Low-Code/No-Code Top 10 (LCNC)
summary
Project claims a growing OWASP low‑code/no‑code Top 10 and says large vendors and enterprises already adopt it, citing over a million apps inside some organizations. Demonstrations show AI building and deploying GUI, SQL tables and copilot Studio automations on the fly, with bots that can impersonate users if makers embed credentials and defaults stay permissive. One case reports fixing 70,000 vulnerabilities in three months after a program rollout.
AI-written summary · about
chapters (6)
- 0:00Introduction to LCNC security
- 1:53AI impact on LCNC development
- 8:03Defining the LCNC top 10
- 11:36Collaborating on security standards
- 15:51Case study: HR copilot risks
- 24:15Resources and final remarks
related talks
51mSure, Let Business Users Build Their Own. What Could Go Wrong?
51mAre Low-Code and No-Code Tools a Security Risk?
34mSecurity in Low-code/No-code development
28mSecuring LLMs: Insights into OWASP top 10
49mSecuring AI Apps with the OWASP Top Ten for Large Language Models
54mCredential Sharing As A Service: The Dark Side Of No Code
23mVibes Not Vulns: Securing the Era of AI-Written Software
59mSecuring the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs