#owasptop10 — Public Fediverse posts

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

Data breaches don’t start with zero-days—they start with missed basics. @mezoCode walks through the #OWASP API Security Top 10—each one with bad & good #Java code examples.

Read the best practices: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10 #JAVAPRO #API

Data breaches don’t start with zero-days—they start with missed basics. @mezoCode walks through the #OWASP API Security Top 10—each one with bad & good #Java code examples.

Read the best practices: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10 #JAVAPRO #API

OpenAI wprowadza Lockdown Mode – nowa strategia ochrony danych AI

Czy wystarczy zaciągnąć hamulec ręczny, żeby AI przestało robić głupoty? OpenAI twierdzi, że tak – przynajmniej wtedy, gdy stawką są wrażliwe dane.

Czytaj dalej:
https://pressmind.org/openai-wprowadza-lockdown-mode-nowa-strategia-ochrony-danych-ai/

#PressMindLabs #chatgptenterprise #elevatedrisk #lockdownmode #ochronadanych #owasptop10

🔐 OWASP Top 10 revela las 10 vulnerabilidades más críticas en apps web. Aprende a identificarlas y protege tu código hoy. 💻

Lee más 👉 https://www.soloingenieria.org/ingenieria-de-software/owasp-top-10/

#OWASPTop10 #SeguridadWeb #DesarrolloSeguro #Ciberseguridad #IngenieríaDeSoftware

💡 Tip: Antes de desplegar tu aplicación, revisa las 10 vulnerabilidades del OWASP Top 10. Prevenir es mucho más barato que reparar después de un ataque.

#OWASPTop10 #SeguridadWeb #DesarrolloSeguro #Ciberseguridad #IngenieríaDeSoftware

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

Broken object-level auth, SSRF, missing rate limits — Java APIs fail in predictable ways. This step-by-step guide by @mezoCode maps each #OWASP #API flaw to a working #Java solution.

Essential read for secure backends: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

@owasp #OWASPTop10 #APIsecurity

Broken object-level auth, SSRF, missing rate limits — Java APIs fail in predictable ways. This step-by-step guide by @mezoCode maps each #OWASP #API flaw to a working #Java solution.

Essential read for secure backends: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

@owasp #OWASPTop10 #APIsecurity

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

$4.45M. That’s the average cost of a breach. Most start with #API vulnerabilities. This guide by @mezoCode shows how to write secure #Java APIs with working #OWASPTop10 code fixes.

Prevent costly mistakes - read: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASP @owasp @OWASPTop10

$4.45M. That’s the average cost of a breach. Most start with #API vulnerabilities. This guide by @mezoCode shows how to write secure #Java APIs with working #OWASPTop10 code fixes.

Prevent costly mistakes - read: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASP @owasp @OWASPTop10

Still exposing sensitive data via #Java #APIs? @mezoCode breaks down real-world #OWASP API security flaws—from broken auth to SSRF—and how to fix them in clean, tested code.

Actionable code for every risk: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10

Still exposing sensitive data via #Java #APIs? @mezoCode breaks down real-world #OWASP API security flaws—from broken auth to SSRF—and how to fix them in clean, tested code.

Actionable code for every risk: https://javapro.io/2025/11/12/mastering-api-security-in-java-owasp-best-practices/

#SpringBoot #OWASPTop10 @owasp @OWASPTop10

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

OWASP Smart Contract Top 10 2025 Released – What’s new! https://gbhackers.com/owasp-smart-contract-top-10-2025/ #CyberSecurityNews #cybersecurity #OWASPTop10 #whatisNew

OWASP Smart Contract Top 10 2025 Released – What’s new! https://gbhackers.com/owasp-smart-contract-top-10-2025/ #CyberSecurityNews #cybersecurity #OWASPTop10 #whatisNew

OWASP Smart Contract Top 10 2025 Released – What’s new! https://gbhackers.com/owasp-smart-contract-top-10-2025/ #CyberSecurityNews #cybersecurity #OWASPTop10 #whatisNew

📢 November OWASP Ottawa Meetup Alert📢

Join us for an in-person #OWASPOttawa meetup next week at the University of Ottawa!

We’ve got two fantastic speakers (Tanya Janca and Gabriel Kronfeld) lined up to dive deep into #DevSecOps and #OWASPTop10.

Gabriel Kronfeld presents "A Brief overview of the OWASP Top 10"

Tanya Janca presents "DevSecOps Worst Practices"

RSVP link: https://www.meetup.com/owasp-ottawa/events/304507525

#OWASP #ottawa #cybersecurity #networking

📢 November OWASP Ottawa Meetup Alert📢

Join us for an in-person #OWASPOttawa meetup next week at the University of Ottawa!

We’ve got two fantastic speakers (Tanya Janca and Gabriel Kronfeld) lined up to dive deep into #DevSecOps and #OWASPTop10.

Gabriel Kronfeld presents "A Brief overview of the OWASP Top 10"

Tanya Janca presents "DevSecOps Worst Practices"

RSVP link: https://www.meetup.com/owasp-ottawa/events/304507525

#OWASP #ottawa #cybersecurity #networking

📢 November OWASP Ottawa Meetup Alert📢

Join us for an in-person #OWASPOttawa meetup next week at the University of Ottawa!

We’ve got two fantastic speakers (Tanya Janca and Gabriel Kronfeld) lined up to dive deep into #DevSecOps and #OWASPTop10.

Gabriel Kronfeld presents "A Brief overview of the OWASP Top 10"

Tanya Janca presents "DevSecOps Worst Practices"

RSVP link: https://www.meetup.com/owasp-ottawa/events/304507525

#OWASP #ottawa #cybersecurity #networking

📢 November OWASP Ottawa Meetup Alert📢

Join us for an in-person #OWASPOttawa meetup next week at the University of Ottawa!

We’ve got two fantastic speakers (Tanya Janca and Gabriel Kronfeld) lined up to dive deep into #DevSecOps and #OWASPTop10.

Gabriel Kronfeld presents "A Brief overview of the OWASP Top 10"

Tanya Janca presents "DevSecOps Worst Practices"

RSVP link: https://www.meetup.com/owasp-ottawa/events/304507525

#OWASP #ottawa #cybersecurity #networking

👉 #APIattacks have grown in triple digits in the last two years.

After all, 71% of the internet traffic comes from APIs so APIs have become soft targets for hackers.

Securing APIs is a simple workflow provided you find API specific vulnerabilities and protect them.

In the upcoming webinar, join Vivek Gopalan, VP of Products at Indusface as he takes you through the fundamentals of API vulnerability scanning.

Vivek will discuss how to :

- Scan API endpoints for OWASP API Top 10 vulnerabilities
- Perform API penetration testing for business logic vulnerabilities
- Prioritize the most critical vulnerabilities with AcuRisQ
- Workflow automation for this entire process

Register now and start protecting your APIs today! https://bit.ly/3z7IPHf

#vulnerabilityscanning #hacking #apiscanning #cybersecurity #vulnerabilities #owaspapi #owasptop10 #pentesting #apiendpoints #apisecurity #apptrana #indusface

👉 #APIattacks have grown in triple digits in the last two years.

After all, 71% of the internet traffic comes from APIs so APIs have become soft targets for hackers.

Securing APIs is a simple workflow provided you find API specific vulnerabilities and protect them.

In the upcoming webinar, join Vivek Gopalan, VP of Products at Indusface as he takes you through the fundamentals of API vulnerability scanning.

Vivek will discuss how to :

- Scan API endpoints for OWASP API Top 10 vulnerabilities
- Perform API penetration testing for business logic vulnerabilities
- Prioritize the most critical vulnerabilities with AcuRisQ
- Workflow automation for this entire process

Register now and start protecting your APIs today! https://bit.ly/3z7IPHf

#vulnerabilityscanning #hacking #apiscanning #cybersecurity #vulnerabilities #owaspapi #owasptop10 #pentesting #apiendpoints #apisecurity #apptrana #indusface

👉 Join Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface, in a live #API attack simulation. 🔓

In this session, they will cover:
- An exploit of #OWASP API Top 10 vulnerability
- A brute force #ATO (Account Takeover) attack on an API
- A #DDoS attack on an API
- Positive security model automation to prevent #APIattacks

Don't miss out – register now! https://bit.ly/3WODUV8

#authentication #authorization #apisecurity #hacking #owasptop10 #ddosattacks #apigateway #bruteforceattacks #cybersecurity #apptrana

👉 Join Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface, in a live #API attack simulation. 🔓

In this session, they will cover:
- An exploit of #OWASP API Top 10 vulnerability
- A brute force #ATO (Account Takeover) attack on an API
- A #DDoS attack on an API
- Positive security model automation to prevent #APIattacks

Don't miss out – register now! https://bit.ly/3WODUV8

#authentication #authorization #apisecurity #hacking #owasptop10 #ddosattacks #apigateway #bruteforceattacks #cybersecurity #apptrana

It is 2024 and here we have yet another critical SQL Injection (#SQLi) vulnerability in a commercial product by a *CyberSecurity* vendor - F5! (PaloAlto vuln was a couple of weeks ago)

#OWASPTop10

https://my.f5.com/manage/s/article/K000138733

It is 2024 and here we have yet another critical SQL Injection (#SQLi) vulnerability in a commercial product by a *CyberSecurity* vendor - F5! (PaloAlto vuln was a couple of weeks ago)

#OWASPTop10

https://my.f5.com/manage/s/article/K000138733

It is 2024 and here we have yet another critical SQL Injection (#SQLi) vulnerability in a commercial product by a *CyberSecurity* vendor - F5! (PaloAlto vuln was a couple of weeks ago)

#OWASPTop10

https://my.f5.com/manage/s/article/K000138733

It is 2024 and here we have yet another critical SQL Injection (#SQLi) vulnerability in a commercial product by a *CyberSecurity* vendor - F5! (PaloAlto vuln was a couple of weeks ago)

#OWASPTop10

https://my.f5.com/manage/s/article/K000138733

🔒 Elevate Your Web Application Security Game! 🔒

Are you taking the necessary steps to safeguard your web applications against cyber threats? Dive into our latest insights on the OWASP Top 10 vulnerabilities and discover actionable strategies to fortify your defenses.

#WebApplicationSecurity #OWASPTop10 #CyberSecurity #InfoSec #ProtectYourData #StaySecure #SoftwareDevelopment #VulnerabilityManagement #SecurityBestPractices #LearnMore

https://www.relianoid.com/blog/relianoid-open-web-application-security-project-top-10/