Topic
Every article tagged OWASP Top 10, newest first.
Stay ahead of emerging threats with our in-depth analysis of the OWASP Top 10 2025. Discover the new risks, including Software Supply Chain Failures, and learn how to fortify your web application security.
Keep reading
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.