Vulnerabilities were found in half of the online application substitutes

Almost half (46%) of Russian web applications contain critical vulnerabilities that can lead to data leakage. This follows from the materials of the Solar company (part of Rostelecom), Izvestia has reviewed the documents. These gaps are dangerous not only for private users, but also for corporate users — if the web application provides access to the company's information systems, for example, to mail. More than half of the analyzed such programs of Russian companies were marked by a low and medium level of security, the company added.

Tricksters without borders: scammers have found new vulnerabilities in Telegram

There has been a surge in cybercriminal activity due to the May update

Web applications are computer programs that run directly in the browser. Unlike mobile services, they do not need to be downloaded to users' devices, and there is also no need to install special applications. They can be used to make payments, subscribe and cancel subscriptions, order goods, work with documents, and much more. Classic examples are online banking, online shopping, and cloud services for working with files and documents. Meanwhile, according to lawyers, responsibility for personal data leaks is being tightened in the Russian Federation.

Vulnerabilities are a problem that can be solved if they are detected in a timely manner and properly funded, but such work requires incentives, including sanctions, said Yaroslav Shitsle, head of IT & IP Dispute Resolution at Rustam Kurmaev & Partners Law Firm. Since the end of May this year, responsibility for violations of the law on personal data protection has been significantly tightened, he recalled.

"Responsibility for the leakage of personal data is ranked depending on the number of affected users: if the offense affected from 1 to 10 thousand people, the fine for a legal entity can be up to 5 million rubles, if from 10 to 100 thousand — up to 10 million rubles, more than 100 thousand — up to 15 million rubles. If the offense is repeated during the year, the legal entity may be subject to a turnover fine, which ranges from 1% to 3% of revenue," the lawyer notes.

Read the details in the exclusive Izvestia article:

Exclusion zone: half of the substitutes for mobile applications in the Russian Federation are unsafe