NewsPublished 21 Sep 2026

Owasp compromised?

Source Reddit Cybersecurity

Discussion

A potential compromise of the OWASP API Security website (https://api-security.owasp.org/) has been reported via a Reddit post. The page currently displays a responsible disclosure notice from NOX Offensive Security indicating a vulnerability affecting the organization and requesting secure contact for further details. No sensitive technical details or exploit information are publicly disclosed at this time.

r/cybersecurity (opens in a new tab)u/tpasmall0 points0 comments

Looks like the API security page may be compromised?

https://api-security.owasp.org/

Links cited in the discussion

https://api-security.owasp.org/

Impact

The impact is currently unclear as no technical details or exploit information have been disclosed. The presence of a responsible disclosure notice indicates a vulnerability was identified but does not confirm active exploitation or data breach. Without further information, the potential impact on OWASP or its users cannot be assessed.

Defensive guidance

The notice advises contacting the NOX Offensive Security team through a verified channel to coordinate responsible disclosure and remediation. Organizations should follow up securely with the security team to address the vulnerability.

Summary

A Reddit post suggests that the OWASP API Security website may be compromised. The site currently shows a security notice from NOX Offensive Security about an identified vulnerability, inviting the organization to engage in a responsible disclosure process. No technical details or evidence of active exploitation are publicly available. The notice encourages secure communication to validate recipients and coordinate remediation steps.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 21 Sep 2026, 20:16 UTC

Technical details

References

Community reviews

Related threats