OWASP OASIS Is Official: AI-Powered Vulnerability Fixes at Scale
OWASP OASIS is now an official OWASP community project. Learn how its AI-powered fix automation and human validation model aims to remediate open-source vulnerabilities.
6 min read
Topic
OWASP
Every article tagged OWASP, newest first.
3 articles
Related topics
- Agentic AI, 2 articles
- AI Security, 2 articles
- LLM Security, 2 articles
- AI Agent Security, 1 article
- AI Architecture, 1 article
- AI threat modeling, 1 article
- AI-Powered Security, 1 article
- Application Security, 1 article
- MAESTRO Framework, 1 article
- MAS, 1 article
- Multi-Agent Systems, 1 article
- Open Source Security, 1 article
Articles tagged OWASP
Guide: Building Secure Agentic Applications
AI Agents introduce new security risks. Learn how to secure your autonomous AI systems with this architectural guide based on the OWASP Agentic Security Initiative.
8 min read
OWASP's MAESTRO: Securing Agentic AI's Next Frontier
OWASP unveils guide for AI Agent Security. Explore the MAESTRO framework for threat modeling Multi-Agent Systems (MAS), key agentic threats, and mitigation strategies.
9 min read
Keep reading
Latest from the blog
GitHub Package Firewall: Install-Time Security for AI Agents and Pipelines
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
18 min read
Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read