The Open Worldwide Application Security Project (OWASP) just published its top 10 categories of application risks for 2025, its first list since 2021. It found that while broken access control remains ...

The security community's best framework for AI application risk just got smarter — and the data it now incorporates is proving that security professionals' intuitions about AI threats are off in at ...

The OWASP GenAI Security Project has released the 2026 edition of its Top 10 for LLM Applications and, for the first time, the list was influenced by real-world incidents. The two top entries – Prompt ...

The OWASP Foundation has revealed the first Release Candidate for the 2025 OWASP Top 10 list, which ranks the most critical security concerns developers should be thinking about. This list features ...

The cybersecurity landscape is shifting beneath our feet. While organizations have spent years in trying to perfect their approach to human identity management, a new challenge has emerged: the ...

OWASP has updated its list of Top 10 software vulnerabilities to align it better with the current threat landscape and modern development practices. The Nov. 6 release is OWASP's first major Top 10 ...

SAN FRANCISCO, June 4, 2025 /PRNewswire/ -- Ivan Novikov, Co-Founder & CEO of Wallarm, a leading provider of API security, announced today publication of the OWASP Business Logic Abuse Top 10 ...

There were some changes to the recently updated OWASP Top 10 list, including the addition of supply chain risks. But old standbys, like broken access control, are still at the top. Software supply ...

Agentic AI is being adopted fast by enterprises, propelled by an explosion of use cases, but security, as always, is lagging. The OWASP Top 10 for Agentic AI can help close that gap. LLM-powered ...

As AI agents move into production environments, security teams are grappling with a new reality: AI risk is no longer confined to what a model generates, instead it now consists of what an autonomous ...

The OWASP Top 10 is widely recognized as one of the leading standards for identifying critical Web application security risks. This technical brief analyzes the risks in the OWASP Top 10 and outlines ...