Connect with us

Hi, what are you looking for?

Technology

Report: 35% of educational institutions have a SQLi vulnerability

Invicti AppSecIndicator Spring2022 SQL Injection

We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 – August 3. Join AI and data leaders for insightful talks and exciting networking opportunities. Learn more about Transform 2022

According to a new study by Invicti Security, 35% of educational institutions and 32% of government organizations were found to be vulnerable to SQL injection (SQLi) in 2021. SQLi, a type of web vulnerability that allows malicious actors to modify or replace queries an application sends to its database, is especially threatening to these sectors because it has the potential to expose deeply personal information that attackers can use to assume identities. 

Although these sectors were among the worst-affected categories analyzed, they were by no means anomalous. Despite being one of the oldest vulnerability types and having multiple well-known mitigation methods, 21% of organizations across all industries were vulnerable to SQLi attacks last year.

These findings highlight a much larger trend: direct-impact vulnerabilities are not reducing in frequency. Remote code execution (RCE), cross-site scripting (XSS) and SQL injection each saw increases in frequency or hovered around the same alarming numbers year-over-year, presenting a significant threat to organizations.

Graphic. The percentages and data in this graphic can be found in the first paragraph of the article.

Remote code execution (RCE), the ultimate goal of any cyberattacker and the vector behind last year’s Log4Shell disaster, has risen by over 5% since 2018. Cross-site scripting (XSS, which is low-impact but can open the door to sensitive data exposure) saw small signs of improvement in 2020 only to come roaring back with a 6% uptick in 2021. These trends were echoed throughout the report findings, revealing a worrying state of affairs for our national cybersecurity posture. 

However, the growing abundance of effective cybersecurity strategies and scanning technologies is cause for optimism. With adequate security measures in place, these persistent threats become less frequent and it’s easier to close skills gaps that are inherent to continued talent shortages in cybersecurity.

The Spring 2022 Edition of the Invicti AppSec Indicator analyzed web vulnerabilities from over 939 customers worldwide. The sample was derived from Invicti’s largest data set ever, representing more than 23 billion security checks, which uncovered over 282,000 direct-impact vulnerabilities.

Read the full report by Invicti Security.

Advertisement. Scroll to continue reading.

VentureBeat’s mission is to be a digital town square for technical decision-makers to gain knowledge about transformative enterprise technology and transact. Learn more about membership.

Click to comment

Leave a Reply

Latest

Online Business Success

A general view of electricity pylons in Mumbai, India, October 13, 2021. — Reuters NEW DELHI: India is facing its worst power crisis in...

Loan And Finance

Business & FinanceGovernmentPolitics 07 May 2022, 2:03 am. 1 minute Reuters exclusively reported that US and Chinese regulatory officials are in talks to settle...

Loan And Finance

Julia Hummel has been named Vice President, Digital Strategy & Business Development, at Warner Music Canada. Hummel will help the label’s artists leverage opportunities...

Online Business Success

By Andrew Schrage, CEO of Money Crashers, helping consumers and small businesses build strong foundations on the path to financial and personal success. getty...

Top Stories

As the fall of Terra (LUNA) and TerraUSD (UST) may have a noticeable short-term impact on the decision-making of both retail and institutional investors,...

Loan And Finance

Business & FinanceDealsEnergy 09 May 2022, 4:49 am. 1 minute Reuters exclusively revealed Germany’s VNG will transfer euro payments for Russian gas to Gazprombank...

Advertisement

You May Also Like

Uncategorized

Introductions get a lot of attention. I’ve explored the topic of how to write them even though as a reader, I always skip them....

SEO Guide

There are all kinds of pictures of the world on the internet, but to find one of these specific pictures that you want to...

Online Business Success

The internet is now our nervous system. We are constantly streaming and buying and watching and liking, our brains locked into the global information...

Online Business Success

You can think of link building in many ways. I like to call it tedious, painful, and a test of patience. It’s also necessary...

Advertisement