#owasptop10 — Public Fediverse posts

حقن الكيانات الخارجية في XML ‏(XXE)  

https://cybercases8.wordpress.com/2026/09/06/%d8%ad%d9%82%d9%86-%d8%a7%d9%84%d9%83%d9%8a%d8%a7%d9%86%d8%a7%d8%aa-%d8%a7%d9%84%d8%ae%d8%a7%d8%b1%d8%ac%d9%8a%d8%a9-%d9%81%d9%8a-xml-xxe/

حقن أوامرSQL (SQL Injection)

https://cybercases8.wordpress.com/2026/09/06/%d8%ad%d9%82%d9%86-%d8%a3%d9%88%d8%a7%d9%85%d8%b1sql-sql-injection/

Security Misconfiguration(سوء الإعدادات الأمنية)

https://cybercases8.wordpress.com/2026/08/21/security-misconfiguration%d8%b3%d9%88%d8%a1-%d8%a7%d9%84%d8%a5%d8%b9%d8%af%d8%a7%d8%af%d8%a7%d8%aa-%d8%a7%d9%84%d8%a3%d9%85%d9%86%d9%8a%d8%a9/

Cryptographic Failures(إخفاقات التشفير)

https://cybercases8.wordpress.com/2026/08/21/cryptographic-failures%d8%a5%d8%ae%d9%81%d8%a7%d9%82%d8%a7%d8%aa-%d8%a7%d9%84%d8%aa%d8%b4%d9%81%d9%8a%d8%b1/

Broken AccessControl_كسر التحكم بالوصوال

https://cybercases8.wordpress.com/2026/08/17/broken-accesscontrol_%d9%83%d8%b3%d8%b1-%d8%a7%d9%84%d8%aa%d8%ad%d9%83%d9%85-%d8%a8%d8%a7%d9%84%d9%88%d8%b5%d9%88%d8%a7%d9%84/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Data breaches don’t start with zero-days—they start with missed basics. @mezoCode walks through the #OWASP API Security Top 10—each one with bad & good #Java code examples.

Read the best practices: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10 #JAVAPRO #API

Data breaches don’t start with zero-days—they start with missed basics. @mezoCode walks through the #OWASP API Security Top 10—each one with bad & good #Java code examples.

Read the best practices: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10 #JAVAPRO #API

OpenAI wprowadza Lockdown Mode – nowa strategia ochrony danych AI

Czy wystarczy zaciągnąć hamulec ręczny, żeby AI przestało robić głupoty? OpenAI twierdzi, że tak – przynajmniej wtedy, gdy stawką są wrażliwe dane.

Czytaj dalej:
https://pressmind.org/openai-wprowadza-lockdown-mode-nowa-strategia-ochrony-danych-ai/

#PressMindLabs #chatgptenterprise #elevatedrisk #lockdownmode #ochronadanych #owasptop10

🔐 OWASP Top 10 revela las 10 vulnerabilidades más críticas en apps web. Aprende a identificarlas y protege tu código hoy. 💻

Lee más 👉 https://www.soloingenieria.org/ingenieria-de-software/owasp-top-10/

#OWASPTop10 #SeguridadWeb #DesarrolloSeguro #Ciberseguridad #IngenieríaDeSoftware

💡 Tip: Antes de desplegar tu aplicación, revisa las 10 vulnerabilidades del OWASP Top 10. Prevenir es mucho más barato que reparar después de un ataque.

#OWASPTop10 #SeguridadWeb #DesarrolloSeguro #Ciberseguridad #IngenieríaDeSoftware

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

Broken object-level auth, SSRF, missing rate limits — Java APIs fail in predictable ways. This step-by-step guide by @mezoCode maps each #OWASP #API flaw to a working #Java solution.

Essential read for secure backends: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

@owasp #OWASPTop10 #APIsecurity

Broken object-level auth, SSRF, missing rate limits — Java APIs fail in predictable ways. This step-by-step guide by @mezoCode maps each #OWASP #API flaw to a working #Java solution.

Essential read for secure backends: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

@owasp #OWASPTop10 #APIsecurity

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

$4.45M. That’s the average cost of a breach. Most start with #API vulnerabilities. This guide by @mezoCode shows how to write secure #Java APIs with working #OWASPTop10 code fixes.

Prevent costly mistakes - read: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASP @owasp @OWASPTop10

$4.45M. That’s the average cost of a breach. Most start with #API vulnerabilities. This guide by @mezoCode shows how to write secure #Java APIs with working #OWASPTop10 code fixes.

Prevent costly mistakes - read: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASP @owasp @OWASPTop10

Still exposing sensitive data via #Java #APIs? @mezoCode breaks down real-world #OWASP API security flaws—from broken auth to SSRF—and how to fix them in clean, tested code.

Actionable code for every risk: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10

Still exposing sensitive data via #Java #APIs? @mezoCode breaks down real-world #OWASP API security flaws—from broken auth to SSRF—and how to fix them in clean, tested code.

Actionable code for every risk: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

OWASP Smart Contract Top 10 2025 Released – What’s new! https://gbhackers.com/owasp-smart-contract-top-10-2025/ #CyberSecurityNews #cybersecurity #OWASPTop10 #whatisNew

OWASP Smart Contract Top 10 2025 Released – What’s new! https://gbhackers.com/owasp-smart-contract-top-10-2025/ #CyberSecurityNews #cybersecurity #OWASPTop10 #whatisNew