All Episodes
Application Security Weekly (Audio) — 418 episodes · page 2 of 5
Making TLS More Secure, Lessons from IPv6, LLMs Finding Vulns - Arnab Bose, Shiven Ramji - ASW #305
The Complexities, Configurations, and Challenges in Cloud Security - Scott Piper - ASW #304
The Future of Zed Attack Proxy - Simon Bennetts, Ori Bendet - ASW #302
More Car Hacks, CUPS Vulns, Microsoft's SFI, Memory Safety, Password Complexity - Farshad Abasi - ASW #301
Vulnerable APIs and Bot Attacks: Two Interconnected, Growing Security Threats - David Holmes - ASW #300
Bringing Secure Coding Concepts to Developers - Dustin Lehr - ASW #299
Paying Down Tech Debt, Rust in Firmware, EUCLEAK, Deploying SSO - ASW #298
Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW Vault
Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297
The Fallout and Lessons Learned from the CrowdStrike Fiasco - Shimon Modi, Jeff Pollard, Allie Mellen, Boaz Barzel - ASW #296
When Appsec Needs to Start Small - Kalyani Pawar, Danny Jenkins, Nikos Kiourtis - ASW #295
Building Successful Security Champions Programs - Marisa Fagan - ASW #294
A CISO's Perspective on AI, Appsec, and Changing Behaviors - ASW #293
Where Generative AI Can Actually Help Security (And Where It Doesn't) - Farshad Abasi, Allie Mellen - ASW #292
Producing Secure Code by Leveraging AI - Stuart McClure - ASW #291
State Of Application Security 2024 - Sandy Carielli, Janet Worthington - ASW #290
OAuth 2.0 from Protecting APIs to Supporting Authorization & Authentication - Aaron Parecki - ASW #289
Learning EBPF - Liz Rice - ASW Vault
Microsoft Recall's Security & Privacy, Hacking Web APIs, Secure Design Pledge - ASW #288
Open Source Software Supply Chain Security & The Real Crisis Behind XZ Utils - Idan Plotnik, Luis Villa, Erez Hasson - ASW #287
Securing Shadow Apps & Protecting Data - Guy Guzner, Pranava Adduri - ASW Vault
Collecting Bounties and Building Communities - Ben Sadeghipour - ASW Vault
Node.js Secure Coding - Oliver Tavakoli, Chris Thomas, Liran Tal - ASW #286
Inside the OWASP Top 10 for LLM Applications - Sandy Dunn, Mike Fey, Josh Lemos - ASW #285
AI & Hype & Security (Oh My!) & Hacking AI Bias - Caleb Sima, Keith Hoodlet - ASW #284
Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283
Sustainable Funding of Open Source Tools - Mark Curphey, Simon Bennetts - ASW #282
Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281
Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280
Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279
Successful Security Needs a Streamlined UX - Benedek Gagyi - ASW #278
Figuring Out Where Appsec Fits When Starting a Cybersecurity Program - Tyler VonMoll - ASW #277
More API Calls, More Problems: The State of API Security in 2024 - Lebin Cheng - ASW #276
The Simple Mistakes and Complex Seeds of a Vulnerability Management Program - Emily Fox - ASW #275
Creating the Secure Pipeline Verification Standard - Farshad Abasi - ASW #274
Redefining Threat Modeling - Security Team Goes on Vacation - Jeevan Singh - ASW Vault
Creating Code Security Through Better Visibility - Christien Rioux - ASW #273
Starting an OWASP Project (That's Not a List!) - Grant Ongers - ASW #272
Getting Your First Conference Presentation - Sarah Harvey - ASW #271
Dealing with the Burden of Bad Bots - Sandy Carielli - ASW #270
Communicating Technical Topics Without Being Boring - Eve Maler - ASW #269
What's in Store for 2024? - ASW #268
HTTP RFCs Have Evolved, Breaking Into Cloud, Scaling AppSec at Netflix, & Confluence - Keith Hoodlet - ASW Vault
OWASP SAMM - Software Assurance Maturity Model - Sebastian Deleersnyder - ASW Vault
Making Service Meshes Work for People - Idit Levine - ASW #267
The ABCs of RFCs - Heather Flanagan - ASW #266
All the News - Just Six Months Later - Application Security Weekly #265
Starting with Appsec -- Is It More of a Position or a Process? - ASW #264
Platform Firmware Security - Maggie Jauregui - ASW Vault
How 2023 Changed Application Security and What's to Come in 2024 - Karl Triebes - ASW #263
Security from a Developer's Perspective - Josh Goldberg - ASW #262
How Security Tools Must Evolve - Dan Kuykendall - ASW #261
OAuth, WebAuthn, & The Impact of Design Choices - Dan Moore - ASW #260
OT Security - Huxley Barbee - ASW #259
Shifting Focus to Make DevSecOps Successful - Janet Worthington - ASW #258
Creating Presentations and Training That Engage an Audience - Lina Lau - ASW #257
Supply Chain Security Security with Containers and CI/CD Systems - Kirsten Newcomer - #ASW 256
Stopping Business Logic Attacks: Why a WAF is no Longer Enough - Karl Triebes - ASW #255
Building a Scanner and a Community with Zed Attack Proxy - Simon Bennetts - ASW #254
Broadening What We Call AppSec - Christien Rioux - ASW Vault
How Can Security Be Smart About Using AI? - Jeff Pollard - ASW #253
Security in a Cloud Native World & Mobile App Attacks - ASW #252
Pointers and Perils for Presentations - Josh Goldberg - ASW #251
You've Got Appsec, But Do You Have ArchSec? - Merritt Baer - ASW #250
Identity and Verifiable Credentials in Cars - Eve Maler - ASW #249
Navigating the Complexities of Development to Create Secure APIs - Kristen Bell - ASW #248
Securing Non-Election Election Systems, Modernizing AppSec Education - Brian Glas - ASW #247
Software Trust & Adversaries, Developer-Focused Security - Shannon Lietz, Melinda Marks - ASW #246
The Psychology of Training - Matias Madou - ASW Vault
Latest Web Vulnerability Trends & Best Practices - Patrick Vandenberg - ASW #245
Policy Momentum in Coordinated Vulnerability Disclosure - Amit Elazari - ASW Vault
Enhancing Security: App Modernization, Identity Orchestration, & Big IAM Challenge - Eric Olden - ASW #244
What's the Deal with API Security? - Sandy Carielli - ASW #243
Doing Application Security Right – Farshad Abasi – ASW VAULT
Ten Things I Hate About Lists - ASW #242
Securing the App Lifecycle: Strategies for Long-Term Software Security and Mitigating the Threat of Malicious Packages - ASW #241
From Security Theater to Resilience: Unveiling New Approaches to Application Security - ASW #240
Navigating the Complexities of Application Security: Vulnerability Management, Risk Mitigation, and Business Logic Attacks - ASW #239
Hackers and Policy: Empowering Users and Shaping Discussions at DEF CON, Jeff Moss - ASW #238
Bug Bounty Programs and Community Building: Unveiling Rewards, Challenges, and Exciting Adventures, Ben Sadeghipour (NahamSec) - ASW #237
Application Security in the Cloud: Safeguarding Data and Preventing Unauthorized Access, Vandana Verma Sehgal - ASW #236
eBPF: The Future of Security and Infrastructure Tools Revealed, Liz Rice - ASW #235
AI in Production: Unveiling Use Cases, Security Risks, and Real-Life Experiences, Frank Catucci - ASW #234
The Power of Static Analysis: Strengthening Application Security from Code Scrutiny, Josh Goldberg - ASW #233
ASW #232 - Josh Grossman
ASW #231 - Neatsun Ziv
ASW #230 - Lina Lau
Throwback Episode - ASW #178
ASW #229 - Nick Selby
ASW #228 - Adrian Sanabria
ASW #227 - Dr. David Movshovitz
ASW #226 - Marudhamaran Gunasekaran
Throwback Episode - Dev(Sec)Ops Scanning Challenges & Tips - ASW170
ASW #225 - Dan Moore
ASW #224 - Keith Hoodlet
ASW #223 - Jeevan Singh
ASW #222 - Aviv Grafi
ASW #221 - Kenn White
ASW #220 - Daniel Krivelevich
ASW #219 - Karl Triebes