Owasp Top 10 - GoKawiil

Forcepoint Warns AI Agents Can Cause 'Denial of Wallet' Cost Overruns

Forcepoint published research showing how AI applications lacking limits on compute and resource usage can rack up massive, unbudgeted bills, a vulnerability now ranked sixth on OWASP's 2026 Top 10 for LLM Applications. Researcher Jyotika Singh outlined five scenarios, including leaked API credentials being used to flood pay-per-use AI services with requests, driving costs far past expected budgets.

darkreading.com · 2026-09-21

OWASP researchers find prompt injection risk invisible to security scanners

OWASP GenAI Security Project leaders Kyriakos Lambros and Steve Wilson published an analysis comparing expert rankings of LLM security threats against 6,639 real-world incidents pulled from CVE, GitHub advisories, OSV and the AIAAIC database. Prompt injection tops the OWASP expert list for three straight years but ranks only 12th in the incident data, and statistical testing found no reliable agreement between the two rankings.

venturebeat.com · 2026-08-25