All Episodes

Episode 137: CSRF, GraphQL, Kubernetes, Docker, NoSQL Injection

Episode 136: AppSec Nihilism and Breaches

Episode 135: GoSDL, Language Choice, Kenna, Dependency Confusion

Episode 134: Legal Protections, Browser Sanitization APIs, Burnout

Episode 133: Rob Shavell - Privacy

Episode 132: Supply Chain Attacks, What I Wish I Knew Starting in Security

Episode 131: Jeevan Singh - Threat Modeling

Episode 130: Facebook 'Breach', Data Privacy

Episode 129: Rey Bango - JQuery, Developer Relations, Security Education

Episode 128: Stefan Edwards/David Coursey - PHP, Backdoors, and AppSec Nihilism

Episode 127: Regexes, WAFs, Secondary Contexts

Episode 126: Junior AppSec Positions, Phishing Site Detection, Client-side JavaScript

Episode 125: Interviews, SQLi, Concurrency, Wordpress

Episode 124: 2020 Top 10 Web Hacking Techniques, Development vs. Security

Episode 123: Client-Side Controls, Dependency Confusion

Episode 122: Brian Glas (@infosecdad) - OWASP Top 10 2021

Episode 121: Stefan Edwards (@lojikil) - Formal Specification, Fuzzing, LangSec

Episode 120: OWASP Top 10 2021, Researcher Attacks, Parler, Phishing

Episode 119: Bugtraq, Web Cache Poisoning, and Blind SSRF

Episode 118: Parler, Twitter, and IDOR

Episode 117: Solarwinds, Timing Attacks, Threat Dragon

Episode 116: Lewis Ardern and Pwnfunction - Client-Side JavaScript Security

Episode 115: Clint Gibler - Static Analysis with Semgrep

Episode 114: Account Enumeration, Github Actions

Episode 113: Jacob Salassi - Modeling Threats, Risk Assessment

Episode 112: Mark Feferman - Static Analysis Tools

Episode 111: Bug Bounties, Detection as Code

Episode 110: Reserved Words, Authentication, Developer Patterns

Episode 109: Threat Modeling, Social Media, Imposter Syndrome

Episode 108: Sean Poris - Bug Bounties and H1-2010

Episode 107: Markus Schirp - Ruby and Dynamic Languages

Episode 106: Justin Massey - Logging and Monitoring

Episode 105: Laura Migus - Diversity and Inclusion

Episode 104: Leif Dreizler - Authentication and SCIM

Episode 103: Secrets Management, Oded Hareven, and akeyless.io

Episode 102: Popular Programming Languages, TikTok, OWASP

Episode 101: Mike McCabe, Ken Toler, Cloud Security

Episode 100: Virtual Conferences, Bots, DDoS, Ebay

Episode 99: Contact Tracing, GnuTLS, Breaches

Episode 98: Bug Bounty Programs, Work when World is Crazy

Episode 97: Stefan Edwards and Brian Glas - Threat Modeling

Episode 96: Fuzzing and Static Analysis Tools

Episode 95: Jessica Rozhin (@JessicaRozhin) and Lady Christina Liu (cliuthulu) - Incident Response, Lockpicking, Building an Infosec Culture

Episode 94: Bug Bounty, Microservices vs. Monoliths, and CVE Fatigue

Episode 93: Huntr Dev - Securing Open Source Software

Episode 92: Working from Home, Skreen, Evolution of AppSec

Episode 91: Stefan Edwards - More Voatz, Zoom, Code Reviews, Report Writing, Threat Models, and Risk Assessments

Episode 90: Voatz, HackerOne, Bug Bounties, GraphQL, Shodan Network Trends

Episode 89: Kat Sweet - Incident Response, DevOps and Developer Training, Breaking into Security

Episode 88: Kevin Johnson - Secure Ideas, Star Wars, Passing it On

Episode 87: Abhay Bhargav - Threat Modeling, DevSecOps, Microservices

Episode 86: Rohan Johsi - QA Security Testing, Security Champions, Paypal Vulnerabilities

Episode 85: David Lindner - Voting Apps, Bug Bounties, IAST/RASP/WAF

Episode 84: Tinfoil Hat Tuesday - Backdoors, Application Libraries, Equifax

Episode 83: Ron Perris - NPM, Developer Training, React

Episode 82: Kelley Robinson - MFA, SHAKEN, STIR

Episode 81: Matias Madou - Application Security Training

Episode 80: Louis Barratt - SIRT and AppSec

Episode 79: Live from DevSecOpsDays Austin - Next up in AppSec/DevSecops

Episode 78: Breaches, Passwords, and Chicken Fingies

Episode 77: Clint Gibler, DevSecOps, TLDR; Sec

Episode 76: Guy Podjarny, Snyk, AppScan, SCA

Episode 75: Brian Glas, OWASP Top 10, OWASPSAMM

Episode 74: Ernest Mueller, DevOps, Security and Cloud Computing

Episode 73: Kevin Cody, CORS, and Lockpicking

Episode 72: Consulting Horror Stories

Episode 71: Evan Johnson, Cloudflare and Lastpass

Episode 70: Andrew Wilson, OWASP and Training New AppSec Resources

Episode 69: Eric Ellett, Development vs. Security

Episode 68: Jerry Gamblin, DEF CON 27 Recap

Episode 67: Kubernetes Security with Stefan and Bobby

Episode 66: Capital One Breach, NPM, and Secure Code Reviews

Episode 65: Adam Baldwin, 3rd Party Dependencies, and Supply Chain Security

Episode 64: Hijacked Gems, Zoom RCE, and Marriott Fines

Episode 63: Julian Berton, AppSec Day, Developer Training, and Security Standards

Episode 62: Abdullah Munawar, Ben Pick, Global AppSec DC, and Running an OWASP Chapter

Episode 61: Tanya Janca, DevSlop, Diversity, and Inclusion

Episode 60: Stefan Edwards, Huawei, Android Security, and Programming Languages

Episode 59: James Wickett on DevOps

Episode 58: David Lindner on RASP, Mobile, IoT

Episode 57: OWASP WIA (Women in AppSec) Committee

Episode 56: Learn to Code / Loco Moco Sec Recap

Episode 55: Stefan Edwards ruins Infosec - Testing Edition

Episode 54: Recon-NG and Burp Suite v2 with Tim Tomes

Episode 53: Building AppSec at Github with Greg Ose

Episode 52: Serialization Vulns, Managing Careers, and Hacking your Happiness with Chris Gates

Episode 51: XXE review and techniques, Assessment Reporting and Process with Jessica Ryan

Episode 50: Static Analysis Tools, DevSecOps, Secure Code Training with Eric Heitzman

Episode 49: Subdomain Takeovers, DNS SSRF, Oauth Best Practices, Top 10 Web Hacking Techniques of 2019

Episode 48: .dev domains, Kubernetes Secrets, Threat Modeling as Code, OWASP Glue Project and Omer Levi Hevroni

Episode 47: Mapping Application Source Code, Mobile OWASP Top 10, Mobile Application Testing, and Kevin Cody

Episode 46: Fuzzing, Frameworks, Training and Daniel Miessler

Episode 45: Making the most of Bug Bounties, managing an AppSec program, and Sean Poris

Episode 44: AppSec California, running a Bug Bounty program, and David Coursey

Episode 43: DerbyCon, pwnhead, and Keith Hoodlet

Episode 42: SSRF Rebinding and Segment Team (Leif Dreizler and David Scrobonia)

Episode 41: Hidden File/Dir Enumeration and Will Bengtson

Episode 40: Code Reviews

Episode 39: Jerry Gamblin

Episode 38: Matt Konda