Do you feel like Pablo Escobar waiting for developers to learn threat modeling?
Play OWASP Cornucopia!
cornucopia.owasp.org
Play OWASP Cornucopia!
cornucopia.owasp.org
November 2, 2026 at 5:31 AM
Do you feel like Pablo Escobar waiting for developers to learn threat modeling?
Play OWASP Cornucopia!
cornucopia.owasp.org
Play OWASP Cornucopia!
cornucopia.owasp.org
Attending OWASP Global AppSec USA 2026 Conference in San Francisco?
Join me and Arkadii Yakovets (@arkid15r) for a session on automated security testing with OWASP #Nettacker!
👇
owaspglobalappsecusa...
Join me and Arkadii Yakovets (@arkid15r) for a session on automated security testing with OWASP #Nettacker!
👇
owaspglobalappsecusa...
November 4, 2026 at 4:14 PM
Attending OWASP Global AppSec USA 2026 Conference in San Francisco?
Join me and Arkadii Yakovets (@arkid15r) for a session on automated security testing with OWASP #Nettacker!
👇
owaspglobalappsecusa...
Join me and Arkadii Yakovets (@arkid15r) for a session on automated security testing with OWASP #Nettacker!
👇
owaspglobalappsecusa...
Check out the webshops if you want to buy a physical game to teach threat modelling, do Security awareness or scale threat modelling: cornucopia.owasp.org/webshop
OWASP Cornucopia - Webshop
OWASP Cornucopia webshops for bying the cards decks
cornucopia.owasp.org
November 5, 2026 at 8:17 AM
Check out the webshops if you want to buy a physical game to teach threat modelling, do Security awareness or scale threat modelling: cornucopia.owasp.org/webshop
🚀 Java HTML Sanitizer 20261103.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.1
November 3, 2026 at 2:27 PM
🚀 Java HTML Sanitizer 20261103.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.1
🚀 Java HTML Sanitizer 20261102.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.2
November 3, 2026 at 3:47 AM
🚀 Java HTML Sanitizer 20261102.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.2
Deploy #OWASP #Amass on #Debian #VPS
This article provides a guide demonstrating how to deploy OWASP Amass on Debian VPS.
What is OWASP Amass?
OWASP Amass is an open-source, command-line framework used by #security professionals to: map attack surfaces, discover external ...
Continued 👉 #ufw
This article provides a guide demonstrating how to deploy OWASP Amass on Debian VPS.
What is OWASP Amass?
OWASP Amass is an open-source, command-line framework used by #security professionals to: map attack surfaces, discover external ...
Continued 👉 #ufw
Deploy OWASP Amass on Debian VPS
blog.radwebhosting.com
November 4, 2026 at 12:30 PM
🚀 Java HTML Sanitizer 20261103.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.2
November 3, 2026 at 3:08 PM
🚀 Java HTML Sanitizer 20261103.2 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261103.2
In case you missed it, the Open Worldwide Application Security Project (OWASP), the same people that brought you the top 10 web application vulnerability listing, have a new list out about risks in agent skill files. Must read for any org doing agentic coding. owasp.github.io/www-project-...
The Top 10 Risks — Visual Overview | OWASP Foundation
A visual map of the 10 agentic-skill security risks
owasp.github.io
November 2, 2026 at 3:57 PM
In case you missed it, the Open Worldwide Application Security Project (OWASP), the same people that brought you the top 10 web application vulnerability listing, have a new list out about risks in agent skill files. Must read for any org doing agentic coding. owasp.github.io/www-project-...
Burp Suite vs OWASP ZAP: if you're paying for Burp and only using the proxy, you're overpaying. ZAP covers 80% of that for free. #cybersecurity #tools
November 3, 2026 at 12:21 PM
Burp Suite vs OWASP ZAP: if you're paying for Burp and only using the proxy, you're overpaying. ZAP covers 80% of that for free. #cybersecurity #tools
🚀 Java HTML Sanitizer 20261102.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.1
November 3, 2026 at 2:57 AM
🚀 Java HTML Sanitizer 20261102.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261102.1
🐶 The OWASP staff have been busy puppy-playing… and we think we’ve worn them out! 😂💤 Stop by the Puppy Lounge in the Expo Hall for some furry cuddles! Huge thanks to Depthfirst for bringing the cute factor! 💛🐾
#OWASPSanFran26 #GlobalAppSec26
#OWASPSanFran26 #GlobalAppSec26
November 5, 2026 at 10:59 PM
🐶 The OWASP staff have been busy puppy-playing… and we think we’ve worn them out! 😂💤 Stop by the Puppy Lounge in the Expo Hall for some furry cuddles! Huge thanks to Depthfirst for bringing the cute factor! 💛🐾
#OWASPSanFran26 #GlobalAppSec26
#OWASPSanFran26 #GlobalAppSec26
🚀 Java HTML Sanitizer 20261031.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261031.1
November 1, 2026 at 5:40 AM
🚀 Java HTML Sanitizer 20261031.1 has been released! https://github.com/OWASP/java-html-sanitizer/releases/tag/release-20261031.1
OWASP Cornucopia just released v3.5.10 (github.com/OWASP/cornuc...)
A Special thanks to Rajay Singh, Adarsh kumar, Prajakta G Kamble, Abhrant Singh, Sujala Vasanthasena Nelavai for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#owasp #scurity #threatmodeling #games
A Special thanks to Rajay Singh, Adarsh kumar, Prajakta G Kamble, Abhrant Singh, Sujala Vasanthasena Nelavai for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#owasp #scurity #threatmodeling #games
Release v3.5.10 · OWASP/cornucopia
What's Changed
feat: add Persian build support (#3664) by @V-2007-P in #3669
build(deps-dev): bump svelte-eslint-parser from 1.9.0 to 1.10.0 in /cornucopia.owasp.org by @dependabot[bot] in #3685
b...
github.com
November 5, 2026 at 8:17 AM
OWASP Cornucopia just released v3.5.10 (github.com/OWASP/cornuc...)
A Special thanks to Rajay Singh, Adarsh kumar, Prajakta G Kamble, Abhrant Singh, Sujala Vasanthasena Nelavai for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#owasp #scurity #threatmodeling #games
A Special thanks to Rajay Singh, Adarsh kumar, Prajakta G Kamble, Abhrant Singh, Sujala Vasanthasena Nelavai for all the bug fixes. Cornucopia is getting more secure and stable than ever!
#owasp #scurity #threatmodeling #games
🎉 What a way to wrap up day one of Global AppSec USA! Big laughs, AppSec brainpower and some serious competition at OWASP Jeopardy! 🧠🏆 Huge thanks to our host with the most, Jerry Hoff, for bringing the fun! 🐝🔥
#GlobalAppSec26 #OWASPSanFran26
#GlobalAppSec26 #OWASPSanFran26
November 6, 2026 at 2:12 AM
🎉 What a way to wrap up day one of Global AppSec USA! Big laughs, AppSec brainpower and some serious competition at OWASP Jeopardy! 🧠🏆 Huge thanks to our host with the most, Jerry Hoff, for bringing the fun! 🐝🔥
#GlobalAppSec26 #OWASPSanFran26
#GlobalAppSec26 #OWASPSanFran26
After working 15 hour work days this week to contain a breach I now need to complete the yearly goddamned OWASP training module.
October 30, 2026 at 10:44 PM
After working 15 hour work days this week to contain a breach I now need to complete the yearly goddamned OWASP training module.
OWASP offers a huge list of vulnerable systems we can use to skill up. You can deploy them easily.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:25 PM
OWASP offers a huge list of vulnerable systems we can use to skill up. You can deploy them easily.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
Stop testing your web apps like it’s 2010. Automated scanners miss complex logic flaws that OWASP Top 10 exploits thrive on.
Pro-tip: Always manually test your IDORs; scanners are blind to authorization logic. Trust, but verify. 🛡️
#InfoSec #OWASP #BugBounty
Pro-tip: Always manually test your IDORs; scanners are blind to authorization logic. Trust, but verify. 🛡️
#InfoSec #OWASP #BugBounty
November 5, 2026 at 11:47 PM
Stop testing your web apps like it’s 2010. Automated scanners miss complex logic flaws that OWASP Top 10 exploits thrive on.
Pro-tip: Always manually test your IDORs; scanners are blind to authorization logic. Trust, but verify. 🛡️
#InfoSec #OWASP #BugBounty
Pro-tip: Always manually test your IDORs; scanners are blind to authorization logic. Trust, but verify. 🛡️
#InfoSec #OWASP #BugBounty
I'm going to be at OWASP Global AppSec USA this week. If you're in SF, would love to see you in the Testing track on Thursday at 11:30 AM.
owasp.glueup.com/event/owasp-...
owasp.glueup.com/event/owasp-...
November 3, 2026 at 10:33 PM
I'm going to be at OWASP Global AppSec USA this week. If you're in SF, would love to see you in the Testing track on Thursday at 11:30 AM.
owasp.glueup.com/event/owasp-...
owasp.glueup.com/event/owasp-...
ASP .NET Core meets OWASP Top 10 2025 by @anders.abel.nu www.youtube.com/watch?v=a3XZ... #aspnetcore
November 4, 2026 at 6:29 PM
ASP .NET Core meets OWASP Top 10 2025 by @anders.abel.nu www.youtube.com/watch?v=a3XZ... #aspnetcore
November 2026 OWASP Meetup
November 18, 2026 6:00 pm
Cubo, Newcastle Bank House, Pilgrim Street, Newcastle Upon Tyne, NE1 6QF
cybernorth.biz/cn_events/no...
November 18, 2026 6:00 pm
Cubo, Newcastle Bank House, Pilgrim Street, Newcastle Upon Tyne, NE1 6QF
cybernorth.biz/cn_events/no...
November 2026 OWASP Meetup - CyberNorth
Join OWASP for their November 2026 meetup. Talk 1: ILOVEYOU by Andi Pannell It’s May 2000. Dial-up hums, antivirus is something only your average office IT nerd thinks about, and one email is about to...
cybernorth.biz
November 5, 2026 at 9:01 AM
November 2026 OWASP Meetup
November 18, 2026 6:00 pm
Cubo, Newcastle Bank House, Pilgrim Street, Newcastle Upon Tyne, NE1 6QF
cybernorth.biz/cn_events/no...
November 18, 2026 6:00 pm
Cubo, Newcastle Bank House, Pilgrim Street, Newcastle Upon Tyne, NE1 6QF
cybernorth.biz/cn_events/no...
🛠️ Enterprise AI Agent Skills Bundle for Cursor & Claude Code:
Includes OWASP Top 10 Reviewer, Postgres Migration Lock Auditor, and AWS/GCP Cost Optimizer.
Instant Download: https://neoninnovationlab.gumroad.com/l/devops-ai-skills
Includes OWASP Top 10 Reviewer, Postgres Migration Lock Auditor, and AWS/GCP Cost Optimizer.
Instant Download: https://neoninnovationlab.gumroad.com/l/devops-ai-skills
Enterprise AI Agent Skills Bundle
Production-ready skills for Cursor and Claude Code: Cloud Cost, Postgres & OWASP.
neoninnovationlab.gumroad.com
November 5, 2026 at 6:44 PM
🛠️ Enterprise AI Agent Skills Bundle for Cursor & Claude Code:
Includes OWASP Top 10 Reviewer, Postgres Migration Lock Auditor, and AWS/GCP Cost Optimizer.
Instant Download: https://neoninnovationlab.gumroad.com/l/devops-ai-skills
Includes OWASP Top 10 Reviewer, Postgres Migration Lock Auditor, and AWS/GCP Cost Optimizer.
Instant Download: https://neoninnovationlab.gumroad.com/l/devops-ai-skills
To help enforce this via architecture, the Security Audit Prover forces systematic checks against OWASP standards before an agent can ship code. https://vinkius.com/en/ai-agent-connect/security-audit-prover
Connect Security Audit Prover to ChatGPT, Claude and Gemini
Force your AI agent to audit code against OWASP Top 10. Connect this MCP to Claude, Cursor, or Windsurf to catch leaks and injections before they ship.
vinkius.com
November 2, 2026 at 12:29 AM
To help enforce this via architecture, the Security Audit Prover forces systematic checks against OWASP standards before an agent can ship code. https://vinkius.com/en/ai-agent-connect/security-audit-prover
Are your people falling asleep during your sessions?
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
October 30, 2026 at 5:42 AM
Are your people falling asleep during your sessions?
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
Mine were, Play OWASP Cornucopia!
cornucopia.owasp.org
OWASP BASC 2027 is looking for sponsors! Check out the different packages available at www.basconf.org . You can run your own CTF or conduct your exclusive workshop, sponsor a table or get your logo on the conference artifacts, there is something for everyone!
#owasp #basc #appsec #owaspboston
#owasp #basc #appsec #owaspboston
November 3, 2026 at 2:02 PM
OWASP BASC 2027 is looking for sponsors! Check out the different packages available at www.basconf.org . You can run your own CTF or conduct your exclusive workshop, sponsor a table or get your logo on the conference artifacts, there is something for everyone!
#owasp #basc #appsec #owaspboston
#owasp #basc #appsec #owaspboston
OWASP Agentic AI GOAT: Hands-On Hacking of Multi-Agent LLM Systems at Global AppSec USA 2026 + Video
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…
OWASP Agentic AI GOAT: Hands-On Hacking of Multi-Agent LLM Systems at Global AppSec USA 2026 + Video
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The upcoming presentation at OWASP Global AppSec USA 2026 addresses these risks by launching the open-source platform OWASP Agentic AI GOAT, designed to evaluate and secure multi-agent LLM systems. Learning Objectives & Secrets: Objective 1: Master the exploitation mechanics of prompt injection, direct prompt injection, and goal hijacking within agentic workflows.
undercodetesting.com
November 1, 2026 at 10:35 AM
OWASP Agentic AI GOAT: Hands-On Hacking of Multi-Agent LLM Systems at Global AppSec USA 2026 + Video
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…
Introduction: The rapid evolution of autonomous systems has introduced complex attack vectors, bridging traditional web vulnerabilities with modern Large Language Model (LLM) architectures. The…