Vandana Verma

Owasp

| Discussion (5) | Talk (46) |
Icon for discussion
OWASP Spotlight - Project 37 - OWASP EKS Goat
(24 Sep 2026)

Placeholder for OWASP Spotlight - Project 37 - OWASP EKS Goat
OWASP Spotlight Series

Icon for talk
Who Installed That AI Skill? | OWASP AST09 - No Governance
(18 Sep 2026)

Placeholder for Who Installed That AI Skill? | OWASP AST09 - No Governance
OWASP Agentic Skills Top 10

Icon for talk
Why AI Skills Become Unsafe Across Platforms | OWASP AST10 - Cross Platform Reuse
(18 Sep 2026)

Placeholder for Why AI Skills Become Unsafe Across Platforms | OWASP AST10 - Cross Platform Reuse
OWASP Agentic Skills Top 10

Icon for talk
The AI Skill Changed After Approval | OWASP AST07 - Update Drift
(17 Sep 2026)

Placeholder for The AI Skill Changed After Approval | OWASP AST07 - Update Drift
OWASP Agentic Skills Top 10

Icon for talk
Why Traditional Scanners Miss Malicious AI Skills | OWASP AST08 - Poor Scanning
(17 Sep 2026)

Placeholder for Why Traditional Scanners Miss Malicious AI Skills | OWASP AST08 - Poor Scanning
OWASP Agentic Skills Top 10

Icon for talk
Can an External URL Hijack an AI Skill? | OWASP AST05 - Untrusted External Instructions
(16 Sep 2026)

Placeholder for Can an External URL Hijack an AI Skill? | OWASP AST05 - Untrusted External Instructions
OWASP Agentic Skills Top 10

Icon for talk
Why AI Agent Skills Need Sandboxing | OWASP AST06 - Weak Isolation
(16 Sep 2026)

Placeholder for Why AI Agent Skills Need Sandboxing | OWASP AST06 - Weak Isolation
OWASP Agentic Skills Top 10

Icon for talk
Insecure AI Skill Metadata Explained | OWASP AST04 - Insecure Metadata
(15 Sep 2026)

Placeholder for Insecure AI Skill Metadata Explained | OWASP AST04 - Insecure Metadata
OWASP Agentic Skills Top 10

Icon for discussion
OWASP Spotlight - Project 36 - OWASP Agentic Skills Top 10 (AST1 - AST10)
(15 Sep 2026)

Placeholder for OWASP Spotlight - Project 36 - OWASP Agentic Skills Top 10 (AST1 - AST10)
OWASP Spotlight Series

Icon for talk
When AI Skills Get Too Much Access | OWASP AST03 - Over Privileged Skills
(15 Sep 2026)

Placeholder for When AI Skills Get Too Much Access | OWASP AST03 - Over Privileged Skills
OWASP Agentic Skills Top 10

Icon for talk
AI Skill Supply Chain Attacks Explained | OWASP AST02 - Supply Chain Compromise
(14 Sep 2026)

Placeholder for AI Skill Supply Chain Attacks Explained | OWASP AST02 - Supply Chain Compromise
OWASP Agentic Skills Top 10

Icon for talk
Malicious AI Agent Skills Explained | OWASP AST01 - Malicious Skills
(14 Sep 2026)

Placeholder for Malicious AI Agent Skills Explained | OWASP AST01 - Malicious Skills
OWASP Agentic Skills Top 10

Icon for discussion
OWASP Spotlight - Project 35 - OWASP AI Bill of Material (AIBOM)
(14 Sep 2026)

Placeholder for OWASP Spotlight - Project 35 - OWASP AI Bill of Material (AIBOM)
OWASP Spotlight Series

Icon for talk
AI Skills - What are SKILLS
(12 Sep 2026)

Placeholder for AI Skills - What are SKILLS
OWASP Agentic Skills Top 10

Icon for talk
ASI10 Rogue Agents
(31 Aug 2026)

Placeholder for ASI10 Rogue Agents
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI09 - Human Agent Trust Exploitation
(30 Aug 2026)

Placeholder for ASI09 - Human Agent Trust Exploitation
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI08 - Cascading Failures
(29 Aug 2026)

Placeholder for ASI08 - Cascading Failures
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI07 - Insecure Inter- Agent Communication
(28 Aug 2026)

Placeholder for ASI07 - Insecure Inter- Agent Communication
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI06 - Memory and Context Poisoning
(27 Aug 2026)

Placeholder for ASI06 - Memory and Context Poisoning
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI05 - Unexpected Code Execution
(26 Aug 2026)

Placeholder for ASI05 - Unexpected Code Execution
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI04 - Agentic Supply Chain Vulnerabilities
(25 Aug 2026)

Placeholder for ASI04 - Agentic Supply Chain Vulnerabilities
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI03 - Identity and Privilege Abuse
(24 Aug 2026)

Placeholder for ASI03 - Identity and Privilege Abuse
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI02 - Tool Misuse and Exploitation
(23 Aug 2026)

Placeholder for ASI02 - Tool Misuse and Exploitation
OWASP Top 10 for Agentic Applications 2026

Icon for talk
ASI01 - Agent Goal Hijack
(22 Aug 2026)

Placeholder for ASI01 - Agent Goal Hijack
OWASP Top 10 for Agentic Applications 2026

Icon for discussion
OWASP MAS with Sven and Carlos
(30 Jun 2026)

Placeholder for OWASP MAS with Sven and Carlos
OWASP Spotlight Series

Icon for talk
A01:2025 Broken Access Control
(19 Dec 2025)

Placeholder for A01:2025 Broken Access Control
OWASP Top 10 2025

Icon for talk
A01:2025 SSRF
(19 Dec 2025)

Placeholder for A01:2025 SSRF
OWASP Top 10 2025

Icon for talk
A02:2025 Security Misconfiguration
(19 Dec 2025)

Placeholder for A02:2025 Security Misconfiguration
OWASP Top 10 2025

Icon for talk
A03:2025 Software Supply Chain Failures
(19 Dec 2025)

Placeholder for A03:2025 Software Supply Chain Failures
OWASP Top 10 2025

Icon for talk
A04:2025 Cryptographic Failures
(19 Dec 2025)

Placeholder for A04:2025 Cryptographic Failures
OWASP Top 10 2025

Icon for talk
A05:2025 Injection
(19 Dec 2025)

Placeholder for A05:2025 Injection
OWASP Top 10 2025

Icon for talk
A06:2025 Insecure Design
(19 Dec 2025)

Placeholder for A06:2025 Insecure Design
OWASP Top 10 2025

Icon for talk
A07:2025 Authentication Failures
(19 Dec 2025)

Placeholder for A07:2025 Authentication Failures
OWASP Top 10 2025

Icon for talk
A08:2025 Software or Data Integrity Failures
(19 Dec 2025)

Placeholder for A08:2025 Software or Data Integrity Failures
OWASP Top 10 2025

Icon for talk
A09:2025 Security Logging & Alerting Failures
(19 Dec 2025)

Placeholder for A09:2025 Security Logging & Alerting Failures
OWASP Top 10 2025

Icon for talk
A10:2025 Mishandling of Exceptional Conditions
(19 Dec 2025)

Placeholder for A10:2025 Mishandling of Exceptional Conditions
OWASP Top 10 2025

Icon for talk
OWASP Top10 Intro
(19 Dec 2025)

Placeholder for OWASP Top10 Intro
OWASP Top 10 2025

Icon for talk
First Look - OWASP MCP Top 10 – 2025
(30 Oct 2025)

Placeholder for First Look - OWASP MCP Top 10 – 2025
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 for LLM10:2025 Unbounded Consumption
(28 Sep 2025)

Placeholder for OWASP Top 10 for LLM10:2025 Unbounded Consumption
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 for LLM09:2025 - Misinformation
(27 Sep 2025)

Placeholder for OWASP Top 10 for LLM09:2025 - Misinformation
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 forLLM08:2025 - Vector and Embedding Weaknesses
(26 Sep 2025)

Placeholder for OWASP Top 10 forLLM08:2025 - Vector and Embedding Weaknesses
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 for LLM07:2025 - System Prompt Leakage
(25 Sep 2025)

Placeholder for OWASP Top 10 for LLM07:2025 - System Prompt Leakage
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 for LLM06:2025 - Excessive Agency
(06 Sep 2025)

Placeholder for OWASP Top 10 for LLM06:2025 - Excessive Agency
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 for LLM05:2025 - Improper Output Handling
(03 Sep 2025)

Placeholder for OWASP Top 10 for LLM05:2025 - Improper Output Handling
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 for LLM04 - Data and Model Poisoning
(28 Aug 2025)

Placeholder for OWASP Top 10 for LLM04 - Data and Model Poisoning
OWASP Top 10 for LLM Applications

Icon for talk
OWASP Top 10 for LLM03 - Supply Chain Vulnerabilities
(27 Aug 2025)

Placeholder for OWASP Top 10 for LLM03 - Supply Chain Vulnerabilities
OWASP Top 10 for LLM Applications

Icon for talk
Let’s start learning AI Security
(25 Aug 2025)

Placeholder for Let's start learning AI Security
OWASP Top 10 for LLM Applications

Icon for talk
OWASP - Securing Agentic Applications Guide 1.0
(31 Jul 2025)

Placeholder for OWASP - Securing Agentic Applications Guide 1.0
OWASP Top 10 for LLM Applications

Icon for talk
OWASP TOP 10 for LLM02: Sensitive Information Disclosure
(20 Jul 2025)

Placeholder for OWASP TOP 10 for LLM02: Sensitive Information Disclosure
OWASP Top 10 for LLM Applications

Icon for talk
OWASP TOP 10 for LLM01: Prompt Injection
(17 Jul 2025)

Placeholder for OWASP TOP 10 for LLM01: Prompt Injection
OWASP Top 10 for LLM Applications

Icon for discussion
Threat Modeling Manifesto
(03 May 2024)

Placeholder for Threat Modeling Manifesto
OWASP Spotlight Series