For technical, it's the OWASP Top 10: https://owasp.org/www-project-top-ten/ https://owasp.org/www-project-top-ten/ The site itself is clear enough to read on

For technical, it's the OWASP Top 10: https://owasp.org/www-project-top-ten/ https://owasp.org/www-project-top-ten/ The site itself is clear enough to read on its own, but there are many other sites dedicated to explaining and training around it. It's frequently updated and up to date.