AI agents

OWASP has released the Top 10 for Agentic AI Applications, a community framework for securing autonomous, tool-using AI systems. The source says it is informed by real incidents and has already been adopted across industry.

The OWASP GenAI Security Project released a Top 10 list of risks and mitigations for agentic AI security on December 10, 2025. The release is described as the culmination of input from over 100 industry leaders and extensive published resources.

MITRE released ATLAS Data v5.0.0, which adds a "Technique Maturity" field to the distributed ATLAS.yaml file. The field grades evidence behind each technique as Feasible, Demonstrated, or Realized. The release also adds several new AI agent techniques, including AI Agent Context Poisoning, RAG Credential Harvesting, and Exfiltration via AI Agent Tool Invocation, plus one new case study.

OWASP's Agentic Security Initiative (ASI) has a taxonomy called Agentic AI – Threats and Mitigations. Three developer tools, PENSAR, SPLX.AI Agentic Radar, and AI&ME, now adopt it to help teams test, defend, and build agentic systems. The ecosystem is also informing the forthcoming OWASP Top 10 for Agentic AI.

The OWASP Gen AI Security Project held a hackathon in NYC to build insecure AI agents. The source recaps the event and the most common security findings from the submissions, and notes that AI agents are prone to threats outlined in the Agentic AI – Threats and Mitigations guide released in February.