Priveon Labs Security Blog

The OWASP has released its Top 10 for 2010 document which can be found here.

As published on their site, the top 10 Risks are:

• A1: Injection
• A2: Cross-Site Scripting (XSS)
• A3: Broken Authentication and Session Management
• A4: Insecure Direct Object References
• A5: Cross-Site Request Forgery (CSRF)
• A6: Security Misconfiguration
• A7: Insecure Cryptographic Storage
• A8: Failure to Restrict URL Access
• A9: Insufficient Transport Layer Protection
• A10: Unvalidated Redirects and Forwards

Please ensure your web developers and/or development partners are following OWASP guidelines and are familiar with OWASP best practices. And, it goes without saying, if they don't know what OWASP is, find a new developer now!