OWASP Top 10 For Large Language Model Applications & Generative AI

Welcome to the first episode of the Gen AI Security #Podcast! ?? Join Aubrey King, Sandy Dunn, and Scott Clinton as they discuss #Thanksgiving plans and dive into the OWASP Top Ten for #LLM apps. We'll cover our recent 2025 release, #deepfake guidance, and evolving AI architectures like #RAG. Perfect for a mix of holiday cheer and cutting-edge cybersecurity insights! #GenAISecurity #Cybersecurity #Podcast #Thanksgiving #AI #OWASP https://lnkd.in/gFjgHTcw

A Quick Look at v. 1.1 versus Version 2025 from Sandy!

???Exciting Updates from the OWASP Top 10 for LLM & Gen AI Group!??? In our latest meeting on November 20, 2023, we celebrated some major milestones and had dynamic discussions on our continued efforts to shape the future of AI and cybersecurity. Here's a quick recap on our Meeting Podcast: https://lnkd.in/gi26fc6w ???New Top 10 List Released!?We proudly launched the updated 2025 version of the OWASP Top 10, which has already received incredible feedback from the community. ???Sponsorship Success!?Scott Clinton shared the fantastic progress of our sponsorship program, which is driving our initiatives forward. ???Community Engagement & Growth!?We discussed our impressive social media growth, project roadmap, and how we’re fostering community contributions. ???Newsletter & Outreach Plans!?Krishna provided updates on our newsletter and future webinars to keep the community informed and engaged. ???New Initiatives!?From brainstorming workshops and virtual events to enhancing our solutions landscape, we’re constantly innovating to serve our community better. ????Looking Ahead!?Steve Wilson addressed the need for structured governance to support our evolving project, ensuring we continue to break new ground in the industry. A huge THANK YOU to everyone who has contributed to our journey. Your dedication and support are what make this community so impactful. ?? Stay tuned for more updates and join us as we continue to lead the way in AI and cybersecurity! #OWASP #CyberSecurity #AI #LLM #GenAI #MeetingRecap #Top10 #Community #Innovation #Sponsorship #Webinars #Governance

Read the latest about growing data exposure risks in Infosecurity Magazine, featuring insights from the OWASP Top 10 For Large Language Model Applications & Generative AI team Full article: https://lnkd.in/eWDw6yQF

???Explore the Cutting-Edge of AI Security with Our Interactive Solution Landscape!???? We're excited to unveil our dynamic, interactive tool, the?"GenAI LLMSecOps and Security Solution Landscape"! ??? This comprehensive resource is designed to keep you ahead of the curve with the latest AI security solutions, updated in real-time. ???What's Inside??Our interactive tool and accompanying document offer a thorough exploration of security challenges and solutions for Large Language Models (LLMs) and Generative AI applications. Here’s what you can expect: ???Interactive Solution Landscape: Discover the latest and most effective security solutions in real-time. Our live page is continuously updated with new tools and technologies tailored to secure LLMs and AI applications.?Explore the live page????In-Depth Guide: Our document provides a detailed framework and categorization of solution areas, aligned with the OWASP Top 10 for LLMs and the CISO Cybersecurity and Governance Checklist. ???Comprehensive Coverage: From static prompt augmentation, agent applications, LLM plugins/extensions, to complex generative AI applications, our guide covers it all. ???Lifecycle Management: Learn about LLMOps & LLMSecOps stages, including planning, data augmentation, development, testing, deployment, operation, monitoring, and governance. ???Emerging Security Solutions: Stay informed about innovative tools like LLM Firewalls, automated benchmarking, AI Security Posture Management, and more. ???Why You Should Engage: As AI and LLM technologies advance, so do the associated security risks. Our interactive tool and document are essential for developers, AppSec professionals, DevSecOps teams, and security leaders who aim to create secure AI applications. ???Get Started: Dive into the interactive tool today and stay updated with the latest ecosystem solutions!?Explore the live page here: https://lnkd.in/gzSEaFKK A heartfelt thank you to all our contributors and reviewers who have made this initiative possible. Your expertise and commitment are driving the future of AI security! ?? #AI #LLM #Security #CyberSecurity #DevSecOps #AIsecurity #OWASP #GenerativeAI #LLMSecOps #InteractiveTool

OWASP Top 10 for LLM/Gen AI Project Launches New Sponsorship Program, Welcomes Inaugural Sponsors The OWASP Gen AI Project (https://genai.owasp.org) is an open-source, community-driven effort made up of more than 5,500+ security and GenAI experts, corporate supporters, and community members who share their expertise with the industry.?? The new sponsorship program is designed to provide continued investment for the project in exchange for recognition to help ensure the project's sustainability to continue its research, educating, and publishing guidance to help organizations better secure LLM and generative AI applications. We want to welcome our “Inaugural” sponsors: - HiddenLayer.com? - Lakera.ai? - Lasso.Security? - Mend.io? - PaloAltoNetworks.com - Pangea.Cloud - PromptArmor.com - Prompt.Security - Securiti.ai - Synack.com - Snyk.io Sponsorship funding helps support the operating costs, research and outreach activities to support the community of experts, contributors and supporters. It also demonstrates our sponsor leadership commitment to contributing to the challenge of securing the rapidly evolving AI application security challenges through open industry collaboration. The project also announced the availability of the 2025 OWASP Top 10 List for LLMs, revised from the 2023/24 list to represent the changing AI security landscape for 2025. Read more about the announcement here: https://lnkd.in/gq6RdmjU See what our Inaugural Sponsors have to say: https://lnkd.in/gHNwCAuF Interested in Sponsorship, check out the Project's sponsorship page: https://lnkd.in/gFPazHNs Download you copy of the 2025 OWASP Top 10 List for LLMs: https://lnkd.in/ghmANG-7

Today's the day! The new LLM Apps Top 10 for 2025 is here!

The 2025 OWASP Top 10 for Large Language Models is Here !!, New Sponsor Program and Inaugural Sponsors. The Top 10 for LLM announced the immediate availability of the Top 10 for 2025 the revised guidance delivers new insights and expanded coverage of risks facing organizations developing and deploying LLM and Generative AI applications in 2025. In addition, the project announced a new sponsorship program and inaugural sponsors that build upon our 5500+ strong community of supporters and contributors. Thank you to our Inaugural Sponsors: - HiddenLayer - Lakera - Lasso Security - Mend.io - Palo Alto Networks - Pangea Security - PromptArmor - Prompt Security - Securiti - Synack - Snyk Read more about the news on the project blog. https://lnkd.in/gq6RdmjU

???Discover the Future of AI Security with Our New Guide!???? We're thrilled to announce the release of our comprehensive document, "GenAI LLMSecOps and Security Solution Landscape," now available for all AI enthusiasts and professionals! ??? ???What's Inside??Our guide provides a deep dive into the security challenges and solutions for Large Language Models (LLMs) and Generative AI applications, covering everything from development to deployment and beyond. Here are some key highlights: ???Scope & Objectives: A shared definition of solution categories addressing the security of LLMs across their lifecycle, aligned with OWASP Top 10 for LLMs and CISO Cybersecurity and Governance Checklist. ???Solution Landscape: Detailed categories for static prompt augmentation, agent applications, LLM plugins/extensions, and complex applications. ???LLMOps & LLMSecOps: Comprehensive stages from planning, data augmentation, development, testing, to deployment, operation, monitoring, and governance. ???Emerging Security Solutions: Insights into new tools like LLM Firewalls, automated benchmarking, AI Security Posture Management, and more. ???Community Contributions: A collaborative effort with inputs from top experts and organizations in the AI security field. ???Why You Should Read It: As AI technology rapidly evolves, securing AI and LLM applications is paramount. Our guide equips developers, AppSec professionals, DevSecOps teams, and security leaders with the knowledge and tools to build robust, secure AI applications. ???Get Your Copy: Dive into the full document and start enhancing your AI security strategies today! https://lnkd.in/g5AvtPR3 A big thank you to all our contributors and reviewers who made this guide possible. Your expertise and dedication are invaluable! ?? #AI #LLM #Security #CyberSecurity #DevSecOps #AIsecurity #OWASP #GenerativeAI #LLMSecOps

?? Congratulations to an incredible panel team at AIMed 2024! ??I had the honor of moderating a truly transformative discussion with these outstanding Trustworthy Technology and Innovation in Healthcare Book Series Consortium (TTIC) leaders and stand on the shoulders of dozens of the top people in our fields as well as our extraordinary Medigram, Inc. team. Hats off to the panel: Steven Ramirez, representing Renown Health– Illuminating the path to secure, AI-ready healthcare infrastructures. Anahi Santiago, EMBA at ChristianaCare– Delivering expertise on balancing #innovation with #cybersecurity. Joshua Tamayo-Sarver, MD, PhD, FACEP, FAMIA at Vituity and Inflect – Sharing clinical insights on building trust in AI-driven models. Shaun E. Garcia, MD with Brevard Health Alliance, Inc.– Highlighting the alignment of AI with clinical quality metrics. ?? Key Takeaways & Themes: ? AI isn’t replacing clinical expertise—it’s amplifying it! ? Governance and cybersecurity are critical foundations for safe and effective AI. ? Practical strategies for integrating AI must prioritize patient outcomes, trust, and cross-disciplinary collaboration. ? The power of frameworks like IEEE UL 2933, which emphasize TIPPSS (Trust, Identity, Privacy, Protection, Safety, and Security), is essential to operationalizing AI in real-world settings. ?? One clear message emerged: Real transformation happens when we bring the right people together to align governance, technology, and clinical priorities who are all committed to the same standards. In our case those are IEEE UL 2933, Databricks AI Security Framework DASF, and OWASP Top 10 For Large Language Model Applications & Generative AI which gets you comprehensive coverage of traditional AI and LLM for security, reliability, ethics, and trustworthiness. ??Whenever possible, to meet the needs of stakeholders and decision makers in medicine and medical education; these standards should be ANSI accredited and/or built by hundreds of experts in multiple countries under trustworthy consensus process. ?? A huge thank you to my fellow panelists for their insights and to AIMed for hosting such an impactful meeting. Over the coming days and weeks, we’ll share more conference photos and highlights from this session. Stay tuned! Join TTIC again with myself, Ed Gaudet, Apurv Gupta, MD, MPH, Steve Wilson who will run the sequel discussion on identifying and closing the gaps to governing AI agents in healthcare at Medical Intelligence 10 (MI10) with the founder of AIMed, Anthony Chang, MD, MBA, MPH, MS and Arlen Meyers, MD, MBA on November 26, 2024 at 7AM Pacific. AI agents are behind the hot insurance denials controversy. ?? Join us and register free for the session here: https://lnkd.in/gyAFwVU8 ?? Let’s keep the conversation going: What are your thoughts on aligning AI with healthcare governance and clinical practice? #AIinHealthcare #AIMed2024 #Leadership #Innovation #Medigram #TTIC