OWASP releases its 2026 LLM Top 10

OWASP released its 2026 Top 10 for LLM Applications, a ten-risk guide built from updated research and thousands of real-world AI-security incidents. The new OWASP guidance maps risks to NIST, MITRE ATLAS, CWE, and its agentic-applications work; the Agent Control Standard adds portable, declarative controls enforced at runtime. Builders shipping small-model security routing should use the list as a threat-modeling floor, not a compliance certificate: coverage cannot prove an implementation is safe.