OWASP Cornucopia just released v3.5.5 (github.com/OWASP/cornuc...)
A Special thanks to Prajakta G. Kamble and Adarsh Kumar for all the bug fixes.
www.youtube.com/watch?v=y99o...
#cornucopia #appsec #security #mobile #games
A Special thanks to Prajakta G. Kamble and Adarsh Kumar for all the bug fixes.
www.youtube.com/watch?v=y99o...
#cornucopia #appsec #security #mobile #games
OWASP Cornucopia Mobile App Editionv2.0
YouTube video by Johan Sydseter
www.youtube.com
October 11, 2026 at 8:24 AM
OWASP Cornucopia just released v3.5.5 (github.com/OWASP/cornuc...)
A Special thanks to Prajakta G. Kamble and Adarsh Kumar for all the bug fixes.
www.youtube.com/watch?v=y99o...
#cornucopia #appsec #security #mobile #games
A Special thanks to Prajakta G. Kamble and Adarsh Kumar for all the bug fixes.
www.youtube.com/watch?v=y99o...
#cornucopia #appsec #security #mobile #games
Deploy #OWASP #Amass on #Debian #VPS
This article provides a guide demonstrating how to deploy OWASP Amass on Debian VPS.
What is OWASP Amass?
OWASP Amass is an open-source, command-line framework used by #security professionals to: map attack surfaces, discover external ...
Continued 👉 #ufw
This article provides a guide demonstrating how to deploy OWASP Amass on Debian VPS.
What is OWASP Amass?
OWASP Amass is an open-source, command-line framework used by #security professionals to: map attack surfaces, discover external ...
Continued 👉 #ufw
Deploy OWASP Amass on Debian VPS
blog.radwebhosting.com
October 12, 2026 at 5:30 AM
Cornucopia is getting more secure and stable than ever!
In case you missed it, you can also read about our release of Mobile App Edition v2.0: dev.to/owasp/owasp-...
In case you missed it, you can also read about our release of Mobile App Edition v2.0: dev.to/owasp/owasp-...
OWASP Cornucopia Mobile App Edition v2.0
We are happy to announce the release of the OWASP Cornucopia Mobile App Edition v2.0. The latest...
dev.to
October 11, 2026 at 8:24 AM
Cornucopia is getting more secure and stable than ever!
In case you missed it, you can also read about our release of Mobile App Edition v2.0: dev.to/owasp/owasp-...
In case you missed it, you can also read about our release of Mobile App Edition v2.0: dev.to/owasp/owasp-...
On behalf of #OWASP #Ottawa, a huge thank you to Mark Cimon for supporting OWASP’s 25th Anniversary event at OWASP Ottawa Day!
📅 October 17, 2026
📍 University of Ottawa - STEM 117
ℹ️ Information: tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AppSec #Cybersecurity
📅 October 17, 2026
📍 University of Ottawa - STEM 117
ℹ️ Information: tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AppSec #Cybersecurity
October 10, 2026 at 2:02 PM
On behalf of #OWASP #Ottawa, a huge thank you to Mark Cimon for supporting OWASP’s 25th Anniversary event at OWASP Ottawa Day!
📅 October 17, 2026
📍 University of Ottawa - STEM 117
ℹ️ Information: tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AppSec #Cybersecurity
📅 October 17, 2026
📍 University of Ottawa - STEM 117
ℹ️ Information: tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AppSec #Cybersecurity
🚀 Java HTML Sanitizer 20261011.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261011.1
October 11, 2026 at 11:57 AM
🚀 Java HTML Sanitizer 20261011.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261011.1
The OWASP Top 10 for LLM Applications is the closest thing the field has to a shared checklist for AI security.
Here is how we actually test against it.
See the assessment scope:
https://www.thedataexperts.us/writing/owasp-llm-top-10-assessment-how-dse-tests.html
#AI
Here is how we actually test against it.
See the assessment scope:
https://www.thedataexperts.us/writing/owasp-llm-top-10-assessment-how-dse-tests.html
#AI
October 12, 2026 at 3:35 PM
The OWASP Top 10 for LLM Applications is the closest thing the field has to a shared checklist for AI security.
Here is how we actually test against it.
See the assessment scope:
https://www.thedataexperts.us/writing/owasp-llm-top-10-assessment-how-dse-tests.html
#AI
Here is how we actually test against it.
See the assessment scope:
https://www.thedataexperts.us/writing/owasp-llm-top-10-assessment-how-dse-tests.html
#AI
🗳️ OWASP Board elections are coming up!
Missed the Candidate Town Hall? 👀 Catch up with the candidates, hear their vision for OWASP’s future, and get informed before you vote! 💛
🎥 Watch now: youtu.be/rQF4GgNYSzQ
#OWASP #Community
Missed the Candidate Town Hall? 👀 Catch up with the candidates, hear their vision for OWASP’s future, and get informed before you vote! 💛
🎥 Watch now: youtu.be/rQF4GgNYSzQ
#OWASP #Community
2026 Board of Directors Candidate Town Hall
On October 6, 2026, the four candidates for this year's election answered the community's questions about their platforms and positions.
Managed by the OWASP® Foundation
https://owasp.org/
youtu.be
October 12, 2026 at 1:59 PM
🗳️ OWASP Board elections are coming up!
Missed the Candidate Town Hall? 👀 Catch up with the candidates, hear their vision for OWASP’s future, and get informed before you vote! 💛
🎥 Watch now: youtu.be/rQF4GgNYSzQ
#OWASP #Community
Missed the Candidate Town Hall? 👀 Catch up with the candidates, hear their vision for OWASP’s future, and get informed before you vote! 💛
🎥 Watch now: youtu.be/rQF4GgNYSzQ
#OWASP #Community
So pleased to have presented the OWASP API Security Top 10 at the Nordic APIs Summit today. This is the resources slide from the talk; all are worth perusing. #APIs
October 13, 2026 at 10:01 AM
So pleased to have presented the OWASP API Security Top 10 at the Nordic APIs Summit today. This is the resources slide from the talk; all are worth perusing. #APIs
Come hear me talk next Saturday in at OWASP Day about digital sovereignty is and how changing risks impact our control of technology and puts Canada's sovereignty at risk.
#OWASP #Ottawa is pleased to announce that Alexander Rudolph, PhD presenting @ OWASP Ottawa Day 2026 on:
"Canadian Digital Sovereignty in a Zero-Trust World"
📅 October 17, 2026
ℹ️ Information: github.com/OWASP-Ottawa...
#DigitalSovereignty #CyberSecurity #Canada #OWASPOttawa2026 #AppSec
"Canadian Digital Sovereignty in a Zero-Trust World"
📅 October 17, 2026
ℹ️ Information: github.com/OWASP-Ottawa...
#DigitalSovereignty #CyberSecurity #Canada #OWASPOttawa2026 #AppSec
October 9, 2026 at 4:42 PM
Come hear me talk next Saturday in at OWASP Day about digital sovereignty is and how changing risks impact our control of technology and puts Canada's sovereignty at risk.
We wanted to make #OWASP #WrongSecrets #multi-language, but #AI does not #translate well & 75 challenges is a lot of work. So I made github.com/OWASP/wrongs... . This can help you for your project as well! Like what you see? Please 🌟 the repo!
Translator help: adding golang scripts to create translations faster by commjoen · Pull Request #2744 · OWASP/wrongsecrets
What kind of changes does this PR include?
Fixes or refactors
A new challenge
Additional documentation
Something else: adding golang binary scripts to create translation faster
Relations
Help...
github.com
October 13, 2026 at 8:57 AM
We wanted to make #OWASP #WrongSecrets #multi-language, but #AI does not #translate well & 75 challenges is a lot of work. So I made github.com/OWASP/wrongs... . This can help you for your project as well! Like what you see? Please 🌟 the repo!
Pretty sure they'll be up here: youtube.com/@owasp_ottaw...
OWASP Ottawa
Software powers the world, but insecure software threatens safety, trust, and economic growth. The Open Web Application Security Project (OWASP) is dedicated to making application security visible by ...
youtube.com
October 10, 2026 at 3:23 AM
Pretty sure they'll be up here: youtube.com/@owasp_ottaw...
#OWASP #Ottawa is proud to announce that Kishan Nagendra will be speaking at OWASP Ottawa Day 2026.
"Agentic AI Design Patterns and Their Security Implications"
📅 October 17
📍 UofO - STEM 117
ℹ️ tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AgenticAI #AISecurity
"Agentic AI Design Patterns and Their Security Implications"
📅 October 17
📍 UofO - STEM 117
ℹ️ tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AgenticAI #AISecurity
October 8, 2026 at 4:21 PM
#OWASP #Ottawa is proud to announce that Kishan Nagendra will be speaking at OWASP Ottawa Day 2026.
"Agentic AI Design Patterns and Their Security Implications"
📅 October 17
📍 UofO - STEM 117
ℹ️ tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AgenticAI #AISecurity
"Agentic AI Design Patterns and Their Security Implications"
📅 October 17
📍 UofO - STEM 117
ℹ️ tinyurl.com/87j33b82
🎟️ Tickets (free): tinyurl.com/mr2z6z8r
#OWASPOttawa2026 #AgenticAI #AISecurity
owasp mobile読んでおいてよかった
October 13, 2026 at 11:52 PM
owasp mobile読んでおいてよかった
OWASP Top 10 for Agentic Applications から学ぶ、AIエージェントに潜むセキュリティリスクと対策について
https://www.yayafa.com/2908753/
2025年12月、OWASPからAI…
https://www.yayafa.com/2908753/
2025年12月、OWASPからAI…
OWASP Top 10 for Agentic Applications から学ぶ、AIエージェントに潜むセキュリティリスクと対策について - YAYAFA
2025年12月、OWASPからAIエージェント特有の10大セキュリティリスクをまとめた「OWASP Top 10 for Agentic Applications 2026」が公開されました（以下、Agentic Top
www.yayafa.com
October 12, 2026 at 9:20 AM
OWASP Top 10 for Agentic Applications から学ぶ、AIエージェントに潜むセキュリティリスクと対策について
https://www.yayafa.com/2908753/
2025年12月、OWASPからAI…
https://www.yayafa.com/2908753/
2025年12月、OWASPからAI…
Security and guardrails are definitely the missing link in agentic safety. We have a security audit prover that forces agents to validate against OWASP standards before shipping code. https://vinkius.com/en/ai-agent-connect/security-audit-prover
Connect Security Audit Prover to ChatGPT, Claude and Gemini
Force your AI agent to audit code against OWASP Top 10. Connect this MCP to Claude, Cursor, or Windsurf to catch leaks and injections before they ship.
vinkius.com
October 13, 2026 at 2:18 AM
Security and guardrails are definitely the missing link in agentic safety. We have a security audit prover that forces agents to validate against OWASP standards before shipping code. https://vinkius.com/en/ai-agent-connect/security-audit-prover
🦎 What if your honeypot could adapt to the attacker?
CHAMELEON-REN is an adaptive web honeypot helping researchers observe, understand, and learn from real-world web attacks.
Curious how it works? 👀👇
owasp.org/news/chame...
#OWASP #AppSec #opensource
CHAMELEON-REN is an adaptive web honeypot helping researchers observe, understand, and learn from real-world web attacks.
Curious how it works? 👀👇
owasp.org/news/chame...
#OWASP #AppSec #opensource
October 9, 2026 at 12:09 PM
🦎 What if your honeypot could adapt to the attacker?
CHAMELEON-REN is an adaptive web honeypot helping researchers observe, understand, and learn from real-world web attacks.
Curious how it works? 👀👇
owasp.org/news/chame...
#OWASP #AppSec #opensource
CHAMELEON-REN is an adaptive web honeypot helping researchers observe, understand, and learn from real-world web attacks.
Curious how it works? 👀👇
owasp.org/news/chame...
#OWASP #AppSec #opensource
In addition, Cybersecurity Month is here. For AI security, we have labs with A1 posters, diagrams, presentations, game master cheat sheets, and live vulnerable LLM AI apps written in Java, TypeScript, .NET, Python, Android Java, and iOS Swift.
Check it out: cornucopia.owasp.org/how-to-play#...
Check it out: cornucopia.owasp.org/how-to-play#...
OWASP Cornucopia - How to play
Learn how to play the OWASP Cornucopia card game, including rules, strategies, and tips for effective threat modeling.
cornucopia.owasp.org
October 11, 2026 at 8:30 AM
In addition, Cybersecurity Month is here. For AI security, we have labs with A1 posters, diagrams, presentations, game master cheat sheets, and live vulnerable LLM AI apps written in Java, TypeScript, .NET, Python, Android Java, and iOS Swift.
Check it out: cornucopia.owasp.org/how-to-play#...
Check it out: cornucopia.owasp.org/how-to-play#...
The numbers behind this (NCSC, OWASP, NIST, CrowdStrike)- www.snippipedia.com/articles/pro...
www.snippipedia.com
October 11, 2026 at 12:11 AM
The numbers behind this (NCSC, OWASP, NIST, CrowdStrike)- www.snippipedia.com/articles/pro...
222 tests + 20 attack vectors for agentic AI—go beyond prompt flaws. #AgenticAI #AITesting #SecurityChecklist #RedTeam #OWASP #AIThreats https://thedailytechfeed.com/agentic-ai-red-team-checklist-222-tests-for-20-attack-vectors/
October 9, 2026 at 4:31 PM
222 tests + 20 attack vectors for agentic AI—go beyond prompt flaws. #AgenticAI #AITesting #SecurityChecklist #RedTeam #OWASP #AIThreats https://thedailytechfeed.com/agentic-ai-red-team-checklist-222-tests-for-20-attack-vectors/
Testing for OWASP Top 10? Don't just scan—think like an attacker. Pro-tip: Automated scanners miss broken access control (A01:2021) 9 times out of 10. Manual logic testing is still your best friend. Don't rely on the tool alone. #CyberSecurity #OWASP
October 8, 2026 at 6:08 PM
Testing for OWASP Top 10? Don't just scan—think like an attacker. Pro-tip: Automated scanners miss broken access control (A01:2021) 9 times out of 10. Manual logic testing is still your best friend. Don't rely on the tool alone. #CyberSecurity #OWASP
🚨 EUVD-2026-97824
📊 7.2/10
🏢 corazawaf
📝 OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecA...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97824
#cybersecurity #infosec #cve #euvd
📊 7.2/10
🏢 corazawaf
📝 OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecA...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97824
#cybersecurity #infosec #cve #euvd
October 12, 2026 at 10:06 PM
🚨 EUVD-2026-97824
📊 7.2/10
🏢 corazawaf
📝 OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecA...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97824
#cybersecurity #infosec #cve #euvd
📊 7.2/10
🏢 corazawaf
📝 OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecA...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97824
#cybersecurity #infosec #cve #euvd
🔐El investigador del #VRAIN @upv.es , Santiago Escobar, ha creado, junto con otros profesionales valencianos, un capítulo de OWASP® Foundation (Open Worldwide Application Security Project) en la ciudad de València. ↪️ 👉 Más información aquí vrain.upv.es/el-investiga...
El investigador de VRAIN de la UPV, Santiago Escobar, junto con otros profesionales valencianos, crea un capítulo de OWASP Valencia
El capítulo de OWASP Valencia organizará actividades físicas y virtuales de forma gratuita para compartir conocimiento, herramientas y experiencias reales sobre cómo construir software más seguro
vrain.upv.es
October 13, 2026 at 10:51 AM
🔐El investigador del #VRAIN @upv.es , Santiago Escobar, ha creado, junto con otros profesionales valencianos, un capítulo de OWASP® Foundation (Open Worldwide Application Security Project) en la ciudad de València. ↪️ 👉 Más información aquí vrain.upv.es/el-investiga...
Stickers arrived in time for the @owasp-juice.shop event with @owasp.org Chennai... ✨🧃✨
October 6, 2026 at 6:01 PM
Stickers arrived in time for the @owasp-juice.shop event with @owasp.org Chennai... ✨🧃✨
The OWASP LLM Top 10 maps major LLM risks, from prompt injection and excessive agency to model theft. Today on the blog, J Simpson reviews them all and sees how developers can reduce the attack surface with familiar security controls.
Guide to the OWASP LLM Top 10 | Nordic APIs |
Explore the OWASP LLM Top 10, including prompt injection, excessive agency, model theft, and practical mitigation strategies.
nordicapis.com
October 8, 2026 at 7:01 AM
The OWASP LLM Top 10 maps major LLM risks, from prompt injection and excessive agency to model theft. Today on the blog, J Simpson reviews them all and sees how developers can reduce the attack surface with familiar security controls.
Blog｜OWASP API Security Top 10 2023〜OWASP Top 10との違い〜
https://yamory.io/blog/owasp-api-security-2023
https://yamory.io/blog/owasp-api-security-2023
Blog｜OWASP API Security Top 10 2023〜OWASP Top 10との違い〜
API セキュリティのベストプラクティスの紹介とOWASP Top 10との違いについて紹介します。
yamory.io
October 8, 2026 at 2:09 PM
Blog｜OWASP API Security Top 10 2023〜OWASP Top 10との違い〜
https://yamory.io/blog/owasp-api-security-2023
https://yamory.io/blog/owasp-api-security-2023