In this talk, we will delve into the world of application security beyond the widely recognized OWASP Top10. This catalog of the most critical security risks to web applications has been a benchmark in the industry for decades and is frequently referenced in job interviews and service descriptions of security companies. However, with updates only occurring every four years, it begs the question: is the security world really that slow to change? We will discuss a relatively new attack pattern and analyze its evolution in recent years to provide a fresh perspective on the dynamics of the application security world.