If you’re involved in securing APIs, applications and web applications, or looking to learn about these, then the OWASP Global AppSec DC Conference next week is a must-attend event. Wallarm, the experts in API and application security, will be there, and we’re excited to connect with you on October 30 and 31st. Why OWASP 2023 Global AppSec Event? The OWASP Global AppSec DC Conference is a global event for professionals in the field of application…
Over the past several months, we’ve taken a journey through the new 2023 OWASP API Security Top-10 list. In the previous 12 weekly posts, we’ve delved into each category, discussed what it is, how it’s exploited, why it matters, and suggested effective protections for each. Now, as we conclude this series, it’s time to summarize and offer some practical guidance for security practitioners looking to bolster API security in their organizations. TL;DR Here is the…
Welcome to the 12th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it. To see previous posts you might have missed, click here. This post will put a spotlight on Injection, which used to be its own category (OWASP…
Welcome to the 11th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API10:2023 Unsafe Consumption of APIs. In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it. To see previous posts you might have missed, click here. TL;DR APIs are meant to interact…
Welcome to the 10th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API9:2023 Improper Inventory Management. In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it. To see previous posts you might have missed, click here. TL;DR When an API or the environment…
Welcome to the 9th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API8:2023 Security Misconfiguration. In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it. To see previous posts you might have missed, click here. TL;DR This category encompasses any misconfiguration of the…