Insecure Design Vulnerabilities: OWASP Top 10 A04 Explained with Examples

In this video, we break down Insecure Design, a critical issue from the OWASP Top 10, that leads to serious vulnerabilities in applications. Dive into real-world examples of insecure design flaws, such as business logic vulnerabilities, revealing sensitive data in error messages, and failure to log critical actions. We also cover essential prevention strategies using frameworks like STRIDE for threat modeling and MITRE ATT&CK, helping developers and security professionals identify and mitigate risks early in the design process. Watch to learn how a design flaw led to an “infinite money” exploit in Coinbase and understand how you can prevent similar issues in your own applications.