All Episodes
Application Security Weekly (Video) — 730 episodes · page 2 of 8
Removing Rust, Double Clickjacking, h3i CLI, JWT Mistakes, Reviewing Recursion - ASW #312
DefectDojo and Bringing Quality Appsec Tools to Small Appsec Teams - Greg Anderson - ASW #312
Ancient Curl Bug, AWS re:Invent, Malware in NPM, Census III Report, MS OTP - ASW #311
Applying Usability and Transparency to Security - Hannah Sutor - ASW #311
AI's Junk Vulns, Web3 Backdoor, LLM CTFs, 5 GenAI Mistakes, Top Ten for LLMs - ASW #310
Looking Back on 2024 - ASW #310
Fuzzing Barcodes, Fuzzing with AI, AI vs. Scammers, CWEs, Repo Swatting - ASW #309
Adding Observability with OpenTelemetry - Adriana Villela - ASW #309
AI fixes everything, C++ the actual worst, IAM is hard - ASW #308
Biometric Frontiers: Unlocking The Future Of Engagement - Andras Cser, Enza Iannopollo - ASW #308
Typosquatting NPM, vulnerability analysis, and AI challenges - ASW #307
Modernizing AppSec - Melinda Marks - ASW #307
Total Recall? LLM finds bug in SQLite, C++ safety failures, zero time for zero privs - ASW #306
Bug bounties, vulnerability disclosure, PTaaS, fractional pentesting - Grant McCracken - ASW #306
Protecting Identity of AI Agents & Standardizing Identity Security for SaaS Apps - Shiven Ramji, Arnab Bose - ASW #305
Making TLS More Secure, Lessons from IPv6, LLMs Finding Vulns - ASW #305
JSON Parsing, Email Parsing, CISA's Bad Practices Guide, Abusing Disclosure Policies - ASW #304
The Complexities, Configurations, and Challenges in Cloud Security - Scott Piper - ASW #304
Perl & PHP Vulns, Fuzzing & Parsers, Protecting Multi-Hosted Tenants, Secure Design - ASW #303
RCE from Iconv + PHP, Fuzzing a Codec, Fuzzing LLMs, Revisiting Recall - ASW #302
The Future of Zed Attack Proxy - Simon Bennetts, Ori Bendet - ASW #302
More Car Hacks, CUPS Vulns, Microsoft's SFI, Memory Safety, Password Complexity - ASW #301
Fuzzing for Vulns, GitLab Auth Bypass, JPEG Vulns, Programming Language Ranks - ASW #300
Vulnerable APIs and Bot Attacks: Two Interconnected, Growing Security Threats - David Holmes - ASW #300
A TLD Takeover, An LLM CTF, A Firmware Flaw, 6 Truths of Cyber Risk - ASW #299
Bringing Secure Coding Concepts to Developers - Dustin Lehr - ASW #299
Paying Down Tech Debt, Rust in Firmware, EUCLEAK, Deploying SSO - ASW #298
Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW Vault
Apache HTTPD Vulns, Hacking IoT Speakers, Use Cases for WASM, Slack AI Leak - ASW #297
Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297
Navigating the Path to Maturity & AI is helping combat cyber threats - Shimon Modi, Boaz Barzel - ASW #296
The Fallout and Lessons Learned from the CrowdStrike Fiasco - Allie Mellen, Jeff Pollard - ASW #296
Reducing Supply Chain Risk & What's lurking in your phone? - Danny Jenkins, Nikos Kiourtis - ASW #295
When Appsec Needs to Start Small - Kalyani Pawar - ASW #295
Dead Code, CrowdStrike's Kernel Lessons, VMs & Security Boundaries, SLUBStick Attack - ASW #294
Building Successful Security Champions Programs - Marisa Fagan - ASW #294
A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293
SAPwned, Squarespace Domain Hijacks, AIs Fixing Code, Infosec Investments - ASW #292
Where Generative AI Can Actually Help Security (And Where It Doesn't) - Allie Mellen, Farshad Abasi - ASW #292
A 2024 Appsec Report, Preparing for the AIxCC, Secure Design and Post-Quantum Crypto - ASW #291
Producing Secure Code by Leveraging AI - Stuart McClure - ASW #291
State Of Application Security 2024 - Sandy Carielli, Janet Worthington - ASW #290
Polyfill Empties Trust, regreSSHion, CocoaPods Vulns & Secure Design, LLM Bughunters - ASW #290
Shared Responsibility Models, AI in Offensive Security, Apple's Private Cloud Compute - ASW #289
OAuth 2.0 from Protecting APIs to Supporting Authorization & Authentication - Aaron Parecki - ASW #289
Learning EBPF - Liz Rice - ASW Vault
Microsoft Recall's Security & Privacy, Hacking Web APIs, Secure Design Pledge - ASW #288
Bots are Taking Over the Internet & Defining ASPM - Idan Plotnik, Erez Hasson - ASW #287
Open Source Software Supply Chain Security & The Real Crisis Behind XZ Utils - Luis Villa - ASW #287
Securing Shadow Apps & Protecting Data - Guy Guzner, Pranava Adduri - ASW Vault
Collecting Bounties and Building Communities - Ben Sadeghipour - ASW Vault
Unpacking XDR & Business Applications - Chris Thomas, Oliver Tavakoli - ASW #286
Node.js Secure Coding - Liran Tal - ASW #286
The Enterprise Browser & AI in Securing Software and Supply Chains - Mike Fey, Josh Lemos - ASW #285
Inside the OWASP Top 10 for LLM Applications - Sandy Dunn - ASW #285
Hacking AI Bias with Human Techniques - Keith Hoodlet - ASW #284
AI & Hype & Security (Oh My!) - Caleb Sima - ASW #284
Random Problems, Protecting Packages, and Vulns in Designs, Defaults & Data Leaks - ASW #283
Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283
XZ & Open Source, PuTTY's Private Keys, LeakyCLI, LLMs Writing Exploits - ASW #282
Sustainable Funding of Open Source Tools - Simon Bennetts, Mark Curphey - ASW #282
Arg Parsing in Rust, End of Life Hardware, CSRB & MS, Chrome's V8 Sandbox - ASW #281
Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281
OWASP Breach, Types of Prompt Injection, Device-Bound Sessions, ASVS & APIs - ASW #280
Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280
Top 10's First Update, Metasploit's Second Update, PHP Prepares Statements, RSA & MS - ASW #279
Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279
Successful Security Needs a Streamlined UX - Benedek Gagyi - ASW #278
GoFetch Side Channel, OpenSSF & Security Education, Fuzzing vs. Formal Verification - ASW #278
Vulns in Smart Locks, FCC labels for IoT, ZAP's New Home - ASW #277
Figuring Out Where Appsec Fits When Starting a Cybersecurity Program - Tyler VonMoll - ASW #277
TeamCity Authn Bypass, ArtPrompt Attacks, Low Quality Vuln Reports, Secure by Design - ASW #276
More API Calls, More Problems: The State of API Security in 2024 - Lebin Cheng - ASW #276
SAML & Secrets, Serializing AI Models, OWASP ISTG, More Memory Safety - ASW #275
The Simple Mistakes and Complex Seeds of a Vulnerability Management Program - Emily Fox - ASW #275
PrintListener, Post-Quantum Crypto in iMessage, Silent Sabotage, Rust Survey Results - ASW #274
Creating the Secure Pipeline Verification Standard - Farshad Abasi - ASW #274
Redefining Threat Modeling - Security Team Goes on Vacation - Jeevan Singh - ASW Vault
LLMs & Security Tools, Shim Vuln, AI Threat Models, Configuration as Code with Pkl - ASW #273
Creating Code Security Through Better Visibility - Christien Rioux - ASW #273
Sorting Out Glibc Vulns, Apple's Security Research Device, BoringSSL, Old C Vulns - ASW #272
Starting an OWASP Project (That's Not a List!) - Grant Ongers - ASW #272
Vulns & Secure Design, MiraclePtr Success, Abandoned Projects & Maven, Old "AI Chip" - ASW #271
Getting Your First Conference Presentation - Sarah Harvey - ASW #271
Security in Wrenches, Vulns in Atlassian and GitLab, 2023's Top Web Hacking Tricks - ASW #270
Dealing with the Burden of Bad Bots - Sandy Carielli - ASW #270
Communicating Technical Topics Without Being Boring - Eve Maler - ASW #269
23andMe Blames Users, Abusing Google's OAuth2, Rustls Performance, AI Goes OSINT - ASW #268
What's in Store for 2024? - ASW #268
HTTP RFCs Have Evolved, Breaking Into Cloud, Scaling AppSec at Netflix, & Confluence - Keith Hoodlet - ASW Vault
OWASP SAMM - Software Assurance Maturity Model - Sebastian Deleersnyder - ASW Vault
Nagios and Abandoned Projects, Hacking Trains (to Fix Them), OAuth Threats, 5Ghoul - ASW #267
Making Service Meshes Work for People - Idit Levine - ASW #267
Prompt Injection Scanners, Better AI Jailbreaks, Purple Llama, Linux Kernel Security - ASW #266
The ABCs of RFCs - Heather Flanagan - ASW #266
Extracting Data from ChatGPT, Vulns Around AI, Secure AI Guidance, LogoFAIL, BLUFFS - ASW #265
All the News -- Just Six Months Later - ASW #265
Randstorm, Nothing Chats, Platform Engineering, PyPI Security Audit - ASW #264
Starting with Appsec -- Is It More of a Position or a Process? - ASW #264
Platform Firmware Security - Maggie Jauregui - ASW Vault