Broken Authentication

Broken authentication is one of the most common and dangerous web application security risks. It can lead to data…

Security Misconfiguration

A deep dive of security misconfiguration: how it happens, which…

2023 OWASP TOP 10

Everything you need to know about the 2023 cyber threat landscape.

Lack of Protection from Automated Threats

Automated threats are malicious activities that use software tools or scripts to…

Server-side Request Forgery

Server-side request forgery (SSRF) is a type of web application vulnerability that allows an attacker to make…

Unsafe Consumption of APIs

A deep dive of unsafe consumption of APIs: how it happens, which…

Broken Object Property Level Authorization

In this fourth blog post of our 2023 OWASP Top 10 series, we will explore one of the…

Broken Object Level Authorization (OLA)

Object level authorization (OLA) is a security mechanism that ensures that only authorized…

Improper Asset Management

A deep dive of improper asset management: how it happens, which cybersecurity roles are responsible for dealing with it and how to prevent and mitigate this risk.

Broken Function Level Authorization (BFLA)

A deep dive on how broken function level authorization…