Tag

OWASP

9 articles

Latest in OWASP

Conceptual illustration of generated code passing through security checks between a laptop and enterprise servers.

How to Secure AI-Generated Code Across an Enterprise SDLC

Broken access control has topped the last two editions of OWASP Top 10, with OWASP finding some form of it in every application in its dataset. AI coding assistants are making this worse because correct access rules depend on busi…

Oct 27, 20263 min

All OWASP Articles

Showing 1–9 of 9

May26

Blogs

OWASP Adopts CVE Lite CLI to Boost Dependency Scanning

Checking for dependency vulnerabilities in freshly developed software is usually done near the end of the build process. Remediation at that point can be tricky. Now, JavaScript an…

3 min

Nov01

Blogs

Update to Open Source ZAP Tool Improves DAST Performance

An update to the OWASP Zed Attack Proxy (ZAP) open source dynamic application security testing (DAST) tool made available today improves performance by employing a multi-threaded p…

3 min

Aug09

Blogs

CREST Defines Quality Verification Standard for AppSec Testing

At the Black Hat USA 2022 conference, CREST today shared a quality assurance verification standard to improve application security testing. The standard is based on the open source…

3 min

Aug04

Blogs

The Everything-As-Code Revolution and the OWASP Top 10

After years of stagnation, the Open Web Application Security Project (OWASP) Top 10 list finally saw some shakeup. Most notably, insecure design debuted on the list as the number f…

3 min

Jun23

Business of DevOps

What the New OWASP Top 10 Changes Mean to Devs

The open web application security project (OWASP) recently updated its top 10 list of the most critical security risks to web applications after four years. It represents the most…

3 min

Jan11

Compliance

What Is OWASP?

With cybersecurity attacks rising, it is important for you to enforce secure software best practices, like OWASP and the OWASP Top 10. OWASP helps you to safeguard your code agains…

3 min

Nov16

Blogs

DevSecOps Implementation: Source Composition Analysis

This is the second installment in this series on DevSecOps. Read the first installment, on Static Analysis, here. One of the better additions to security in recent years is source…

3 min

Jan01

Blogs

Best of 2019: Breaking Down the OWASP API Security Top 10, Part 1

As we close out 2019, we at DevOps.com wanted to highlight the five most popular articles of the year. Following is the fifth in our weeklong series of the Best of 2019. As a resul…

3 min