Loading story…
OWASP has released the Subtractive Security Top 10 Project, a new security engineering framework that prioritizes removing attacker pathways over adding more detection tooling. The project defines a defense hierarchy of Delete > Constrain > Monitor, urging organizations to eliminate unnecessary access, services, trust relationships, privileges, protocols, and exposed systems before relying on monitoring for residual risk. OWASP says the approach is designed to reduce opportunities for initial access, lateral movement, privilege escalation, and persistence across enterprise environments.
The project also introduces Path Erasure Rate (PER), a metric intended to measure how many adversary-accessible attack paths have been structurally removed. OWASP has published the guidance in a public GitHub repository under the Apache 2.0 license, with platform-specific hardening standards covering environments including Windows, Linux, Active Directory, AWS, Microsoft 365, networks, IoT, macOS, applications, data stores, CI/CD pipelines, HPC, and AI infrastructure, and says additional standards are planned.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
OWASP made the Subtractive Security Top 10 Project available in a public GitHub repository as an open-source initiative under the Apache License 2.0. The project introduces a framework centered on eliminating or constraining attack paths and defines the Path Erasure Rate (PER) as its measurement model.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Open Worldwide Application Security Project (OWASP) unveiled the 2025 edition of its Top 10 list of critical risks to web applications at the Global AppSec conference in Washington, D.C. This update, the first since 2021, reflects a significant shift in focus from individual code-level vulnerabilities to broader, systemic risks. Notable changes include the merging and redefinition of previous categories, the elevation of Security Misconfiguration to the second position, and the introduction of a new risk: "Mishandling of Exceptional Conditions." The list is the result of a community-driven process involving extensive data analysis and industry feedback, and is intended as a starting point for organizations to build robust security programs. Industry experts highlight that the 2025 Top 10 is now more aligned with the concerns of CISOs and security leaders, emphasizing risks such as software supply chain failures and security misconfigurations. The inclusion of these categories reflects the growing importance of third-party software and deployment practices in the modern threat landscape. While the list serves as a guide for prioritizing risk, it is not meant to be a compliance checklist but rather a strategic tool for organizations to address the most pressing security challenges in web application development and deployment.
Jul 12, 2026
OWASP’s GenAI Security Project published the **2026 Top 10 for LLM Applications**, updating its guidance for securing AI applications and autonomous agents with a methodology that blends community input and real-world incident data. The project analyzed **7,714 AI-related security incidents**, including **6,639** detailed enough for classification, making this the first edition shaped in part by observed incidents rather than practitioner consensus alone. **Prompt Injection** remained the top-ranked risk, **Sensitive Information Disclosure** stayed near the top, and **Excessive Agency** rose to third as agentic deployments showed growing operational risk. The update also reshaped several categories to reflect how attacks and failures are evolving. OWASP renamed **System Prompt Leakage** to **Hidden Context Exposure**, expanded **Prompt Injection** to include cross-modal attacks, and broadened **Data and Model Poisoning** to cover fine-tuning subversion. **Misinformation** moved higher because incident data showed significant real-world harm, while **Unbounded Consumption** was highlighted as an emerging availability and cost risk. OWASP said organizations should build resilient architectures around fallible models, using containment, least agency, access control before retrieval, output validation, and supply-chain security, and mapped the risks to frameworks including **MITRE ATLAS**, **MITRE ATT&CK**, **CWE**, **NIST AI 600-1**, **NIST AI RMF**, and the **CSA AI Controls Matrix**.
Sep 3, 2026
The Open Web Application Security Project (OWASP) has officially published its inaugural list of the top ten security threats facing agentic artificial intelligence (AI) applications. Announced at Black Hat Europe 2025, the list highlights risks such as agent goal hijacking, privilege abuse, unexpected code execution, insecure inter-agent communication, and memory/context poisoning. Alongside the list, OWASP released governance and security guides for AI agents, a visual risk map for open-source and commercial agentic AI tools, and a Capture The Flag application (FinBot) to help cybersecurity teams practice defending against these threats. The initiative aims to help organizations understand and mitigate the rapidly expanding attack surface introduced by the proliferation of AI agents across enterprise environments. Industry experts, including members of the Agentic Security Initiative (ASI) Distinguished Review Board, have emphasized the significance of this release, noting the growing adoption of agentic AI in sectors such as GRC, AppSec, and SecOps, as well as its exploitation by malicious actors. The OWASP Top 10 for Agentic Applications is positioned as a foundational resource for security leaders, developers, and practitioners to assess and address the unique risks posed by autonomous AI agents, supplementing previous OWASP projects focused on web applications and large language models. The publication is expected to drive further research, awareness, and best practices in securing agentic AI systems as their use becomes more widespread.
Jun 29, 2026