0x03 - 2021-08-01 OWASP Top 10

<p>Show notes 1-August - Top10 updates and more with Andrew van der Stock</p> <p>TOP10 section notes:</p> <p>We have talked with former Board member, current Executive Director of OWASP and long term big time contributor to the Top 10 project, Andrew van der Stock, about;</p> <p>The past and the present of OWASP Top10.</p> <p>What it is and what it isn't.&nbsp;</p> <p>How it is different to standards or other Top X lists.</p> <p>The data and process behind it and the new Top10!</p> <p>YOU HEAR IT HERE FIRST FOLKS!! Changes to the categories and ordering to Top10 - Andrew goes through the new categories and major changes!</p> <p>Follow the project on twitter @ https://twitter.com/owasptop10</p> <p>For the process: https://www.owasptopten.org/</p> <p>For data submission:</p> <p>https://github.com/OWASP/Top10/tree/master/2021/Data</p> <p>3 new categories in 2021 version:</p> <p>Insecure design (missing, ineffective or redundant designs)</p> <p>Server side request forgery (SSRF)</p> <p>Software and data integrity failures</p> <p>Ordering has changed and multiple previous categories merged. Final order will be revealed at the OWASP 20th Anniversary event on 24th September 2021 https://20thanniversary.owasp.org/</p> <p>We want to thank all contributors to OWASP Top 10 for creating something which inspired many people to get into security.</p> <p>Extras:</p> <p>For getting involved in the education committee or the two new projects mentioned during the episode [Appsec Curriculum project and How to get into Appsec project ] education-committee slack channel is: https://owasp.slack.com/archives/C016H3FK3D5</p> <p>Orange Tsai - world-renowned expert of SSRF - https://twitter.com/orange_8361 &amp; https://blog.orange.tw/</p> <p>Non-Top10 updates:</p> <p>In the spirit of its 20th birthday, we have talked about the story of OWASP.</p> <p>Mark Curphey's post on Veracode blog for the start story of the OWASP: https://www.veracode.com/blog/intro-appsec/start-owasp-true-story</p> <p>New flagship project: Software Bill of Materia