All Episodes
Absolute AppSec — 336 episodes · page 1 of 4
Episode 337 - w/Coffee, Chaos, and ProdSec - AI Guardrails, Risk Prioritization Shift
Episode 336 - Hardware Image Signing, Bot Reduction, AI Code Insecurities
Episode 335 - w/ Ron Perris - Secure Coding with AI
Episode 334 - w/ Ryan Lloyd - Mobile Application Security
Episode 333 - LLM Patching Flaws, AI Code Regressions, Bug Bounty Economy
Episode 332 - AI SDLC, Call for Cyber Defense, Rumor as the Exploit
Episode 331 - Being "Mythos" Ready, CRLF-Powered De-sync Attacks
Episode 330 - w/ Jeevan Singh - Vulnerability Jail
Episode 329 - AI exploitability, IDOR prevention, Smart TV Proxies
Episode 328 - Wordpress RCE, Vuln Prioritization, AI memory exfiltration
Episode 256 w/ John Poulin - Token Security, Staying Technical as a Manager
Episode 327 - w/Coffee, Chaos, and ProdSec - ASPM Consolidation, Vuln Prioritization
Episode 326 - AppSec Jobs, Benchmarking LLMs, Open Web Standards
Episode 325 - Simplified Threat Modeling, Defining A Vulnerability
Episode 324 - Three Week Trap, Malicious Extensions
Episode 323 - Secrets Logs, Prompt Injection Risks
Episode 322 - Megalodon, Staged Package Publishing, AI Powered Honeypots
Episode 321 - The Future of AppSec
Episode 320 - Return of @lojikil - LLM Bug Hunting, AI OffSec, Defender Burnout
Episode 319 - Vercel Breach, Security vs. Compliance, Pull Request Flows w/ AI Agents
Episode 318 - Slack Impersonation, Mythos, Vulnerability Research Future
Episode 317 - (Post-RSAC/BSidesSF), Supply Chain Security, Future of SDLC
Episode 316 - w/Coffee, Chaos, and ProdSec - Agentic Development Lifecycle
Episode 315 - Risks of "AI-Native" Security Products, Rapid Software Development
Episode 314 - LLM AppSec Disruption, Limitations of AI in Security, AppSec Oversight
Episode 313 - AppSec Role Evolution, AI Skills & Risks, Phishing AI Agents
Episode 312 - Vibe Coding Risks, Burnout, AppSec Scorecards
Episode 311 - Transformation of AppSec, AI Skills, Development Velocity
Episode 310 - w/ Mohan Kumar and Naveen K Mahavisnu - AI Agent Security
Episode 309 - w/ Nathan Hunstad - Compliance, Security Governance
Episode 308 - w/Avi Douglen - Privacy, AppSec Conferences, OWASP
Episode 307 - 2025 Retrospective, Supply Chain, MCP and APIs
Episode 306 - w/ Paul McCarty - Open Source Malware
Episode 305 - Career Impact of GenAI, SEO/GEO, More Supply Chain Attacks
Episode 304 - More OWASP Top 10, AI Dynamic Testing
Episode 303 - w/Prof. Brian Glas - OWASP Top 10 2025
Episode 302 - OWASP Global AppSec DC predictions, AI Browser Dangers, MCP Security
Episode 301 - AI Browsers, New AI Agent Attacks, Framework Checklists
Episode 300 - THIS! IS! APPSEC!
Episode 299 - Startup Grind, Will Security Companies Disappear
Episode 298 - Shai Hulud, Layered Security, New Commandments of Security Teams
Episode 297 - True/False Positives, Phishing Package Maintainers
Episode 296 - OWASP Top 10, NX Compromise, Security News Sources
Episode 295 - DEF CON 33 Recap, Crocs and Socks (and Bots)
Episode 294 - w/ Anshuman Bhartiya - AppSec in the Age of AI
Episode 293 - AppSec's Reality Gap
Episode 292 - Manual Source Code Review, AI Slop in Bug Bounties, AppSec Authorization
Episode 291 - w/ Sean Varga - OWASP Top 10 of AppSec Sales
Episode 290 - Authentication Fatigue, Browser AI Agents
Episode 289 - Return of @lojikil - Context Matters
Episode 288 - Security and AI
Episode 287 - w/ Hayden Smith (Hunted Labs) - Open Source Dependency Threats
Episode 286 - Kayra Otaner - Authenticating Open Source Developers
Episode 285 - easyjson, Software Dependencies, Breaches
Episode 284 - BSidesSF/RSA Recap, Vibe Coding, WebAuthN
Episode 283 - Intentionally-Vulnerable MCP Server, Hallucinating Software Packages
Episode 282 - Model Context Protocol, A2A, NHI Authentication
Episode 281 - Signing Models, Vibe Coding, GitHub Action Abuse
Episode 280 - Middleware Vulnerabilities, Identifying Enumeration with LLMs
Episode 279 - Conferences, Destructive Fatigue, Imposter Syndrome
Episode 278 - Security Conferences, Testing Data in Git, Unforgivable Vulnerabilities
Episode 277 - w/ Kyle Rippee - AppSec Support, Security Red Flags, Getting Into AppSec
Episode 276 - w/ Myles Borins - NPM
Episode 275 - OpenGrep Summary, Secure By Design, Confusion Attacks
Episode 274 - Semgrep/OpenGrep, Saying "No" in Security
Episode 273 - Josh Larsen - Ghost Security
Episode 272 - New AI Tools, True Cost of False Positives
Episode 271 - Top 10 2024 Web Hacking Techniques, Research Techniques, AppSec Careers
Episode 270 - 2025 AppSec Predictions
Episode 269 - Security Conferences, What Sucks in (App)Sec
Episode 268 w/ Clint Gibler - Curating a Newsletter, Secure Defaults
Episode 267 - w/ Kinnaird McQuade - Building a Security Product
Episode 266 - Scope of Penetration Testing, Attack Modeling
Episode 265 - w/ Scott Norberg - Static Analysis
Episode 264 - w/ Jeremy Long - Software Composition Analysis
Episode 263 - WebApp Fuzzing, Mobile Testing, Secrets Management
Episode 262 - w/ Ariel Shin - Building a Security Program
Episode 261 - Security Economy, Password Resets, Vendor Consolidation
Episode 260 w/ Darren Meyer of Endor Labs - Dependency Management
Episode 259 - Special Melbourne Australia Edition w/Paul McCarty and Daniel Ting
Episode 258 - Engaging Developers, ALBeast, Dangerous TLDs
Episode 257 - In-Person vs. Virtual Training, Compliance Violations
Episode 255 (0xFF) - HackerSummerCamp Recap
Episode 254 - Pre-Hacker Summer Camp
Episode 253 w/ Justin Collins - Managing Security, ProdSec vs. AppSec
Episode 252 w/ Rami McCarthy - Security Startups, Jobs
Episode 251 - Passive Scanning, Chrome Extensions, CocoaPods, NVD
Episode 250 - Security Startups, Polyfill Takeover
Episode 249 w/ Tanya Janca - Secure Guardrails
Episode 248 w/ Rahil Parikh - Building AppSec Programs
Episode 247 - w/ Alejandro Saenz
Episode 246 - w/ Charles Shirer
Episode 245 - w/ Dustin Lehr - Security Champions
Episode 244 - w/ Kyle Kelly - Software Security Supply Chain
Episode 243 - w/ Bryan Schmidt
Episode 242 - LLMs Exploiting Vulns, State of DevSecOps
Episode 241 - Secure Defaults, Using LLMs for Code Review
Episode 240 - Code Smells, XZ Backdoor, Hallucinations
Episode 239 - AppSec Intel, CVEs, Authorization
Episode 238 - AppSec vs. Enterprise Sec, Supply Chain Tool Analysis