Analyzing the OWASP Top 10 2021

Join myself (@shellsharks) and my good friend Mike (@QWORDsmith) as we discuss the new OWASP Top 10 for 2021.

Note on this episode: My audio was incredibly quiet during the recording so when editing I had to pump up the volume which introduced a fair bit of static. I apologize and hope the episode is bearable despite that static!

 

Show Notes

    Preshow

• Simplenote: https://simplenote.com
• Notion: https://www.notion.so
• Obsidian: https://obsidian.md
• Visual Studio Code: https://code.visualstudio.com
• Notepad++: https://notepad-plus-plus.org/downloads/
• GitHub Pages: https://pages.github.com
• Atom: https://atom.io

Main Show

• Funny OWASP Top 10 2021 Tweet - https://twitter.com/CubicleApril/status/1437531584119386116?s=20
• Infosec Blogs: https://shellsharks.com/infosec-blogs
• An Ode to RSS: https://shellsharks.com/an-ode-to-rss
• Shortcuts: https://apps.apple.com/us/app/shortcuts/id915249334
• Netsparker Article on OWASP Top 10 2021: https://www.netsparker.com/blog/web-security/owasp-top-10-2021-not-what-you-think/
• OWASP Top 10: https://owasp.org/www-project-top-ten/
• OWASP ASVS: https://owasp.org/www-project-application-security-verification-standard/
• OWASP Top 10 2010: https://owasp.org/www-pdf-archive/OWASP_Top_10_-_2010.pdf
• OWASP Top 10 2013: https://owasp.org/www-pdf-archive/OWASP_Top_10_-_2013.pdf
• OWASP Top 10 2017: https://owasp.org/www-pdf-archive//OWASP-Top-10-2017-en.pdf
• OMIGOD: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure
• That’s some Galen Eros level shit: https://www.reddit.com/r/cybersecurity/comments/podx9q/omigod_widespread_azure_linux_vulns_in_hidden/
• ChaosDB: https://chaosdb.wiz.io