CERT-FR lessons learned: nearly 200 web application data breaches in 2025, mostly low-complexity attacks
The French national CERT (CERT-FR, part of ANSSI) published a lessons-learned report on application data breaches. It states that in 2025 it tracked nearly 200 data breaches originating from web applications. In many cases the exfiltration relied on low-complexity attacker actions and did not exploit any technical vulnerability. The repor…