Excellent article discussing the top 10 application vulnerabilities. Given this year has seen Equifax, US Military, and a number of other organizations fail there job at use security; 2017 is the year everyone learned that organizations do not make security a first class concern. This means the engineers must enforce the a security first mind set.
W/o further ado, https://blog.sqreen.io/owasp-top-10-cheat-sheet-startup-ctos/
