A07:2025 – Authentication Failures – Why Logins Still Get Hacked

Authentication failures are more common than you think a company I worked with recently had a worrying incident. A hacker got into an admin account even though the login page…

Ahsan Mohsin December 27, 2025

Metaphor for A10:2025: A small exception causing catastrophic security failure in a modern application.

Application Security OWASP

A10:2025 Mishandling of Exceptional Conditions – The Quiet AppSec Failure No One Owns

If you’ve been in application security long enough, you’ll recognise this pattern instantly: the vulnerability wasn’t exotic, the exploit wasn’t clever, and yet the impact was catastrophic. A stack trace…

Ahsan Mohsin December 22, 2025

Metaphor for choosing secure-by-default paved roads over security gates in application security programs.

Application Security DevOps

Why Most Application Security Programs Fail Before They Begin

Most Application Security (AppSec) programs don’t fail because the team is “bad” or because they didn’t buy enough tools. They fail because the program is built on the wrong assumptions. A successful application…

Ahsan Mohsin December 19, 2025