The Open Worldwide Application Security Project (OWASP) just published its top 10 categories of application risks for 2025, its first list since 2021. It found that while broken access control remains ...

The OWASP GenAI Security Project has released the 2026 edition of its Top 10 for LLM Applications and, for the first time, the list was influenced by real-world incidents. The two top entries – Prompt ...

The security community's best framework for AI application risk just got smarter — and the data it now incorporates is proving that security professionals' intuitions about AI threats are off in at ...

A CISO who sees a low CVE count and deprioritizes prompt injection is reading the scoreboard wrong. Prompt injection has held the No. 1 spot on the OWASP Top 10 for LLM Applications for three ...

For the third year in a row, prompt injection tops the OWASP GenAI / LLM Top Ten list issued today as being the most vulnerable practice to be exploited. In previous years, the list was built on the ...

The OWASP Foundation has revealed the first Release Candidate for the 2025 OWASP Top 10 list, which ranks the most critical security concerns developers should be thinking about. This list features ...

A backdoor sat on PyPI for three hours in March 2026. Nearly 47,000 downloads occurred during the window. The compromised package, LiteLLM, serves as the language-model gateway for CrewAI, DSPy, ...

When people talk about "information leaking via AI," most imagine the scenario where an employee pastes confidential ...

Sensitive information disclosure via large language models (LLMs) and generative AI has become a more critical risk as AI adoption surges, according to the Open Worldwide Application Security Project ...

Mobile applications operate across different devices and environments, making security an important part of application development and deployment. As mobile ...