Season 7 Guests — The best of Season 7

Which ideas from Season 7 deserve another listen? Chris and Robert assemble clips from across the season, creating a fast tour through secure development maturity, intentionally vulnerable applications, IoT security, static analysis, cloud risk, artificial intelligence, threat modeling, data protection, JavaScript supply-chain defense, penetration testing, API design, and Ruby on Rails. Each segment returns to the guest’s own explanation rather than reducing the episode to a host summary. The result is both a recap and a listening guide: Janek Hollenbach, Cindy Blake, Aaron Guzman, Drew Dennison, Ochaun Marshall, Graham Holmes, Elie Saad, Grant Ongers, Michael Furman, Anastasia Voitova, Aaron Davis, Caroline Wong, Dmitry Sotnikov, and Frank Rietta each contribute a distinct practical lesson.The Application Security Podcast is brought to you by Security Journey.About Security JourneySecurity Journey provides application security education for developers and everyone in the software development lifecycle.→ Learn more about Security JourneyConnect with Chris Romeo and Robert Hurlbut:→ Chris Romeo on LinkedIn→ Robert Hurlbut on LinkedInMentioned in this episode:→ OWASP SAMM→ MultiJuicer→ OWASP IoTGoat→ Semgrep→ OWASP Cornucopia→ OWASP ASVS→ LavaMoat→ MetaMask→ OWASP Top 10→ OWASP SAMM→ OWASP Cornucopia→ Ruby on RailsFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Season 7 highlights01:37 Sebastien Deleersnyder on OWASP SAMM02:48 Janek Hollenbach on MultiJuicer04:05 Cindy Blake on security in DevSecOps05:59 Aaron Guzman on OWASP IoTGoat07:11 Drew Dennison on how Semgrep works10:39 Ochaun Marshall on AWS security frustration13:10 Graham Holmes on trustworthy AI16:34 Elie Saad’s introduction to OWASP18:29 Grant Ongers on threat modeling games22:16 Chris Romeo on the state of security24:35 Michael Furman on SameSite cookies25:53 Anastasia Voitova on data security28:05 Aaron Davis on defending LavaMoat29:38 Caroline Wong on modern penetration testing32:04 Dmitry Sotnikov on REST API security35:57 Frank Rietta on Ruby on Rails39:22 Closing Season 7