The Open Web Application Security Project (OWASP) has released a draft of its ranking of the top 10 vulnerabilities.

Inon Shkedy, Head of Security Research for Traceable, who also serves as the API Security Project Lead at OWASP and has co-authored the OWASP API Top 10, talks to Security about API security risks.