All Episodes
Application Security Weekly (Audio) — 418 episodes · page 1 of 5
Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 - Jan Seredynski, Ryan Lloyd - ASW #405
What's Not Found in AppSec? - ASW #404
Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403
Going From Bug Bounty Bugs to More Secure Systems - Shlomie Liberow - ASW #402
Understanding Prompt Injection In Order to Contain It - Julie Brunias - ASW #401
The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400
Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Ido Geffen, Sean Murphy, Idan Plotnik - ASW #399
Fixing Software Weaknesses Rather Than Just Finding More Flaws - Gil Geron, Nidhi Aggarwal, Braden Russell - ASW #398
Applying Zero Trust Principles to Agents - Kieran Human - ASW #397
Augmenting Threat Intel Analysis with Agents - Chris Wallis, Sai Kiran Uppu, Ramin Farassat - ASW #396
Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395
Prompting for Patches That Fix Vulns Without Adding New Ones - Keith Hoodlet - ASW #394
Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393
MacOS Security Design Features, Flaws, And Futures - Patrick Wardle - ASW #392
Discovering & Securing Your AI Agent Attack Surface - Jeremy Snyder - ASW #391
Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390
Reducing Attack Surface & Evaluating Efficiency in Agents - Itamar Apelblat, David Goldschlag - ASW #389
How AI Is Reshaping Identity Security at the Infrastructure Layer - Amit Masand, Neha Duggal, Ev Kontsevoy - ASW #388
Why Does It Matter Who or What Created the Code? - Matias Madou - ASW #387
Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386
BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385
AppSec Conversations on Agents, LLMs, and OWASP from RSAC - Merritt Maxim, Scott Clinton, Janet Worthington - ASW #384
The State of AI & AppSec - Keith Hoodlet - ASW #383
Why Basic Security Practices Still Work - Rob Allen - ASW #382
Keeping Up With the OWASP GenAI Project - Scott Clinton - ASW #381
Top 10 Web Hacking Techniques of 2025 and a Hint for 2026 - James Kettle - ASW #380
The Human Aspect of Red Teams - Brian Fox, Tom Tovar, T. Gwyddon 'Data' Owen - ASW #379
Securing Software's Journey with the OWASP SPVS - Ido Geffen, Rohan Ravindranath, Cameron W., Farshad Abasi - ASW #378
AppSec News Roundup on Claude Code Leak, Axios NPM Compromise, Secure Design - Idan Plotnik, Raj Mallempati - ASW #377
Developing the Skills Needed for Modern Software Development - Keith Hoodlet, Shashwat Sehgal, Ron Rasin - ASW #376
Why Proactive Security Is Far Better Than Patching - Erik Nost - ASW #375
Creating Better Security Guidance and Code with LLMs - Mark Curphey - ASW #374
Making Medical Devices Secure - Tamil Mathi - ASW #373
Modern AppSec that keeps pace with AI development - James Wickett - ASW #372
Helping Users with Practical Advice to Protect their Digital Devices - Runa Sandvik - ASW #371
Conducting Secure Code Analysis with LLMs - ASW #370
Bringing Strong Authentication and Granular Authorization for GenAI - Dan Moore - ASW #369
Focusing on Proactive Controls in the Face of LLM-Assisted Malware - Rob Allen - ASW #368
Building proactive defenses that reflect the true nature of modern software risk - Paul Davis - ASW #367
Lessons from MongoBleed, CWE Top 25, and Secure Coding Benchmarks - ASW #366
Secure By Design Is Better Than Secure By Myth - Bob Lord - ASW #365
The Upsides and Downsides of LLM-Generated Code - Chris Wysopal - ASW #364
AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363
Modern AppSec: OWASP SAMM, AI Secure Coding, Threat Modeling & Champions - Sebastian Deleersnyder, Dustin Lehr, James Manico, Adam Shostack - ASW #362
Developing Open Source Skills for Maintaining Projects - Kat Cosgrove - ASW #361
Making OAuth Scale Securely for MCPs - Aaron Parecki - ASW #360
Making TN Critical Infrastructure the Most Secure in the Nation - T. Gwyddon 'Data' ("Gwee-thin") Owen, James Cotter - ASW #359
Figuring Out Where to Start with Secure Code - ASW #358
Secure Coding as Critical Thinking Instead of Vulnspotting - Matias Madou - ASW #357
Ransomware, Defaults, and Proactive Defenses - Rob Allen - ASW #356
Researching and Remediating RCEs via GitHub Actions - Bar Kaduri, Roi Nisimi - ASW #355
Quantum Computing Isn't A Threat To Blockchains - Yet - Martha Bennett, Sandy Carielli - ASW #354
Reacting to Ransomware and Setting Secure Defaults - Rob Allen - ASW #353
Inside the OWASP GenAI Security Project - Steve Wilson - ASW #352
Finding Large Bounties with Large Language Models - Nico Waisman - ASW #351
Changing the Vuln Conversation from Volume to Remediation - Francesco Cipollone - ASW #350
Design Errors in Entra ID, Design Defenses in iOS, Design Difficulties in DeepSeek - ASW #349
How OWASP's GenAI Security Project keeps up with the pace of AI/Agentic changes - Scott Clinton - ASW #348
Limitations and Liabilities of LLM Coding - Seemant Sehgal, Ted Shorter - ASW #347
AI, APIs, and the Next Cyber Battleground: Black Hat 2025 - Chris Boehm, Idan Plotnik, Josh Lemos, Michael Callahan - ASW #346
Translating Security Regulations into Secure Projects - Roman Zhukov, Emily Fox - ASW #345
Managing the Minimization of a Container Attack Surface - Neil Carpenter - ASW #344
The Future of Supply Chain Security - Janet Worthington - ASW #343
Uniting software development and application security - Will Vandevanter, Jonathan Schneider - ASW #342
How Product-Led Security Leads to Paved Roads - Julia Knecht - ASW #341
Rise of Compromised LLMs - Sohrob Kazerounian - ASW #340
Getting Started with Security Basics on the Way to Finding a Specialization - ASW #339
Checking in on the State of Appsec in 2025 - Janet Worthington, Sandy Carielli - ASW #338
Simple Patterns for Complex Secure Code Reviews - Louis Nyffenegger - ASW #337
How Fuzzing Barcodes Raises the Bar for Secure Code - Artur Cygan - ASW #336
Threat Modeling With Good Questions and Without Checklists - Farshad Abasi - ASW #335
Bringing CISA's Secure by Design Principles to OT Systems - Matthew Rogers - ASW #334
AIs, MCPs, and the Acutal Work that LLMs Are Generating - ASW #333
AI in AppSec: Agentic Tools, Vibe Coding Risks & Securing Non-Human Identities - Mo Aboul-Magd, Shahar Man, Brian Fox, Mark Lambert - ASW #332
Appsec News & Interviews from RSAC on Identity and AI - Rami Saas, Charlotte Wylie - ASW #331
Secure Code Reviews, LLM Coding Assistants, and Trusting Code - Rey Bango, Karim Toubba, Gal Elbaz - ASW #330
AI Era, New Risks: How Data-Centric Security Reduces Emerging AppSec Threats - Vishal Gupta, Idan Plotnik - ASW #329
Secure Designs, UX Dragons, Vuln Dungeons - Jack Cable - ASW #328
Managing Secrets - Vlad Matsiiako - ASW #327
More WAFs in Blocking Mode and More Security Headaches from LLMs - Sandy Carielli, Janet Worthington - ASW #326
In Search of Secure Design - ASW #325
Avoiding Appsec's Worst Practices - ASW #324
Finding a Use for GenAI in AppSec - Keith Hoodlet - ASW #323
Redlining the Smart Contract Top 10 - Shashank . - ASW #322
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321
Keeping Curl Successful and Secure Over the Decades - Daniel Stenberg - ASW #320
Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319
Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318
Code Scanning That Works With Your Code - Scott Norberg - ASW #317
Threat Modeling That Helps the Business - Akira Brand, Sandy Carielli - ASW #316
Security the AI SDLC - Niv Braun - ASW #315
Appsec Predictions for 2025 - Cody Scott - ASW #314
Discussing Useful Security Requirements with Developers - Ixchel Ruiz - ASW #313
DefectDojo and Bringing Quality Appsec Tools to Small Appsec Teams - Greg Anderson - ASW #312
Applying Usability and Transparency to Security - Hannah Sutor - ASW #311
Looking Back on 2024 - ASW #310
Adding Observability with OpenTelemetry - Adriana Villela - ASW #309
Biometric Frontiers: Unlocking The Future Of Engagement - Andras Cser, Enza Iannopollo - ASW #308
Modernizing AppSec - Melinda Marks - ASW #307
Bug bounties, vulnerability disclosure, PTaaS, fractional pentesting - Grant McCracken - ASW #306