Do you feel like Pablo Escobar waiting for developers to learn threat modeling?
Play OWASP Cornucopia!
cornucopia.owasp.org
Play OWASP Cornucopia!
cornucopia.owasp.org
November 2, 2026 at 5:31 AM
Do you feel like Pablo Escobar waiting for developers to learn threat modeling?
Play OWASP Cornucopia!
cornucopia.owasp.org
Play OWASP Cornucopia!
cornucopia.owasp.org
🚀 Java HTML Sanitizer 20261103.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.1
November 3, 2026 at 2:27 PM
🚀 Java HTML Sanitizer 20261103.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.1
🚀 Java HTML Sanitizer 20261102.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.2
November 3, 2026 at 3:47 AM
🚀 Java HTML Sanitizer 20261102.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.2
In case you missed it, the Open Worldwide Application Security Project (OWASP), the same people that brought you the top 10 web application vulnerability listing, have a new list out about risks in agent skill files. Must read for any org doing agentic coding. owasp.github.io/www-project-...
The Top 10 Risks — Visual Overview | OWASP Foundation
A visual map of the 10 agentic-skill security risks
owasp.github.io
November 2, 2026 at 3:57 PM
In case you missed it, the Open Worldwide Application Security Project (OWASP), the same people that brought you the top 10 web application vulnerability listing, have a new list out about risks in agent skill files. Must read for any org doing agentic coding. owasp.github.io/www-project-...
After working 15 hour work days this week to contain a breach I now need to complete the yearly goddamned OWASP training module.
October 30, 2026 at 10:44 PM
After working 15 hour work days this week to contain a breach I now need to complete the yearly goddamned OWASP training module.
🚀 Java HTML Sanitizer 20261031.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261031.1
November 1, 2026 at 5:40 AM
🚀 Java HTML Sanitizer 20261031.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261031.1
Burp Suite vs OWASP ZAP: if you're paying for Burp and only using the proxy, you're overpaying. ZAP covers 80% of that for free. #cybersecurity #tools
November 3, 2026 at 12:21 PM
Burp Suite vs OWASP ZAP: if you're paying for Burp and only using the proxy, you're overpaying. ZAP covers 80% of that for free. #cybersecurity #tools
🚀 Java HTML Sanitizer 20261103.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.2
November 3, 2026 at 3:08 PM
🚀 Java HTML Sanitizer 20261103.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.2
🚀 Java HTML Sanitizer 20261102.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.1
November 3, 2026 at 2:57 AM
🚀 Java HTML Sanitizer 20261102.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.1
Are your people falling asleep during your sessions?
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
October 30, 2026 at 5:42 AM
Are your people falling asleep during your sessions?
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
Most OWASP guides treat the Top 10 as an auditor checklist. Here is the engineering breakdown of the real exploit patterns and how to patch them in code: https://veduis.com/blog/owasp-top-10-web-security-vulnerabilities/
OWASP Top 10 Explained: Vulnerability Patterns and Code Remediation
A practical engineering breakdown of the OWASP Top 10 vulnerabilities with realistic code patterns, exploit mechanics, and verified remediation techniques.
veduis.com
October 29, 2026 at 8:54 PM
Most OWASP guides treat the Top 10 as an auditor checklist. Here is the engineering breakdown of the real exploit patterns and how to patch them in code: https://veduis.com/blog/owasp-top-10-web-security-vulnerabilities/
OWASP SAMM | OWASP SAMM
Measure and improve your organization's software security posture
owaspsamm.org
October 29, 2026 at 9:50 AM
To help enforce this via architecture, the Security Audit Prover forces systematic checks against OWASP standards before an agent can ship code. https://vinkius.com/en/ai-agent-connect/security-audit-prover
Connect Security Audit Prover to ChatGPT, Claude and Gemini
Force your AI agent to audit code against OWASP Top 10. Connect this MCP to Claude, Cursor, or Windsurf to catch leaks and injections before they ship.
vinkius.com
November 2, 2026 at 12:29 AM
To help enforce this via architecture, the Security Audit Prover forces systematic checks against OWASP standards before an agent can ship code. https://vinkius.com/en/ai-agent-connect/security-audit-prover
I'm going to be at OWASP Global AppSec USA this week. If you're in SF, would love to see you in the Testing track on Thursday at 11:30 AM.
owasp.glueup.com/event/owasp-...
owasp.glueup.com/event/owasp-...
November 3, 2026 at 10:33 PM
I'm going to be at OWASP Global AppSec USA this week. If you're in SF, would love to see you in the Testing track on Thursday at 11:30 AM.
owasp.glueup.com/event/owasp-...
owasp.glueup.com/event/owasp-...
OWASP Agentic AI GOAT: Hands-On Hacking of Multi-Agent LLM Systems at Global AppSec USA 2026 + Video
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…
OWASP Agentic AI GOAT: Hands-On Hacking of Multi-Agent LLM Systems at Global AppSec USA 2026 + Video
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The upcoming presentation at OWASP Global AppSec USA 2026 addresses these risks by launching the open-source platform OWASP Agentic AI GOAT, designed to evaluate and secure multi-agent LLM systems. Learning Objectives & Secrets: Objective 1: Master the exploitation mechanics of prompt injection, direct prompt injection, and goal hijacking within agentic workflows.
undercodetesting.com
November 1, 2026 at 10:35 AM
OWASP Agentic AI GOAT: Hands-On Hacking of Multi-Agent LLM Systems at Global AppSec USA 2026 + Video
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…
OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test
OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test
OWASP found that ChatGPT helped an operator with no offensive security knowledge take over an administrator account during a controlled hacking test.
cybersecuritynews.com
October 28, 2026 at 3:50 PM
OWASP Finds ChatGPT Helped Low-Skilled User Take Over Admin Account in Hacking Test
OWASP: AI agents cut the skill needed for recon and account takeover - but autonomous runs are still noisy. https://intel.threadlinqs.com/threat/TL-2026-5021?utm_source=bluesky #ThreatIntel #CAI #HexStrike #Claude
November 1, 2026 at 5:23 PM
OWASP: AI agents cut the skill needed for recon and account takeover - but autonomous runs are still noisy. https://intel.threadlinqs.com/threat/TL-2026-5021?utm_source=bluesky #ThreatIntel #CAI #HexStrike #Claude
Here's the OWASP Cheat Sheet Series. Actual practical advice on how not to ship a security disaster.
Bookmark it. You'll need it.
Bookmark it. You'll need it.
Introduction - OWASP Cheat Sheet Series
Website with the collection of all the cheat sheets of the project.
cheatsheetseries.owasp.org
November 2, 2026 at 3:51 PM
Here's the OWASP Cheat Sheet Series. Actual practical advice on how not to ship a security disaster.
Bookmark it. You'll need it.
Bookmark it. You'll need it.
★ Your Tool Has a New Reader
★ Your Tool Has a New Reader
What the OWASP Top 10 for Agentic Applications means for the people who maintain PHP tooling
laravel-news.com
November 1, 2026 at 1:11 AM
★ Your Tool Has a New Reader
Do you like to point fingers at "wrong"?
Ask what can go wrong, instead, before it's too late!
Play OWASP Cornucopia!
cornucopia.owasp.org
Ask what can go wrong, instead, before it's too late!
Play OWASP Cornucopia!
cornucopia.owasp.org
October 29, 2026 at 5:21 AM
Do you like to point fingers at "wrong"?
Ask what can go wrong, instead, before it's too late!
Play OWASP Cornucopia!
cornucopia.owasp.org
Ask what can go wrong, instead, before it's too late!
Play OWASP Cornucopia!
cornucopia.owasp.org
Mastering AI Security: Defending LLM Applications Against the OWASP Top 10 + Video
Introduction: Recent high-profile AI security breaches—including EchoLeak on Microsoft 365 Copilot, ForcedLeak on Salesforce Agentforce, and 2026 supply chain backdoors—demonstrate that traditional system prompts…
Introduction: Recent high-profile AI security breaches—including EchoLeak on Microsoft 365 Copilot, ForcedLeak on Salesforce Agentforce, and 2026 supply chain backdoors—demonstrate that traditional system prompts…
Mastering AI Security: Defending LLM Applications Against the OWASP Top 10 + Video
Introduction: Recent high-profile AI security breaches—including EchoLeak on Microsoft 365 Copilot, ForcedLeak on Salesforce Agentforce, and 2026 supply chain backdoors—demonstrate that traditional system prompts and software guardrails fail to act as secure boundaries on their own. This comprehensive guide and field manual explores the OWASP Top 10 for LLM Applications, providing security engineers and red teams with practical testing workflows, technical mitigations, and hands-on commands to harden modern AI stacks against sophisticated prompt injection, vector database exfiltration, and MCP server hijacking.
undercodetesting.com
November 1, 2026 at 5:40 PM
Mastering AI Security: Defending LLM Applications Against the OWASP Top 10 + Video
Introduction: Recent high-profile AI security breaches—including EchoLeak on Microsoft 365 Copilot, ForcedLeak on Salesforce Agentforce, and 2026 supply chain backdoors—demonstrate that traditional system prompts…
Introduction: Recent high-profile AI security breaches—including EchoLeak on Microsoft 365 Copilot, ForcedLeak on Salesforce Agentforce, and 2026 supply chain backdoors—demonstrate that traditional system prompts…
OWASP GenAI Security Project Unveils 2026 Top 10 for LLM Applications, New Agent Control Standard and Sponsors as Community Tops 30,000 Members
This article frames the evolution toward agentic AI as solely a progression toward more robust controls, yet the emphasis on "Ag…
via OWASP GenAI Security
This article frames the evolution toward agentic AI as solely a progression toward more robust controls, yet the emphasis on "Ag…
via OWASP GenAI Security
huntaegis.com
October 30, 2026 at 3:06 PM
OWASP GenAI Security Project Unveils 2026 Top 10 for LLM Applications, New Agent Control Standard and Sponsors as Community Tops 30,000 Members
This article frames the evolution toward agentic AI as solely a progression toward more robust controls, yet the emphasis on "Ag…
via OWASP GenAI Security
This article frames the evolution toward agentic AI as solely a progression toward more robust controls, yet the emphasis on "Ag…
via OWASP GenAI Security
Testing for OWASP Top 10 vulnerabilities isn’t just a checklist—it’s about finding the logic flaws scanners miss.
Pro-tip: Always test your API endpoints for BOLA vulnerabilities; they’re often hiding in plain sight. 🛡️
#CyberSecurity #InfoSec
Pro-tip: Always test your API endpoints for BOLA vulnerabilities; they’re often hiding in plain sight. 🛡️
#CyberSecurity #InfoSec
November 1, 2026 at 7:22 PM
Testing for OWASP Top 10 vulnerabilities isn’t just a checklist—it’s about finding the logic flaws scanners miss.
Pro-tip: Always test your API endpoints for BOLA vulnerabilities; they’re often hiding in plain sight. 🛡️
#CyberSecurity #InfoSec
Pro-tip: Always test your API endpoints for BOLA vulnerabilities; they’re often hiding in plain sight. 🛡️
#CyberSecurity #InfoSec
OWASP BASC 2027 is looking for sponsors! Check out the different packages available at www.basconf.org . You can run your own CTF or conduct your exclusive workshop, sponsor a table or get your logo on the conference artifacts, there is something for everyone!
#owasp #basc #appsec #owaspboston
#owasp #basc #appsec #owaspboston
November 3, 2026 at 2:02 PM
OWASP BASC 2027 is looking for sponsors! Check out the different packages available at www.basconf.org . You can run your own CTF or conduct your exclusive workshop, sponsor a table or get your logo on the conference artifacts, there is something for everyone!
#owasp #basc #appsec #owaspboston
#owasp #basc #appsec #owaspboston
The recording of Mireia Cano's and my OWASP Global AppSec EU talk is out now! 🤩 Check it out if you want to learn "Security Champions: Lessons from Opposite Trenches" and/or want to see us get theatrically dramatic on stage. 😄 youtu.be/4vERcT0ewg0 #OWASPVienna26 #OWASP #AppSec #SecurityChampions
Security Champions: Lessons From Opposite Trenches - Lisi Hocke & Mireia Cano
YouTube video by OWASP Foundation
youtu.be
October 28, 2026 at 6:44 PM
The recording of Mireia Cano's and my OWASP Global AppSec EU talk is out now! 🤩 Check it out if you want to learn "Security Champions: Lessons from Opposite Trenches" and/or want to see us get theatrically dramatic on stage. 😄 youtu.be/4vERcT0ewg0 #OWASPVienna26 #OWASP #AppSec #SecurityChampions