The OWASP LLM Top 10 has a few surprises for you

What’s the biggest, baddest, most unruly problem in AI security?

Turns out that depends on whether you’re asking practitioners or looking at incident data.

In this episode of IBM Security Intelligence, we break down the OWASP LLM Top 10 for 2026, which took the unusual step of using both community votes and incident databases to inform its rankings. There are some interesting gaps—the data says misinformation is a bigger deal than the pros think, while prompt injections happen less than the headlines might have you believe. But it’s not as simple as “numbers don’t lie and the experts are wrong.”

Then, CISA's 2026 SBOM guidance asks for even more data, but does that actually mean less risk? And our panelists share highlights from Black Hat, including new details on how attackers can use misinformation to hijack agentic browsers.

All that and more on Security Intelligence.

00:00 - Intro

1:26 - OWASP LLM Top 10

12:55 - CISA’s SBOM guidance

20:05 - Black Hat 2026 highlights

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."