- OWASP Gen AI Security Project - Top 10 LLM Apps & Gen AI, Newsletter
- Posts
- OWASP Gen AI Security Project / Top 10 LLM Applications Newsletter - March '25 Edition
OWASP Gen AI Security Project / Top 10 LLM Applications Newsletter - March '25 Edition
Greetings Gen AI Security Enthusiasts and OWASP Community Members!
GenAI Admin
March 31, 2025
Featured for March
The OWASP Top 10 for LLM and GenAI has become the OWASP GenAI Project, Better reflecting the broad set of resources the project is publishing, including the OWASP Top 10 for LLM and GenAI. The project was also recognized by the OWASP Foundation Board of Directors and promoted to an OWASP Flagship Project. Read more about in in the link below.
New Resources This Month
Five New Translations of the Top 10 for LLM for 2025 - Chinese (Traditional) - Spanish - Portuguese - German |
The Agentic Threats Navigator is a guide that outlines key attack surfaces in agentic AI systems, including reasoning, memory, tools, identity, human oversight, and multi-agent interactions. It provides threats and examples to help security teams understand and assess risks in agentic AI systems. |
Check Out the Resources Library
Access the full catalog of resources, publications, tools and presentations.
https://genai.owasp.org/resources/
Agenda is Final
OWASP AI Security Summit: Safeguarding GenAI & Agentic Apps, @ RSAC 2025
Keep Watching our Linked-In Channel, More details coming on RSA activities
Join us to dive deep and explore the latest best practices in LLM & GenAI security, agentic security, AI red teaming, incident response, and governance, hosted by OWASP Gen AI Security Project, Gain expert insights on the OWASP Top 10 LLM and GenAI risks, AI security solution landscape, and cutting-edge defense strategies. Engage with industry leaders and stay to meet the open project core team.
Topic Areas
Project Update, Top 10 for GenAI 2025, Securing Agentic Apps, Red Teaming w/ Gen AI, The Latest GenAI CTI Research, New Governance tools for CISOs, AI Security Solution Landscape for Q2 2025 overview & trends, and more.
The full agenda will be published on the RSAC OWASP AI Security Summit Page.
Come for the Summit,
Attend The Entire RSA Conference
Join, learn, & save. OWASP members enjoy $750 off RSAC 2025 Conference RSAC 2025 brings together passionate thinkers, innovators, and problem-solvers
from Apr. 28 – May 1 in San Francisco.
Together, we’ll break new ground, sharpen our skills, and push the boundaries of what’s possible in cybersecurity. Register by March 28 to save $600 on a Full Conference Pass! Plus, OWASP members can unlock additional savings of $150 by using code 1U5OWASPFD. Secure your spot.
Join the Bi-Weekly Open Project Meeting
Get the latest tea on the project!!
Join us every other Wednesday at 9am PST for our bi-weekly open project meeting. Follow the link below to get the Zoom details. Come Join us !! https://genai.owasp.org/meetings/
Highlights From The Project Blog
OWASP Gen AI Incident & Exploit Round-up, Jan-Feb 2025 |
This Month’s Gen AI Security Podcast
Exploring Agentic AI Security with OWASP: Insecure Agent Hackathon
In this episode of our podcast, Aubrey from the OWASP GenAI Security Project sits down with Ali Howe, the founder of Growth Cyber and contributor to the project. Alie shares her journey from software engineering to becoming a vCISO, emphasizing the importance of AI security and SOC 2 compliance for startups. She discusses the upcoming OWASP Insecure Agents Hackathon in New York City, where developers will explore building AI agents with a focus on identifying and mitigating security threats.
The Generative AI Security Podcast is our Projects Monthly Podcast highlighting the project, research drill downs, practical examples, chats on AI and Cybersecurity trends and much more.
The podcast is available anywhere you get your podcasts including Apple Podcasts, Spotify and others. You can also catch up on past open project meetings there as well to get the latest tea on the project.
Upcoming Events
Come to the Project’s Sessions! Speaker: Scott Clinton Speaker: John Sotiropoulos More details coming with the event agenda |
For a Full List of upcoming and past Events visit the project website events page.
https://genai.owasp.org/events
Looking Ahead in April
New Learning Portal - Coming Soon
To our current website we will be adding a learning portal in March to make is easier to get up to speed and learn about our latest guidance, drill down on the details oh how best to securely adopt and secure generative AI applications.
This includes Community Created Videos, Webinar Recordings, Meetings, Training, Virtual Events and more.
AI Security Solutions Landscape, for Q2’25
The updated AI Security Landscape launches at the end of March. We're still accepting inputs and adding use case filters like Red Teaming and Agentic App Security to simplify finding Gen AI security solutions. Know a useful tool? Submit it below! You dont have to be a vendor.
New Volunteer Job Listings
As a community driven, volunteer effort the project is always looking for people to contribute their skill and expertise. Where we have specific needs we have created volunteer job listing to help volunteers understand the communities’ needs and commitments. If you know someone or want to contribute yourself check out these needs.
Working Group: Outreach
Newsletter & Social Media Marketing Lead (Volunteer)
The Newsletter & Social Media Marketing Lead will manage the OWASP Gen AI Security Project’s newsletters and social media channels, creating engaging content to grow community awareness. Responsibilities include content creation, scheduling, and engagement across platforms, collaborating with the Outreach & Marketing Committee to drive outreach efforts and promote AI.
Working Group: Outreach
Virtual and Physical Events Lead (Volunteer)
The Marketing Events Lead will coordinate virtual and in-person events for the OWASP Gen AI Security Project, ensuring seamless planning, promotion, and execution. Responsibilities include event logistics, speaker coordination, and community engagement, working with the Outreach & Marketing Committee to enhance participation and awareness in AI security discussions worldwide.
Keep track of future volunteer jobs on Volunteer Jobs Page on our website.