"owasp","top10-2021-a02","A02:2021","A02:2021 Cryptographic Failures",17,"OWASP Foundation","**What it asks for.** This category, previously named Sensitive Data Exposure, focuses on failures related to cryptography that expose sensitive data. Examples include transmitting data in clear text, using old or weak algorithms or protocols, default or weak keys, missing certificate validation, poor randomness and storing passwords with fast or unsalted hashes.\n\n**In practice.** Organisations classify data to know what needs protection, encrypt sensitive data in transit and at rest with current algorithms, manage keys properly and avoid storing sensitive data that is not needed. Passwords are stored with adaptive, salted hashing. Evidence includes cryptographic standards, TLS configuration scans, key management procedures and data classification records.\n\n**Common gaps.** Internal traffic is often left unencrypted on the assumption that the network is trusted. Key management, rather than the algorithm, is frequently the weak point.",null,"https:\u002F\u002Fowasp.org\u002FTop10\u002FA02_2021-Cryptographic_Failures\u002F","Read it at OWASP","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},19,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"ubuntu-closes-ssl-revocation-gap-in-curl-bringing-browser-grade-certificate-checks-to-cli-tools","Ubuntu Closes SSL Revocation Gap in curl, Bringing Browser-Grade Certificate Checks to CLI Tools","2026-11-11T18:20:25.132+00:00",{"slug":24,"title":25,"published_at":26},"non-browser-tools-blind-to-revoked-certificates-ubuntu-closes-the-gap","Non-Browser Tools Blind to Revoked Certificates: Ubuntu Closes the Gap","2026-11-11T10:20:26.838+00:00",{"slug":28,"title":29,"published_at":30},"burger-king-japan-breach-exposes-11m-app-users-personal-data","Burger King Japan Breach Exposes 11M App Users' Personal Data","2026-10-16T15:20:48.695+00:00",{"slug":32,"title":33,"published_at":34},"gobalance-key-exposure-flaw-enables-onion-address-hijacking","GoBalance Key Exposure Flaw Enables .onion Address Hijacking","2026-10-09T10:20:58.801+00:00",{"slug":36,"title":37,"published_at":38},"weak-cryptographic-key-in-rejetto-hfs-enables-rce-via-session-forgery","Weak Cryptographic Key in Rejetto HFS Enables RCE via Session Forgery","2026-10-05T22:20:37.234+00:00",{"slug":40,"title":41,"published_at":42},"hardcoded-secrets-and-ai-credentials-outpacing-security-visibility","Hardcoded Secrets and AI Credentials Outpacing Security Visibility","2026-10-05T14:21:26.33+00:00",{"slug":44,"title":45,"published_at":46},"rejetto-hfs-prng-flaw-enables-cookie-forgery-and-rce-patch-now","Rejetto HFS PRNG Flaw Enables Cookie Forgery and RCE — Patch Now","2026-10-05T12:20:56.256+00:00",{"slug":48,"title":49,"published_at":50},"rejetto-hfs-weak-prng-allows-admin-session-forgery-and-rce","Rejetto HFS Weak PRNG Allows Admin Session Forgery and RCE","2026-10-05T10:21:07.064+00:00",{"slug":52,"title":53,"published_at":54},"500000-active-credentials-exposed-in-public-github-repos","500,000 Active Credentials Exposed in Public GitHub Repos","2026-10-01T10:20:32.463+00:00",{"slug":56,"title":57,"published_at":58},"ai-coding-agents-are-doubling-the-rate-of-secrets-sprawl","AI Coding Agents Are Doubling the Rate of Secrets Sprawl","2026-09-24T19:22:35.3+00:00",{"slug":60,"title":61,"published_at":62},"hard-coded-key-in-solarwinds-arm-enables-unauthenticated-remote-code-execution","Hard-Coded Key in SolarWinds ARM Enables Unauthenticated Remote Code Execution","2026-09-19T12:21:10.728+00:00",{"slug":64,"title":65,"published_at":66},"hard-coded-jwt-key-in-issabel-pbx-enables-unauthenticated-remote-code-execution","Hard-Coded JWT Key in Issabel PBX Enables Unauthenticated Remote Code Execution","2026-09-16T18:21:17.685+00:00",[68,73,78,82,87,92],{"slug":69,"name":70,"problem":71,"stories":72},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",10,{"slug":74,"name":75,"problem":76,"stories":77},"patch-management","Automated patch management","Known holes get closed in days, not months.",7,{"slug":79,"name":80,"problem":81,"stories":77},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":83,"name":84,"problem":85,"stories":86},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",6,{"slug":88,"name":89,"problem":90,"stories":91},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",4,{"slug":93,"name":94,"problem":95,"stories":91},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[97,103,109,113,119,124,128,132],{"family":98,"item":99,"code":100,"title":101,"together":102},"gdpr","32","Article 32","Security of processing",12,{"family":104,"item":105,"code":106,"title":107,"together":108},"cis","4","Control 4","Secure Configuration of Enterprise Assets and Software",11,{"family":104,"item":110,"code":111,"title":112,"together":72},"7","Control 7","Continuous Vulnerability Management",{"family":114,"item":115,"code":116,"title":117,"together":118},"nist-800-53","ia-5","IA-5","Authenticator Management",9,{"family":114,"item":120,"code":121,"title":122,"together":123},"si-2","SI-2","Flaw Remediation",8,{"family":125,"item":126,"code":127,"title":127,"together":123},"itil","overview","ITIL",{"family":104,"item":129,"code":130,"title":131,"together":86},"12","Control 12","Network Infrastructure Management",{"family":104,"item":133,"code":134,"title":135,"together":86},"16","Control 16","Application Software Security"]