OWASP® Foundation

🐶 Come and get some serious puppy therapy at our Puppy Lounge courtesy of depthfirst! 🐾❤️ Take a moment to switch off, recharge, and enjoy some very good cuddles during Global AppSec US. And the best part? These adorable pups are all looking for their forever homes and are fully adoptable! 🏡🐕 📍 Expo Hall, Pacific Concourse Add a visit to your agenda! 😍 https://lnkd.in/eD3pTvJW #GlobalAppSecSanFran26 #GlobalAppSec26

🔥 You’ve probably heard of OWASP Juice Shop. Now get ready to meet the person leading the workshop. Björn Kimminich is coming to Chennai. 👀 The OWASP Juice Shop Project Leader and OWASP German Chapter Co-Lead will be leading a special hands-on cybersecurity workshop on 24 October 2026. This isn’t going to be just another cybersecurity talk. Think hands-on challenges. Real-world scenarios. Interactive learning. Practical security skills. Come ready to learn, experiment, and get your hands dirty. ⚡ And there’s more… The OWASP Chennai Chapter is joining forces with the OWASP Sri Sairam Engineering College Chapter for this special workshop, with Sri Sai Ram Engineering College sponsoring the venue. 📅 24 October 2026 📍 Sri Sairam Engineering College, Chennai 🎤 Workshop Lead by Björn Kimminich 🤝 OWASP Chennai × OWASP Sri Sairam Engineering College Chapter 🎟️ Registration opens soon. So here's the question: Are you going to hear about this workshop after it happens… or be there when it happens? 👀🔥 Save the date. Watch this space. Something special is coming to Chennai. #OWASP #OWASPChennai #OWASPSaiRam #OWASPJuiceShop #Cybersecurity #ApplicationSecurity #AppSec #SecurityWorkshop #EthicalHacking #InfoSec #Chennai #CyberSecurityCommunity #SecureCoding

The OWASP AIBOM Foundations Guide is now available in Spanish. As AI systems become more complex, understanding what they are made of becomes increasingly important. Models, data, open-source frameworks, retrieval pipelines, agents, tools, APIs, and provider-managed services can all become part of the AI supply chain. The AI Bill of Materials (AIBOM) provides a structured, machine-readable way to document those components and dependencies. Making this guidance available in Spanish is another step toward making OWASP AIBOM resources more accessible to a broader global community. 📄 Read the Spanish edition of the OWASP AIBOM Foundations Guide https://lnkd.in/gGUjC_QH AI supply chain transparency should not stop at one language. With the Spanish edition now available, the next edition is already taking shape in German. Thank you to the contributors helping us bring OWASP AIBOM guidance to more communities. Yuvaraj Govindarajulu Aruneesh Salhotra Martin E. Van Lindberg Tanmay Ambegaokar Bakul Singhal Lovely-Frances D. Anmol Kumar Binal P. Ranjan Goel Sapna Paul Behnaz Karimi John Cavanaugh Yash O. Pratibha Aphale Deba Mishra @Karen Bennet Chetan Velicheti Prediction Guard Codacy Manifest CyberThreatReaper #AIBOM #AISecurity #OWASP #AISupplyChain #SBOM #GenAI

We are proud to support ICCC26, the 25th International Common Criteria Conference, taking place Next week, 28 September–1 October 2026 at Cardo Roma in Rome, Italy. ICCC brings together cybersecurity certification leaders from government, industry, certification schemes, laboratories, standards organizations, and the product security community to address Common Criteria, EUCC, the U.S. Cyber Trust Mark, and an expanding global compliance landscape. Learn more and register: https://iccconference.org/ #ICCC26 #CommonCriteria #CybersecurityCertification #CyberCompliance

We released a new version of #OWASP #Wrongsecrets ! With devcontainer and AI related challenges. Try it out at https://lnkd.in/e_EHfsJ2 and give the repo a ⭐️ if you like it!

A major milestone for OWASP PTK - the project has been approved for 𝗢𝗪𝗔𝗦𝗣 𝗣𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻 level. When I started PTK, the idea was simple: Security testing should happen where modern web applications actually run - inside the browser. Since then, PTK has grown from a browser extension into a broader browser-security ecosystem:   • DAST, client-side SAST, in-browser IAST and SCA   • Manual security testing tools   • PTK Auto and PTK Agent for browser automation   • CI/CD integration through GitHub Actions   • Integration with ZAP   • Support for real authenticated workflows and modern SPAs Reaching Production level is an important recognition of the project’s maturity, continued development and value to the application-security community. It is also a responsibility to keep improving PTK’s security, reliability, documentation and testing coverage. Thank you to OWASP® Foundation, the ZAP team, contributors, users and everyone who has tested PTK, reported issues and shared feedback. This is a major milestone - but certainly not the end of the journey. Security testing where the browser is the source of truth. https://lnkd.in/ejRmZkjw #OWASP #PTK #AppSec #WebSecurity #SecurityTesting #OpenSource #DevSecOps #zaproxy

🔥 OWASP Jeopardy is coming to Global AppSec USA! We’re looking for teams of 3 to battle it out. Think you’ve got what it takes? Get ready to put your AppSec knowledge to the test on Thursday, November 5, 4:30–5:30 pm at Global AppSec USA in San Francisco! Bring the energy, bring your team, and show us what you know! 🏆 👥 Grab two teammates and get involved! https://lnkd.in/ef3ssxgT #GlobalAppSecSanFran26 #GlobalAppSec26 #OWASP #AppSec

What do YOU see here? A bright future, or a scary one? Thursday I will present this Rorschach test in the opening keynote at OWASP Germany day and ask the audience. That keynote 'Staying sane in an AI-insane world' will talk about my personal drive to make AI secure enough to earn our trust rather than our fear - with our data, our systems, and even our children. This mission drives the OWASP AI Exchange, MOSAIC standards, OpenCRE, and efforts to train practitioners across the globe. Of course we will dive into recent developments around AI supposedly 'going rogue'. To share one view already: The OpenAI–Hugging Face incident, where an AI system carrying out advanced hacking activities, was not evidence that all AI may be “going rogue.” This was a specific test in which model safety measures were deliberately removed and the AI was instructed to hack creatively and persistently - basically breaking rules. The fact that it concealed its tracks, for example, is not evidence of a malicious or rebellious “nature.” Avoiding detection is simply part of hacking. The AI was doing what it had been asked to do. It is tempting to anthropomorphize AI behaviour — to describe it as “mean,” “stubborn,” or “power-hungry.” But that creates a misleading story. The lesson is not that AI in general is going rogue. The lesson is that increasingly capable AI systems make the boundaries, permissions and objectives we give them more important than ever.

FIPS 'n' Chips 2026 is partnering with us to offer the OWASP community 25% off! How do you know the cryptography in your applications can be trusted? Join FIPS ’n’ Chips 2026 on October 26–27 in Austin, Texas, to explore what it takes to design, implement, test, and validate secure cryptographic modules. OWASP members can hear expert panels on post-quantum cryptography, entropy, and AI and cybersecurity; engage with NIST and Canadian CMVP leadership on ISO/IEC 19790:2025 adoption; and connect with developers, researchers, and testing professionals. A second-day FIPS Beginner Training Track offers a practical introduction to cryptographic validation. Whether you build applications, assess security, or select cryptographic components, you’ll gain insights to make better security decisions. Code OWASP25-B1E9 gives 25% off https://lnkd.in/gYT7h8MK