This month, we’ve added five new labs and new campaigns, introducing Common CWE Culprits!

Introducing Common CWE Culprits:

Sometimes, you just need to learn more about the top CWEs and how to fix them. Now you can! We’ve made it easier than ever to assign labs that cover the top 5 most frequently found CWEs across all Veracode scans.

The ‘Common CWE Culprits’ are a series of campaigns that group together individual labs whose topics correspond with specific CWEs. Now, admins can assign these campaigns (pre-grouped labs) to their teams, making it simple to ensure teams have coverage for the most frequently found 5 CWEs.

The ‘Common CWE Culprits’ campaigns are now live for Java, JavaScript, and .NET.

The five new labs this month include:

• OWASP API 5: Neglected endpoints (Java)
• OWASP API 6: Bad Design Compromises Security (Java)
• OWASP API 6: Bad Design Compromises Security (.NET) (revamped!)
• OWASP 10: Get There from Here (.NET)
• OWASP 10: Get There from Here (Flask)

The Security Labs Course Catalog is updated to reflect these changes.