A04:2025 — Cryptographic Failures
Verified by Precogs Threat Research
What are Cryptographic Failures (OWASP A04:2025)?
Failures related to cryptography that lead to exposure of sensitive data or system compromise. This includes transmitting data in cleartext, using deprecated algorithms (MD5, SHA-1, DES), weak key generation, and missing encryption of sensitive data at rest or in transit.
Impact
A leading cause of sensitive data exposure. Violations of PCI-DSS, HIPAA, GDPR when cryptography protecting personal or financial data is inadequate.
How Precogs AI Addresses A04
Precogs AI Binary SAST identifies weak cryptographic algorithms, hardcoded encryption keys, and missing encryption in compiled binaries — critical for firmware compliance.