Grateful for the incredible energy and engagement during the ๐ฝ๐๐ฏ๐น๐ถ๐ฐ ๐๐ผ๐ฟ๐ธ๐๐ต๐ผ๐ฝ ๐ ๐ฑ๐ฒ๐น๐ถ๐๐ฒ๐ฟ๐ฒ๐ฑ ๐ผ๐ป ๐ญ๐ญ๐๐ต ๐๐ฒ๐ฐ๐ฒ๐บ๐ฏ๐ฒ๐ฟ
We spent time unpacking the ๐๐ฝ๐ฑ๐ฎ๐๐ฒ๐ฑ ๐ข๐ช๐๐ฆ๐ฃ ๐ง๐ผ๐ฝ ๐ญ๐ฌ, not as a checklistโbut as a living reflection of how ๐๐- ๐ฎ๐ป๐ฑ ๐๐๐ -๐ฑ๐ฟ๐ถ๐๐ฒ๐ป ๐ฑ๐ฒ๐๐ฒ๐น๐ผ๐ฝ๐บ๐ฒ๐ป๐ ๐ถ๐ ๐ฟ๐ฒ๐๐ต๐ฎ๐ฝ๐ถ๐ป๐ด ๐๐ต๐ฒ ๐ฎ๐ฝ๐ฝ๐น๐ถ๐ฐ๐ฎ๐๐ถ๐ผ๐ป ๐๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐น๐ฎ๐ป๐ฑ๐๐ฐ๐ฎ๐ฝ๐ฒ.
The OWASP Top 10:2025 is here โ the 8th edition of the Ten Most Critical Web Application Security Risks. This release reflects not just data, but real-world insight from the global AppSec community. A huge thank you to everyone who contributed data, expertise, and perspective โ this wouldnโt exist without you.
Whatโs new in 2025:
- Two new categories and one consolidation
- Stronger focus on root causes over symptoms
- Expanded coverage of supply chain, misconfiguration, and failure-handling risks
From Broken Access Control (#1) to the newly added Mishandling of Exceptional Conditions (#10), this edition captures how modern software complexity is reshaping security risk.
If you build, ship, or secure applications, this list is still your essential baseline.
๐๐ถ๐ป๐ธ ๐๐ผ ๐๐ต๐ฒ ๐๐ผ๐๐๐๐ฏ๐ฒ ๐ฃ๐น๐ฎ๐๐น๐ถ๐๐ - https://www.youtube.com/watch?v=0eap2704fAA&list=PLUKo5k_oSrfOJ2GsuKHEiyZLcvvG8zr0h
๐ข๐ป-๐ฑ๐ฒ๐บ๐ฎ๐ป๐ฑ ๐ฅ๐ฒ๐ฐ๐ผ๐ฟ๐ฑ๐ถ๐ป๐ด - https://go.snyk.io/12-11-owasp-top-10-isc2.html
Top 10:2025 List
- A01 Broken Access Control & SSRF
- A02 Security Misconfiguration
- A03 Software Supply Chain Failures
- A04 Cryptographic Failures
- A05 Injection
- A06 Insecure Design
- A07 Authentication Failures
- A08 Software or Data Integrity Failures
- A09 Security Logging and Alerting Failures
- A10 Mishandling of Exceptional Conditions
The questions, examples, and shared experiences reinforced one thing:
๐ ๐ ๐ผ๐ฑ๐ฒ๐ฟ๐ป ๐๐ฝ๐ฝ๐ฆ๐ฒ๐ฐ ๐ถ๐ ๐ป๐ผ ๐น๐ผ๐ป๐ด๐ฒ๐ฟ ๐ท๐๐๐ ๐ฎ๐ฏ๐ผ๐๐ ๐ณ๐ถ๐ป๐ฑ๐ถ๐ป๐ด ๐๐๐น๐ป๐ฒ๐ฟ๐ฎ๐ฏ๐ถ๐น๐ถ๐๐ถ๐ฒ๐โ๐ถ๐โ๐ ๐ฎ๐ฏ๐ผ๐๐ ๐๐ป๐ฑ๐ฒ๐ฟ๐๐๐ฎ๐ป๐ฑ๐ถ๐ป๐ด ๐๐๐๐๐ฒ๐บ ๐ฏ๐ฒ๐ต๐ฎ๐๐ถ๐ผ๐ฟ, ๐๐ ๐ฐ๐ผ๐ป๐๐ฒ๐ ๐, ๐ฎ๐ป๐ฑ ๐ต๐๐บ๐ฎ๐ป ๐๐ฟ๐๐๐ ๐ฏ๐ผ๐๐ป๐ฑ๐ฎ๐ฟ๐ถ๐ฒ๐.
Thank you to everyone who joined - developers, security engineers, architects, leaders, students, and curious mindsโfor making it an interactive, thoughtful, and honest conversation.
Looking forward to continuing these discussions and learning together as the threat landscape evolves.
#OWASP #OWASPTop10 #AppSec #AI #LLMSecurity #AISecurity #DevSecOps #ApplicationSecurity #CyberSecurity #SecureCoding #SoftwareSecurity #AgenticAI #SecurityCommunity #PublicWorkshop