thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

OWASP Mobile Top 10

OWASP's list of the ten most critical security risks for mobile applications, last updated in 2024.

Definition

The 2024 list is: M1 Improper Credential Usage, M2 Inadequate Supply Chain Security, M3 Insecure Authentication/Authorization, M4 Insufficient Input/Output Validation, M5 Insecure Communication, M6 Inadequate Privacy Controls, M7 Insufficient Binary Protections, M8 Security Misconfiguration, M9 Insecure Data Storage and M10 Insufficient Cryptography.

Example

A mobile pentest report maps a hard-coded API key to M1 Improper Credential Usage.

Exam tip

The 2024 edition replaced the 2016 list; M1 is now Improper Credential Usage.

Related terms