/
← Voltar ao feed
medium

CERT-FR lessons learned: nearly 200 web application data breaches in 2025, mostly low-complexity attacks

1 fonte(s) · 1 atualização(ões) · publicado 19/10/2026 21:00 · coletado há 10 horas

The French national CERT (CERT-FR, part of ANSSI) published a lessons-learned report on application data breaches. It states that in 2025 it tracked nearly 200 data breaches originating from web applications. In many cases the exfiltration relied on low-complexity attacker actions and did not exploit any technical vulnerability. The report notes that disclosed data harms citizens directly and feeds fraud campaigns built on precise, personalized information. It follows CERTFR-2024-CTI-009 (2024), which covered only the social sector.

Detalhes técnicos

  • The scope is limited to securing web applications that process sensitive data.
  • The report has two parts: security principles, and technical annexes on implementing them in configurations ANSSI has encountered.
  • It offers ten short- and medium-term risk-reduction measures, each with concrete implementation examples across several technologies.
  • The recommendations were applied in real incident responses. They aim to raise the level of an existing system and limit repeated breaches, and the report is neither a complete guide nor a long-term ideal security level.
  • The article does not detail the specific attacker techniques, CVEs or IOCs.

Remediação

  • Apply the ten risk-reduction principles and the technical annexes in the CERT-FR report "RETEX du CERT-FR sur les violations de données applicatives".
  • The article does not list the individual measures.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 19/10/2026 21:00 · coletado 22/10 13:01 primeiro registro

    CERT-FR lessons learned: nearly 200 web application data breaches in 2025, mostly low-complexity attacks

    ler a análise desta fonte

    The French national CERT (CERT-FR, part of ANSSI) published a lessons-learned report on application data breaches. It states that in 2025 it tracked nearly 200 data breaches originating from web applications. In many cases the exfiltration relied on low-complexity attacker actions and did not exploit any technical vulnerability. The report notes that disclosed data harms citizens directly and feeds fraud campaigns built on precise, personalized information. It follows CERTFR-2024-CTI-009 (2024), which covered only the social sector.

    Technical Details

    • The scope is limited to securing web applications that process sensitive data.
    • The report has two parts: security principles, and technical annexes on implementing them in configurations ANSSI has encountered.
    • It offers ten short- and medium-term risk-reduction measures, each with concrete implementation examples across several technologies.
    • The recommendations were applied in real incident responses. They aim to raise the level of an existing system and limit repeated breaches, and the report is neither a complete guide nor a long-term ideal security level.
    • The article does not detail the specific attacker techniques, CVEs or IOCs.

    Remediation

    • Apply the ten risk-reduction principles and the technical annexes in the CERT-FR report "RETEX du CERT-FR sur les violations de données applicatives".
    • The article does not list the individual measures.