All Episodes

Episode 237 - Security 101, Nation State Hackers, Malicious Code

Episode 236 - Memory Safe Languages, LLM Supply Chain Security

Episode 235 - 2023 Top 10 Web Hacking Techniques, LLM Agent Hacking

Episode 234 - Password Analysis, GitHub Copilot

Episode 233 - Scammers, Deep Fakes, Data Exposure

Episode 232 - Security Jobs, Surveillance, Prompt Injection

Episode 231 - FlowMate, State of Software Supply Chain Security

Episode 230 - False Positives vs. Negatives, Scaling Vuln Management

Episode 229 - Software Supply Chain Security, 2024 Predictions

Episode 228 w/ Chime Security Engineering - Monocle

Episode 227 - Token Leakage, Cybersecurity Isn't Special

Episode 226 - Security Reviews, CVE-2023-46214

Episode 225 w/ Brian C Reed

Episode 224 w/ Jeevan Singh

Episode 223 w/Stefan Edwards - OWASP, Privacy

Episode 222 w/ Leif Dreizler

Episode 221 - Interviews, Breach, AI Tools

Episode 220 w/ Erik Cabetas (Include Security)

Episode 219 w/Jason Haddix - Discovery Tools, Security Research

Episode 218 w/ Cole Cornford - Security Startups, Developer Training

Episode 217 w/ Shlomi Shaki - Security Tooling

Episode 216 - Security SDLC, Time Management

Episode 215 - Learning Machine Learning, DEF CON 31 Recap

Episode 214 - Artificial Intelligence and Security with @lojikil

Episode 213 - Brian Joe of Impart Security

Episode 212 - Evan Johnson of RunReveal

Episode 211 - Brian Walter of OpenContext

Episode 210 - Approaching Scans, AppSec Research, Threat Modeling

Episode 209 - James Wickett, Contextual Security Analysis

Episode 208 - Zip TLD, PyPI 2FA, AI Poisoning

Episode 207 - Watering Hole Attacks, Adversarial AI, Cookie Security

Episode 206 - RSA, Artificial Intelligence, Spidering Tools

Episode 205 - Decline of AppSec, Death of Code Review

Episode 204 - Logging, Edge Cases, Client API Exposure

Episode 203 w/ Shlomi Shaki - Security Tools

Episode 202 w/ Haseeb Awan - Mobile Security

Episode 201 - Breaches, Package Managers, Audit Logs

Episode 200 w/ Jerry Gamblin - Startups, CVEs

Episode 199 - OWASP, Phishing, Eurostar

Episode 198 with Laura Bell Main - Training

Episode 197 with Sal Olivares - Exposed API Tokens

Episode 196 - API Reviews, Web App Security Features

Episode 195 - 2022 CVEs, CORS, GraphQL

Episode 194 - Frank Wang (dbtlabs) - Organization Security, AI/ML

Episode 193 - Security Metrics, End-User Security

Episode 192 - Blogs, GoLang Security, ChatGPT

Episode 191 - DNS Attacks, Organizational Risk, Mastadon

Episode 190 - Immutable Laws of Security

Episode 189 - Security Bypasses, AppMap, Dastardly

Episode 188 - Security Training, Zero Trust, Rating of IoT Security

Episode 187 - Hacking your Health, Fortinet, Secrets in Source

Episode 186 - Security Trainings, Web3 Bounties, MFA

Episode 185 - Daniel Ting (hoodiepony) - Breaches, Optus, Uber

Episode 184 - Sources, Payloads, Patreon, Ethereum, Starbucks

Episode 183 - Information Warfare w/LegendaryPatMan

Episode 182 - Twitter, LastPass, Testing Edge Cases

Episode 181 - (Post DEFCON)

Episode 180 - Logging! Attacks!

Episode 179 - Starting in AppSec, Threat Modeling

Episode 178 - Wallet Attacks(!) and Data Privacy

Episode 177 - That Post-LocoMocoSec Glow

Episode 176 - Exposed Secrets, Semgrep Rules, IoT Security Failures

Episode 175 - Web3, JWT Security, Public App Attacks

Episode 174 - Smart Contracts, Code Review Lessons Learned

Episode 173 - Enumeration Attacks!

Episode 172 - Jimmy Mesta - Kubernetes, Startup Adventures

Episode 171 - Ruby Deserialization Walkthrough, Domain Takeovers

Episode 170 - Security Basics, Social Engineering, Plan for Failure

Episode 169 - Finding Security Bugs

Episode 168 - Secure Code Review, Package Confusion, Privacy Acts

Episode 167 - Ken Toler - Cryptocurrency, Spring4Shell

Episode 166 - Web App Firewalls, ProtestWare, CSP Level 3

Episode 165 - Portswigger 2021 Top 10, Supply Chain Attacks, TLS Certs

Episode 164 - Supply Chain Security, Cyber Attacks, 2FA, AutoWarp

Episode 163 - IT Army, Secrets, Access Control

Episode 162 - Mike McCabe (@mccabe615) - Cloud Security

Episode 161 - Language Semantics, Blockchain Validations, Pentest Stories

Episode 160 - Mental Health, Open Source Bug Bounties, IDOR

Episode 159 - Neil Matatall - CSP, Infosec Hiring, Languages + Framework Security

Episode 158 - More Supply Chains, 2021 Top Ten, CORS + CSRF

Episode 157 - 2022 Predictions, Schema Libraries, NPM and Open Source Packages

Episode 156 - Stefan Edwards (@lojikil) - Open Source Software, Software Bill of Materials

Episode 155 - Log4Hell, Boring AppSec, Crocs and SOCs

Episode 154 - Conferences, Cloud Security, Software Supply Chain

Episode 153 - Fuzzing, Authentication, Browser Wars (again)

Episode 152 - Breaches, Symbolic Execution, Dynamic vs. Static Assessments

Episode 151 - Secure Code Review, Software Interdependency

Episode 150 - Jerry Gamblin - NVD CVEs, Vulnerability Disclosure, Burp Cert

Episode 149 - Burnout, AppSec News Sources

Episode 148 - Facebook, Phrack, Paved Path

Episode 147 - James Kettle (@albinowax), Security Research

Episode 146 - OWASP Top 10, Bug Bounties with @JHaddix, Request Smuggling

Episode 145 - Return of @cktricky, Burnout, Bumble Vuln, Brute-Forcing

Episode 144 - Fuzzing, Radamsa, Property Testing

Episode 143 - HTTP/2, Black Hat/DEFCON, Kubernetes

Episode 142 - AI Code Generation, Puma Scan, HTTP Request Smuggling

Episode 141 - print(), Cross-Site Scripting (XSS), RiskIQ, Amass Demo

Episode 140 - Naomi Buckwalter - Gatekeeping, Developing AppSec Resources

Episode CXXXIX - Return of the @lojikil (Stefan Edwards)

Episode 138: Ransomware