OWASP Mobile Top 10 2023

Top 10 Mobile Risks - Initial Release 2023

• M1: Insecure Authentication/Authorization

• M2: Insecure Communication

• M3: Inadequate Supply Chain Security

• M4: Inadequate Privacy Controls

• M5: Improper Credential Usage

• M6: Insufficient Input/Output Validation

• M7: Security Misconfiguration

• M8: Insufficient Cryptography

• M9: Insecure Data Storage

• M10: Insufficient Binary Protections