We talk about the latest news and changes to the OWASP Top 10, which lists the biggest security holes in web apps, in this section. Keep up with changes, updates, and new information about these top vulnerabilities. This includes new threats, ways to protect against them, and the best ways to secure web apps. Our coverage gives you useful information to help you understand and fix the most important OWASP-identified security problems.
OWASP has launched the Subtractive Security Top 10 project, a security engineering initiative that shifts the focus from adding more…
OWASP has released a new edition of its AI security report, “State of Agentic AI Security and Governance v2.01,” giving…
The OWASP Zed Attack Proxy (ZAP) just received a massive upgrade for testing modern web applications. The release of the…
XSS is a very commonly exploited vulnerability type that is very widely spread and easily detectable, and also it is…
The Open Web Application Security Project (OWASP) has officially unveiled the eighth edition of its influential Top 10 security risks…
The Open Web Application Security Project (OWASP) has released its updated Smart Contract Top 10 for 2025, providing essential insights for developers…
Cross Site Request Forgery is one of the most common form of attack by online spammers and scammers. Exploicity of…
Web applications often redirect and forward users to other pages and websites, and use untrusted data to determine the destination…
Exploitability of the risk is average, Attacker needs to identify the weak part through scanning or manual analysis. But the risk…
Function Level Access Control can be exploited easily, if there is an missing access control on resource control, exploiting the…