Voor iedereen die het nog niet kent, OWASP AI exchange, "300+ pages of free, constantly-evolving, practical guidance on securing AI systems"
owaspai.org
#AI #owasp #security

REGISTER NOW: appsecil.org/registr...
Code: AppSecIL2026 (10% off)
#AppSecIL #OWASP

Hey app dev pros! Did you know the OWASP Top 10 isn't just a checklist, it's a living, breathing risk landscape? Go beyond automated scans. True web vulnerability testing requires understanding each threat deeply. Manual analysis uncovers the subtle flaws.

#OWASP #WebAppSec #Cyb

Turns out, the polish airlines have misplaced all my luggage and equipment that I brought with me except these decks so now I have this and nothing else. I am becoming a more and more like a courier every day. This won’t go well.

#owasp #cornucopia #security #games #appsec #threatmodeling

Scanners miss logic. OWASP #1 (Broken Access Control) usually requires a human touch. Pro-tip: Try swapping user IDs in your API requests. If you see someone else's data, you’ve found a critical. 🛡️

#AppSec #OWASP #BugBounty

Get your tickets now for Germany OWASP Day: owasp.glueup.com/event/german...

#owasp #security #games #cornucopia #appsec #threatmodeling #threatmodelling

Did you know Broken Access Control is the #1 OWASP risk? 🏆 Scanners usually miss IDORs. Pro-tip: Manually swap IDs in requests to see if you can access data you shouldn't. Logic flaws need human eyes, not just scripts. #AppSec #OWASP #WebSecurity

OWASP Pro-tip: Broken Access Control is #1 for a reason. Scanners often miss logic flaws, so manually test if swapping an ID in a URL lets you see someone else’s data. Tools find the holes; humans find the flaws. 🛡️

#AppSec #OWASP #WebSecurity

🔐 The OWASP MAS team, Sven Schleier & Carlos Holguera, has been working with the Dutch Ministry of the Interior and Kingdom Relations (MinBZK) on the EUDI program to support secure certification for EUDI Wallets.
Find out what they’ve been working on 👇
owasp.org/news/owasp...

#OWASP #AppSec #EUDI

A chatbot hallucination can produce a bad answer. A hallucination from an agent with production credentials can produce an outage." OWASP founder Jeff Williams on why AI agent security has to live in the harness, not the model:
coderlegion.com/27559/owasp-... #AIAgents #AppSec #OWASP

The @owasp lists focus limited security attention where it matters most. #OWASP Top 10 for #AI #LLM applications reflects the growing consequences of giving LLM applications access to tools and enterprise systems. Prompt injection remains #1. HT @aembit_io go.aembit.io/s/the-owasp-...

Thank you to secuvera GmbH for supporting OWASP as a Corporate Supporter!

Since 1988, secuvera has helped organizations and technology manufacturers understand, improve, and demonstrate the security of their systems and products.

Learn more: www.secuvera.de/

#OWASP #corporatesupporter

appsecdayisrael2026....

REGISTER NOW: appsecil.org/registr...
Code: AppSecIL2026 (10% off)
#AppSecIL #OWASP

Special thanks to Robert Babaev and Katie McMillan for speaking at the #OWASP #Ottawa September meetup. Thank you to the volunteers who helped make this happen and a special thanks to @uottawaeng.bsky.social for providing an excellent venue.

Deploy #OWASP #Amass on #Debian #VPS

This article provides a guide demonstrating how to deploy OWASP Amass on Debian VPS.
What is OWASP Amass?
OWASP Amass is an open-source, command-line framework used by #security professionals to: map attack surfaces, discover external ...
Continued 👉 #ufw

Stop focusing only on the OWASP Top 10. Pro-tip: vulnerabilities often live in the business logic between those categories. Automated scanners miss the "why" behind the code; manual testing is your best defense. Stay sharp!

#InfoSec #WebSecurity #OWASP

Stop treating OWASP Top 10 like a checklist and start treating it like a threat model. Pro-tip: Focus on business logic flaws; automated scanners miss the context that human attackers exploit every day. Stay sharp out there! 🛡️

#InfoSec #OWASP

The latest update for #SignMyCode includes "What Is ML-KEM? Guide to #NIST's Post-Quantum Key Encapsulation Mechanism" and "#OWASP Top 10 for Large Language Model Applications: Complete Guide to LOL Security Risks".

#potatosecurity #softwaresecurity #codesigning https://opsmtrs.com/3SAy0lg

The latest update for #SignMyCode includes "What Is ML-KEM? Guide to #NIST's Post-Quantum Key Encapsulation Mechanism" and "#OWASP Top 10 for Large Language Model Applications: Complete Guide to LLM Security Risks".

#cybersecurity #softwaresecurity #codesigning https://opsmtrs.com/3SAy0lg

Stop treating OWASP Top 10 as a checklist and start treating it as a baseline.

Pro-tip: Focus on Broken Access Control (A01) first. Most scanners miss logical flaws that only a human eye can spot. Automation is just the start.

#CyberSecurity #OWASP