Episode 179: OWASP Top 10 Part 1 - Broken Access Control, IDOR, and CORS Explained

About this episode

The episode discusses the OWASP Top 10, focusing on Broken Access Control, IDOR, and CORS as part of a multi-part series.

In Episode 179 of the Cyber Threat Perspective podcast, host Brad Causey and web app pen tester Jordan Natter kick off a multi-part series on the OWASP Top 10, the newly updated list of the most common and critical web application security risks, with a fresh version released in 2025. Before diving in, Brad sets the record straight on something that's been bugging him for 20 years: the OWASP Top 10 is an awareness document, not a compliance framework, not a pen test checklist, and not a compr...

People in this episode

Host: Brad Causey

Guest: Jordan Natter

Topics covered

• web application security
• OWASP Top 10
• access control
• IDOR
• CORS
• security risks

Keywords

• OWASP
• web application
• security risks
• Broken Access Control
• IDOR
• CORS
• pen testing
• compliance

Mentioned in this episode

Organizations: OWASP

More episodes of The Cyber Threat Perspective

• Episode 184 | Active Directory Isn't Dead. It's Just Undefended. · June 11, 2026 · 29 min
• Episode 183 | OWASP Top 10 Part 2: Security Misconfigurations That Get You Hacked · June 5, 2026 · 29 min
• Episode 182: Patching Crisis — Vulns Now #1 Attack Vector (2026 Verizon DBIR) · May 27, 2026 · 31 min
• [Replay] Episode 159: How to Break Into Cybersecurity — What Actually Works · May 20, 2026 · 45 min
• Episode 181: AI Zero Days (Google Threat Intelligence Report) · May 12, 2026 · 41 min
• Episode 180: Cybersecurity Echo Chambers — How to Think Critically in a Hype-Driven Industry · May 7, 2026 · 29 min