OWASP Top 10 2025 key changes and emerging risks

Rafi Mahmood · 2025-11-11T10:31:34+00:00

For awareness * On 6 November, OWASP released their updated Top 10 2025, introducing two new categories, Software Supply Chain Failures and Mishandling of Exceptional Conditions, and consolidating others to emphasise root causes over symptoms. The update reflects evolving risks in modern application development. * Broken…

Rafi Mahmood

For awareness

On 6 November, OWASP released their updated Top 10 2025, introducing two new categories, Software Supply Chain Failures and Mishandling of Exceptional Conditions, and consolidating others to emphasise root causes over symptoms. The update reflects evolving risks in modern application development.
Broken Access Control remains the top-ranked risk, with Security Misconfiguration rising to second, driven by increased reliance on configuration-driven behaviour. Software Supply Chain Failures, though underrepresented in data, showed the highest average exploit and impact scores.
Organisations are advised to strengthen access control mechanisms, monitor configuration changes, and enhance visibility into software dependencies. Emphasis on secure design, integrity verification, and alerting mechanisms is critical to mitigating risks highlighted in the 2025 update.

Introduction - OWASP Top 10:2025 RC1

Find more posts tagged with

Threat Landscape

Sign in to participate and unlock exclusive content 🔓

It looks like you're new here! Sign in or register to be able to comment, access member-only content and follow the spaces relevant to you.

Comments

There are no comments yet

See what's trending

Click on a tag to discover all the published content related to it.