#OWASP
7 articles
Prompt Injection in LLMs — Threats 2026 and How to Defend
Prompt injection is the new SQL injection — attack #1 in OWASP LLM Top 10. How it works, why classic filters don't help, and what you can really do to secure AI applications.
OWASP API Security Top 10 (2023) — complete guide to API threats
The OWASP API Security Top 10 (2023) is to APIs today what the Web Top 10 was a decade ago — a shared language for development teams, pentesters and compliance functions. Except that an API is a different attack surface than a classic web application.
IDOR — What Is Insecure Direct Object Reference and How to Prevent It
IDOR (Insecure Direct Object Reference) is a critical access control vulnerability that exposes private data through predictable object identifiers. Learn how IDOR works, real-world attack examples, and proven prevention techniques.
What Is a Mobile Application? Security, Threats, and Data Protection
A mobile application is software for smartphones. Learn about security threats and methods for protecting data.
API Penetration Testing — a complete guide to API security testing
API penetration testing — OWASP API Security Top 10, REST vs GraphQL vs gRPC, tools, methodologies. Learn how to secure your APIs.
LLM Security - Prompt Injection and AI Threats [OWASP Top 10]
Learn about threats to large language models: prompt injection, jailbreaking, data leakage. OWASP Top 10 LLM and how to safely deploy AI.
What is CWE? Guide to Common Weakness Enumeration
CWE (Common Weakness Enumeration) is a catalog of common software weaknesses. Learn about CWE Top 25, the difference between CWE and CVE, and how to use CWE in secure software development.