We are excited to share that we’ve launched an updated set of Security Labs lessons that match the OWASP Top 10: 2025 list of web app vulnerabilities.  

For the past several cycles, OWASP has released a new list of web app security vulnerabilities every four years. The last two lists were released in 2017 and 2021, and a new list was just released at the end of 2025. 

Security Labs that cover web app vulnerabilities now follow the OWASP Top 10:2025 order. Several categories have changed position, and two new categories have been added.  

New lessons for the two new categories are: 

• OWASP 3: Letting Go of the Outdated (Java) 
• OWASP 10: Fail Securely (Java)