#owasptop10 — Public Fediverse posts

حقن الكيانات الخارجية في XML ‏(XXE)  

https://cybercases8.wordpress.com/2026/09/06/%d8%ad%d9%82%d9%86-%d8%a7%d9%84%d9%83%d9%8a%d8%a7%d9%86%d8%a7%d8%aa-%d8%a7%d9%84%d8%ae%d8%a7%d8%b1%d8%ac%d9%8a%d8%a9-%d9%81%d9%8a-xml-xxe/

حقن أوامرSQL (SQL Injection)

https://cybercases8.wordpress.com/2026/09/06/%d8%ad%d9%82%d9%86-%d8%a3%d9%88%d8%a7%d9%85%d8%b1sql-sql-injection/

Security Misconfiguration(سوء الإعدادات الأمنية)

https://cybercases8.wordpress.com/2026/08/21/security-misconfiguration%d8%b3%d9%88%d8%a1-%d8%a7%d9%84%d8%a5%d8%b9%d8%af%d8%a7%d8%af%d8%a7%d8%aa-%d8%a7%d9%84%d8%a3%d9%85%d9%86%d9%8a%d8%a9/

Cryptographic Failures(إخفاقات التشفير)

https://cybercases8.wordpress.com/2026/08/21/cryptographic-failures%d8%a5%d8%ae%d9%81%d8%a7%d9%82%d8%a7%d8%aa-%d8%a7%d9%84%d8%aa%d8%b4%d9%81%d9%8a%d8%b1/

Broken AccessControl_كسر التحكم بالوصوال

https://cybercases8.wordpress.com/2026/08/17/broken-accesscontrol_%d9%83%d8%b3%d8%b1-%d8%a7%d9%84%d8%aa%d8%ad%d9%83%d9%85-%d8%a8%d8%a7%d9%84%d9%88%d8%b5%d9%88%d8%a7%d9%84/

An #IDOR Vulnerability in the Vatican's 'Click to Pray' Mobile App Leaks Names, Emails, and Administrative Privileges Across the Globe:
#OWASPTop10

https://techstory.in/sacred-intentions-unsecured-endpoints-vaticans-click-to-pray-exposes-700000-users/

Come un semplice account FIFA avrebbe potuto compromettere i Mondiali 2026

https://insicurezzadigitale.com/come-un-semplice-account-fifa-avrebbe-potuto-compromettere-i-mondiali-2026/

🎉 OWASP London Training Days just got better! Join Fabio Cerullo for 3 days of Web App Security Essentials 🔥 Learn to identify, exploit, and fix critical vulnerabilities in hands-on labs, fully aligned with the OWASP Top 10 (2025)👉 https://londonowasptrainingdays2025.sched.com/event/2CR9z
#webapplications #appsec #owasptop10

The Cloudflare Outage May Be a Security Roadmap

https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/

#MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

The Cloudflare Outage May Be a Security Roadmap https://krebsonsecurity.com/2025/11/the-cloudflare-outage-may-be-a-security-roadmap/ #MartinGreenfield #ALittleSunshine #LatestWarnings #TheComingStorm #MatthewPrince #IANSResearch #ReplicaCyber #AaronTurner #NicoleScott #CloudFlare #OWASPTop10 #QuodOrbis

There's a release candidate up for review via community survey of the OWASP Top 10 2025 edition. The previous edition was 2021. This lists current top network application security issues that developers should pay attention to. For 2025, Server-Side Request Forgery SSRF was merged into Broken Access Controls; added Mishandling of Exceptional Conditions based on Common Weakness Enumeration CWE trends. https://owasp.org/Top10/2025/0x00_2025-Introduction/ #OWASPTop10 #cybersecurity #Internet #web #software #engineering #tech

OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added https://gbhackers.com/owasp-top-10-2025-released/ #CyberSecurityNews #cybersecurity #OWASPTop10 #Top10

Two New Web Application Risk Categories Added to OWASP Top 10 https://www.securityweek.com/two-new-web-application-risk-categories-added-to-owasp-top-10/ #ApplicationSecurity #webapplication #vulnerability #OWASPTop10 #OWASP

@owasp_de

Unterstützt das und leitet das weiter!

Es ist wahrscheinlicher, dass Euch ein Bug aus den #OWASPTop10 raushaut, als eine #AI oder ein #quantumcomputer

Zahllose Beispiele ...

OWASP Smart Contract Top 10 2025 Released – What’s new! https://gbhackers.com/owasp-smart-contract-top-10-2025/ #CyberSecurityNews #cybersecurity #OWASPTop10 #whatisNew

📢 November OWASP Ottawa Meetup Alert📢

Join us for an in-person #OWASPOttawa meetup next week at the University of Ottawa!

We’ve got two fantastic speakers (Tanya Janca and Gabriel Kronfeld) lined up to dive deep into #DevSecOps and #OWASPTop10.

Gabriel Kronfeld presents "A Brief overview of the OWASP Top 10"

Tanya Janca presents "DevSecOps Worst Practices"

RSVP link: https://www.meetup.com/owasp-ottawa/events/304507525

#OWASP #ottawa #cybersecurity #networking

👉 #APIattacks have grown in triple digits in the last two years.

After all, 71% of the internet traffic comes from APIs so APIs have become soft targets for hackers.

Securing APIs is a simple workflow provided you find API specific vulnerabilities and protect them.

In the upcoming webinar, join Vivek Gopalan, VP of Products at Indusface as he takes you through the fundamentals of API vulnerability scanning.

Vivek will discuss how to :

- Scan API endpoints for OWASP API Top 10 vulnerabilities
- Perform API penetration testing for business logic vulnerabilities
- Prioritize the most critical vulnerabilities with AcuRisQ
- Workflow automation for this entire process

Register now and start protecting your APIs today! https://bit.ly/3z7IPHf

#vulnerabilityscanning #hacking #apiscanning #cybersecurity #vulnerabilities #owaspapi #owasptop10 #pentesting #apiendpoints #apisecurity #apptrana #indusface

👉 Join Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface, in a live #API attack simulation. 🔓

In this session, they will cover:
- An exploit of #OWASP API Top 10 vulnerability
- A brute force #ATO (Account Takeover) attack on an API
- A #DDoS attack on an API
- Positive security model automation to prevent #APIattacks

Don't miss out – register now! https://bit.ly/3WODUV8

#authentication #authorization #apisecurity #hacking #owasptop10 #ddosattacks #apigateway #bruteforceattacks #cybersecurity #apptrana

It is 2024 and here we have yet another critical SQL Injection (#SQLi) vulnerability in a commercial product by a *CyberSecurity* vendor - F5! (PaloAlto vuln was a couple of weeks ago)

#OWASPTop10

https://my.f5.com/manage/s/article/K000138733

Attackers are exploiting a critical #XSS #vulnerability (CVE-2023-34192) in #Zimbra.

Our latest #securitybulletin proposes mitigation measures to address the flaw: https://bit.ly/47bK2s6

#crosssitescripting #owasptop10 #owasp #zeroday #zerodayvulnerability #xssvulnerability #waap #DAST #waf #virtualpatching #apptrana #indusface

👉 A new edition of the #OWASP Mobile Top 10 2023 has been released.

The blog breaks down the updated list of #vulnerabilities and provides mitigation guidelines - https://bit.ly/3RH1CQw

#owasptop10 #mobileapplications #mobilesecurity #penetrationtesting #mobileappsecurity #mobileapplicationscanning #apptrana #indusface

👉 “We have an #API gateway, and the strong authentication & authorization keeps us secure.”

This notion could cost you a #databreach, a compliance fine or even application downtime that may erode customer trust.

In the upcoming webinar, Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface demonstrate how #APIs could be hacked.

They'll cover:

1. An exploit of #owaspapitop10 vulnerability
2. A brute force account take-over (ATO) attack on API
3. A #DDoS attack on an API
4. How a #WAAP could bolster security over an API gateway

📌 Save your seat now! https://bit.ly/3Mw4Inp

#apiattacks #authentication #authorization #apisecurity #hacking #owasptop10 #ddosattacks #apigateway #bruteforceattacks #ATO #apptrana #indusface

🚀 🔍 #APIsecurity landscape is constantly changing, and keeping up is important.

The trusted resource for API security, the #OWASP #API Top 10, has been updated for 2023.

Get the latest insights and recommendations to protect your #APIs. See what's new compared to 2019: https://bit.ly/48z6WeV

#owaspapi #owasptop10 #apiprotection #apivulnerabilities #ddosattacks #riskprotection #appsec #apptrana #indusface

#api #apis #apisecurity #owasp #owasptop10 #owaspapi #cyberrisk #openapi #openapis #apptrana #indusface

#Workshop erfolgreich abgeschlossen 🙌🥳

Wieder 10 Leute beim "Hack It: Sichere Webanwendungen" bespaßt. ☺️

#OWASPTop10 #JuiceShop

OWASP Top 10 for Large Language Model Applications

"The OWASP Top 10 for Large Language Model Applications project aims to educate developers, designers, architects, managers, and organizations about the potential security risks when deploying and managing Large Language Models (LLMs)."

https://owasp.org/www-project-top-10-for-large-language-model-applications/

Review the draft Top 10 list version 0.1: https://owasp.org/www-project-top-10-for-large-language-model-applications/descriptions/

1) Prompt Injections

2) Data Leakage

3) Inadequate Sandboxing

4) Unauthorized Code Execution

5) SSRF Vulnerabilities

6) Overreliance on LLM-generated Content

7) Inadequate AI Alignment

8) Insufficient Access Controls

9) Improper Error Handling

10) Training Data Poisoning

The initiative is community-driven, collaborate :)

#security #ai #data #llm #largelanguagemodel #artificialintelligence #owasp #training #OpenWorldwideApplicationSecurityProject #cybersecurity #community #owasptop10 #noprofit

OWASP has released the Top 10 API Security Risks (2023). https://owasp.org/API-Security/editions/2023/en/0x11-t10/ #OWASPTOP10 #appsec #owasp