All Episodes
Application Security Weekly (Video) — 730 episodes · page 1 of 8
Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 - Ryan Lloyd, Jan Seredynski - ASW #405
What's Not Found in AppSec? - ASW #404
Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403
Going From Bug Bounty Bugs to More Secure Systems - Shlomie Liberow - ASW #402
Understanding Prompt Injection In Order to Contain It - Julie Brunias - ASW #401
The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400
Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Sean Murphy, Idan Plotnik, Ido Geffen - ASW #399
Fixing Software Weaknesses Rather Than Just Finding More Flaws - Nidhi Aggarwal, Gil Geron, Braden Russell - ASW #398
Applying Zero Trust Principles to Agents - Kieran Human - ASW #397
Augmenting Threat Intel Analysis with Agents - Sai Kiran Uppu, Chris Wallis, Ramin Farassat - ASW #396
Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395
Prompting for Patches That Fix Vulns Without Adding New Ones - Keith Hoodlet - ASW #394
Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393
MacOS Security Design Features, Flaws, And Futures - Patrick Wardle - ASW #392
Discovering & Securing Your AI Agent Attack Surface - Jeremy Snyder - ASW #391
Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390
Reducing Attack Surface & Evaluating Efficiency in Agents - Itamar Apelblat, David Goldschlag - ASW #389
How AI Is Reshaping Identity Security at the Infrastructure Layer - Ev Kontsevoy, Neha Duggal, Amit Masand - ASW #388
Why Does It Matter Who or What Created the Code? - Matias Madou - ASW #387
Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386
BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385
AppSec Conversations on Agents, LLMs, and OWASP from RSAC - Scott Clinton, Janet Worthington, Merritt Maxim - ASW #384
The State of AI & AppSec - Keith Hoodlet - ASW #383
Why Basic Security Practices Still Work - Rob Allen - ASW #382
Keeping Up With the OWASP GenAI Project - Scott Clinton - ASW #381
Top 10 Web Hacking Techniques of 2025 and a Hint for 2026 - James Kettle - ASW #380
The Human Aspect of Red Teams - Brian Fox, Tom Tovar, T. Gwyddon 'Data' Owen - ASW #379
Securing Software's Journey with the OWASP SPVS - Cameron W., Farshad Abasi, Rohan Ravindranath, Ido Geffen - ASW #378
AppSec News Roundup on Claude Code Leak, Axios NPM Compromise, Secure Design - Idan Plotnik, Raj Mallempati - ASW #377
Developing the Skills Needed for Modern Software Development - Keith Hoodlet, Ron Rasin, Shashwat Sehgal - ASW #376
Why Proactive Security Is Far Better Than Patching - Erik Nost - ASW #375
Creating Better Security Guidance and Code with LLMs - Mark Curphey - ASW #374
Making Medical Devices Secure - Tamil Mathi - ASW #373
Modern AppSec that keeps pace with AI development - James Wickett - ASW #372
Helping Users with Practical Advice to Protect their Digital Devices - Runa Sandvik - ASW #371
Conducting Secure Code Analysis with LLMs - ASW #370
Bringing Strong Authentication and Granular Authorization for GenAI - Dan Moore - ASW #369
Focusing on Proactive Controls in the Face of LLM-Assisted Malware - Rob Allen - ASW #368
Building proactive defenses that reflect the true nature of modern software risk - Paul Davis - ASW #367
Lessons from MongoBleed, CWE Top 25, and Secure Coding Benchmarks - ASW #366
Secure By Design Is Better Than Secure By Myth - Bob Lord - ASW #365
The Upsides and Downsides of LLM-Generated Code - Chris Wysopal - ASW #364
AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363
Modern AppSec: OWASP SAMM, AI Secure Coding, Threat Modeling & Champions - Sebastian Deleersnyder, James Manico, Adam Shostack, Dustin Lehr - ASW #362
Developing Open Source Skills for Maintaining Projects - Kat Cosgrove - ASW #361
Making OAuth Scale Securely for MCPs - Aaron Parecki - ASW #360
Making TN Critical Infrastructure the Most Secure in the Nation - T. Gwyddon 'Data' ("Gwee-thin") Owen, James Cotter - ASW #359
Figuring Out Where to Start with Secure Code - ASW #358
Secure Coding as Critical Thinking Instead of Vulnspotting - Matias Madou - ASW #357
Ransomware, Defaults, and Proactive Defenses - Rob Allen - ASW #356
Researching and Remediating RCEs via GitHub Actions - Bar Kaduri, Roi Nisimi - ASW #355
Quantum Computing Isn't A Threat To Blockchains - Yet - Sandy Carielli, Martha Bennett - ASW #354
Reacting to Ransomware and Setting Secure Defaults - Rob Allen - ASW #353
Inside the OWASP GenAI Security Project - Steve Wilson - ASW #352
Finding Large Bounties with Large Language Models - Nico Waisman - ASW #351
Changing the Vuln Conversation from Volume to Remediation - Francesco Cipollone - ASW #350
Design Errors in Entra ID, Design Defenses in iOS, Design Difficulties in DeepSeek - ASW #349
How OWASP's GenAI Security Project keeps up with the pace of AI/Agentic changes - Scott Clinton - ASW #348
Limitations and Liabilities of LLM Coding - Ted Shorter, Seemant Sehgal - ASW #347
AI, APIs, and the Next Cyber Battleground: Black Hat 2025 - Michael Callahan, Idan Plotnik, Josh Lemos, Chris Boehm - ASW #346
Translating Security Regulations into Secure Projects - Emily Fox, Roman Zhukov - ASW #345
Managing the Minimization of a Container Attack Surface - Neil Carpenter - ASW #344
The Future of Supply Chain Security - Janet Worthington - ASW #343
Uniting software development and application security - Jonathan Schneider, Will Vandevanter - ASW #342
How Product-Led Security Leads to Paved Roads - Julia Knecht - ASW #341
Rise of Compromised LLMs - Sohrob Kazerounian - ASW #340
Getting Started with Security Basics on the Way to Finding a Specialization - ASW #339
Checking in on the State of Appsec in 2025 - Sandy Carielli, Janet Worthington - ASW #338
Simple Patterns for Complex Secure Code Reviews - Louis Nyffenegger - ASW #337
How Fuzzing Barcodes Raises the Bar for Secure Code - Artur Cygan - ASW #336
Threat Modeling With Good Questions and Without Checklists - Farshad Abasi - ASW #335
Bringing CISA's Secure by Design Principles to OT Systems - Matthew Rogers - ASW #334
AIs, MCPs, and the Acutal Work that LLMs Are Generating - ASW #333
AI in AppSec: Agentic Tools, Vibe Coding Risks & Securing Non-Human Identities - Mo Aboul-Magd, Brian Fox, Mark Lambert, Shahar Man - ASW #332
Appsec News & Interviews from RSAC on Identity and AI - Charlotte Wylie, Rami Saas - ASW #331
Secure Code Reviews, LLM Coding Assistants, and Trusting Code - Rey Bango, Karim Toubba, Gal Elbaz - ASW #330
AI Era, New Risks: How Data-Centric Security Reduces Emerging AppSec Threats - Idan Plotnik, Vishal Gupta - ASW #329
Secure Designs, UX Dragons, Vuln Dungeons - Jack Cable - ASW #328
Managing Secrets - Vlad Matsiiako - ASW #327
More WAFs in Blocking Mode and More Security Headaches from LLMs - Sandy Carielli, Janet Worthington - ASW #326
In Search of Secure Design - ASW #325
Avoiding Appsec's Worst Practices - ASW #324
Finding a Use for GenAI in AppSec - Keith Hoodlet - ASW #323
Redlining the Smart Contract Top 10 - Shashank - ASW #322
Skype Hangs Up, Android Backdoors, Jailbreak Research, Pretend AirTags, Wallbleed - ASW #321
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321
QR Codes Replacing SMS, MS Pulls VSCode Extension, Threat Modeling, Bybit Hack - ASW #320
Keeping Curl Successful and Secure Over the Decades - Daniel Stenberg - ASW #320
Regex DoS, LLM Backdoors, Secure AI Architectures, Rust Survey - ASW #319
Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319
Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318
Unforgivable Vulns, DeepSeek iOS App Security Flaws, Memory Safety Standards - ASW #317
Code Scanning That Works With Your Code - Scott Norberg - ASW #317
New SLAP & FLOP Attacks, OCSP Fades Away, DeepSeek's ClickHouse, OAuth 2.0 Security - ASW #316
Threat Modeling That Helps the Business - Sandy Carielli, Akira Brand - ASW #316
Opengrep & Semgrep, Hacking Subarus, Hacking Synths, Stealing Cookies, and RANsacked - ASW #315
Security the AI SDLC - Niv Braun - ASW #315
Appsec Predictions for 2025 - Cody Scott - ASW #314
PyPI's Quarantine, Phishing & Awareness, Porting Fishshell to Rust, Cyber Trust Mark - ASW #313
Discussing Useful Security Requirements with Developers - Ixchel Ruiz - ASW #313