Broken access control still tops list of app sec top 10
go.theregister.com
: Risk list highlights misconfigs, supply chain failures, and singles out prompt injection in AI apps