Nonprofit foundation Open Web Application Security Project (OWASP) has released an updated draft of its ranking of the top 10 vulnerabilities, the first changes to the list since November 2017. The ...

The viability of the Open Worldwide Application Security Project for the modern open-source software landscape has been called into question. For more than two decades, the Open Worldwide Application ...

Value stream management involves people in the organization to examine workflows and other processes to ensure they are deriving the maximum value from their efforts while eliminating waste — of ...

The OWASP MAS project continues to lead the way in mobile application security. This article describes the resources and ...

The OWASP Foundation has disclosed a data breach after some members' resumes were exposed online due to a misconfiguration of its old Wiki web server. Short for Open Worldwide Application Security ...

The OWASP top 10 list of critical security risks will have a big impact on how businesses address application security moving forward. The changes to the list will require businesses to reevaluate ...

2021 saw a major revamp of the OWASP top 10 most critical and severe application security risks. The first article in this series examined the new methodology that OWASP used to derive its ranking.

A new report on cybersecurity training from CMD+CTRL Security, a leader in software security training, underscores the importance of providing development and security teams with realistic hands-on ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Senyo Simpson discusses how Rust's core ...

API security risk has dramatically evolved in the last two years. Jason Kent, Hacker-in-Residence at Cequence Security, discusses the top API security concerns today and how to address them. As a long ...