A08:2025 — Software and Data Integrity Failures
Verified by Precogs Threat Research
What are Software Integrity Failures (OWASP A08:2025)?
Code and infrastructure that does not protect against integrity violations. This includes software updates without integrity verification, insecure CI/CD pipelines, insecure deserialization, and auto-update mechanisms that don't validate signatures.
Impact
Works alongside A03 (Supply Chain) to address integrity. Insecure deserialization remains a critical attack vector, and CI/CD pipeline compromise is increasingly common.
How Precogs AI Addresses A08
Precogs AI Binary SAST detects insecure deserialization patterns in compiled code and identifies CI/CD configuration weaknesses that could enable pipeline compromise.