All Episodes
Application Security Weekly (Video) — 730 episodes · page 3 of 8
Fuzzing Strategies, Responding to CISA's Open Source Security RFI, 35 Year Old Worm - ASW #263
How 2023 Changed Application Security and What's to Come in 2024 - Karl Triebes - ASW #263
Citrix Bleed, Atlassian Authz Vuln, OpenJS & jQuery, Secure Future Initiative - ASW #262
Security from a Developer's Perspective - Josh Goldberg - ASW #262
Abusing OAuth, State of DevOps, Nightshade and AI, iLeakage, Sandboxing Apps - ASW #261
How Security Tools Must Evolve - Dan Kuykendall - ASW #261
Okta Breach, SolarWinds RCEs, CISOs and Boards, Crypto Business Logic, Secure Design - ASW #260
OAuth, WebAuthn, and the Impact of Design Choices - Dan Moore - ASW #260
HTTP/2 Rapid Reset, Curl's SOCKS5 Bug, Standardizing CycloneDX, AI Bug Bounty - ASW #259
OT Security - Huxley Barbee - ASW #259
Curl's Impending Patch, Glibc's Looney Tunables, ShellTorch, Another Top 10 List - ASW #258
Shifting Focus to Make DevSecOps Successful - Janet Worthington - Janet Worthington - ASW #258
A Deceptive Dependabot, Insecure JWT, CISA Wants HBOMs, OpenSSF's Critical Projects - ASW #257
Creating Presentations and Training That Engage an Audience - Lina Lau - ASW #257
Equifax's Breach, CISA's 1,000 Vulns, Rust's TLS Library, Complexity vs. Design - ASW #256
Supply Chain Security Security with Containers and CI/CD Systems - Kirsten Newcomer - ASW #256
Azure's Eight XSS Vulns, CNCF's Two Security Audits, CISA's OSS Roadmap, Repojacking - ASW #255
Stopping Business Logic Attacks: Why a WAF is no Longer Enough - Karl Triebes - ASW #255
Microsoft Dumps a Key, Grafana Logs a Key, URL Parsers Disagree, Old Bug in Ubuntu - ASW #254
Building a Scanner and a Community with Zed Attack Proxy - Simon Bennetts - ASW #254
Broadening What We Call AppSec - Christien Rioux - ASW Vault
Go Crypto in Practice, Excel Executes Python, Protecting Users, DARPA Distills - ASW #253
How Can Security Be Smart About Using AI? - Jeff Pollard - ASW #253
Discord.io Stops, Azure AD Pops, Zoom AI Drops, Model Confusion Attacks, Early XSS - ASW #252
Security in a Cloud Native World & Mobile App Attacks - Asaf Ashkenazi, Jason Rolleston - ASW #252
DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251
Pointers and Perils for Presentations - Josh Goldberg - ASW #251
Zap's New Home, Clang & Security Tools, LLM Attacks, Rust Supply Chain - ASW #250
You've Got Appsec, But Do You Have ArchSec? - Merritt Baer - ASW #250
Zenbleed, Drop in Zero-Days, Security Testing Handbook, Public Speaking - ASW #249
Identity and Verifiable Credentials in Cars - Eve Maler - ASW #249
SSH-Agent RCE, CTFs & bug bounties, Satellite Security, Cyber Trust Mark, Bad.Build - ASW #248
Navigating the Complexities of Development to Create Secure APIs with Kristen Bell - Kristen Bell - ASW #248
Kubernetes and silentbob strike back, EV charger hacking, fake POCs - ASW #247
Securing Non-Election Election Systems, Modernizing AppSec Education - Brian Glas - ASW #247
Developer-Focused Security - Melinda Marks - ASW #246
Software Trust & Adversaries - Shannon Lietz - ASW #246
The Psychology of Training - Matias Madou - ASW Vault
XSS in Azure, Choosing Web Research Topics, Security Dev-in-Residence, More Myths - ASW #245
Invicti AppSec Indicator: Latest Web Vulnerability Trends & Best Practices - Patrick Vandenberg - ASW #245
Policy Momentum in Coordinated Vulnerability Disclosure - Amit Elazari - ASW Vault
Verizon DBIR, CVSS 4.0, Security at Scale, Big IAM Challenge - ASW #244
Eliminate Security Vulnerabilities with App Modernization and Identity Orchestration - Eric Olden - ASW #244
LLM Top 10, Simple Vulns, PyPI Requires 2FA, ThinkstScapes Quarterly, Fun w/ Learning - ASW #243
What's the Deal with API Security? - Sandy Carielli - ASW #243
Doing Application Security Right - Farshad Abasi - ASW Vault
New TLDs Zip By, eBPF Fuzzer, Microsoft Rocks Rust, Unwanted Tracking Spec - ASW #242
Ten Things I Hate About Lists - ASW #242
Staying Ahead of Hackers: Protecting Mobile Apps & Detecting Malicious Packages - Asaf Ashkenazi, Jeff Martin - ASW #241
What to Do When the Honeymoon Period Ends - Chris Eng - ASW #241
Strengthening Your Security Position: Detecting Software Supply Chain Breaches - ASW #240
Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW #240
Mitigating AppSec Risk with Systematic Testing and Effective Attack Mitigation - Karl Triebes, Patrick Vandenberg - ASW #239
Application Security Maturity and Frameworks - Francesco Cipollone - ASW #239
A Forecast for Threat Groups, K8s Security Audit, GhostToken on Google, BrokenSesame - ASW #238
The Intersection of Hacking, Technology, and Civil Society with Jeff Moss - Jeff Moss - ASW #238
Deps.dev API, Right to Repair Tractors, Secure by Design, WebSockets, Adversarial AI - ASW #237
Collecting Bounties and Building Communities - Ben Sadeghipour - ASW #237
Application Security in Cloud - Vandana Verma Sehgal - ASW #236
JSON and a Regex, IoT Passwords, CAN Injection, Twitter CVE, Complexity, Tabletops - ASW #236
BingBang, Super FabriXss, 3CX on macOS, Secure Code Game, Real World Crypto 2023 - ASW #235
Learning eBPF - Liz Rice - ASW #235
OpenAI Info Leak, BitCoin ATM Hack, GitHub RSA SSH Key, Measuring AI Security - ASW #234
Real-life Examples. Benefits, Risk & Security Implications of AI - Frank Catucci - ASW #234
PassTheHash from Outlook, RCE in Modem Chipset, OpenSSH Sandboxes, Curl's Anniversary - ASW #233
Automating Security With Static Analysis - Josh Goldberg - ASW #233
Loom Disclosure, GitHub 2FA, Buffer Overflow in TPM, Dropbox Career Framework - ASW #232
The OWASP ASVS and Sustainable Software Security Practices - Josh Grossman - ASW #232
WebSocket Hijack, Post-Quantum Side-Channel, OWASP's Future, OAuth Misconfigs, ZAP - ASW #231
A Deep Dive Into Software Supply Chain Security - Neatsun Ziv - ASW #231
Twitter 2FA, Server-Side Prototype Pollution, AI Security & Privacy, Smarter Testing - ASW #230
Supply Chain Breaches and Hacking the Cloud: Lessons Learned from IR - Lina Lau - ASW #230
Reddit Breach, Toyota Bugs, OpenSSL Vulns, Top 10 Web Hacking Techniques of 2022 - ASW #229
What's the Best Way to Threat Model? - Nick Selby - ASW #229
Aviation ASCII Art, OpenSSH Double-Free, F5 Format String, OSC&R for Supply Chains - ASW #228
Myths and Lies in Infosec - Adrian Sanabria - ASW #228
Source Leaks, BIND DoS, Refactoring Go to Typescript, Git Audit & Rust, SQL Slammer - ASW #227
There Is No Average Behavior - Dr. David Movshovitz - ASW #227
Breach Disclosures, SSRF in Azure, Integer Flaws, Top 10 Web Hacking Techniques - ASW #226
Crafting Security Training for Secure Code and Security Culture - Marudhamaran Gunasekaran - ASW #226
CircleCI Breach, Vulns in Auto Sites, Google Speaker Bugs, Office Space, S3 Defaults - ASW #225
Securing your APIs using OAuth - Dan Moore - ASW #225
Security Product Metrics, ML 101, PEACH for Cloud, Log4Shell Lookback, Appsec Tools - ASW #224
DevSecOps Essentials - Keith Hoodlet - ASW #224
Another Ping of Death, Clever JSON Manipulation, iCloud Encryption, ChatGPT Threats - ASW #223
Redefining Threat Modeling - Security Team Goes on Vacation - Jeevan Singh - ASW #223
Android Platform Certs Leaked, Hell's Keychain, Web Hacking Cars, Bug Bounty Tips - ASW #222
Inoculating Malicious Content: Making File Types Safe to Handle - Aviv Grafi - ASW #222
AWS AppSync Vuln, Zero-Initialization, HTTP/3 Connections, Thinkst Quarterly - ASW #221
Searching on Encrypted Data: MongoDB's Queryable Encryption - Kenn White - ASW #221
CosMiss, Pixel Lock Screen Bypass, IIoT Path Traversal, NSA on C & C++, Code Reviews - ASW #220
The Top 10 CI/CD Security Risks and CI/CD Goat - Daniel Krivelevich - ASW #220
Punycode in OpenSSL, Authn in Cosmos DB Notebooks, Documenting Security, IoT Labels - ASW #219
Bad Bots are Targeting Your APIs: What You Need to Know - Karl Triebes - ASW #219
Critical OpenSSL Vuln, SQLite Vuln, Apple Security Blog, Randomness & Shuffling - ASW #218
Understanding Web3 Application Security - Sandy Carielli, Martha Bennett - ASW #218
Text4Shell, GUAC for SLSA, OpenSSF Scorecards, Toner Deaf, OWASP Elections - ASW #217
Kubernetes, Container and Cloud Best Practices for Securing Cloud Apps and Hardening - Kong Yew Chan - ASW #217
FortiOS Exploit, Linux Kernel Wi-Fi Vulns, Infosec Communities, Secure Coding - ASW #216
How NVIDIA Uses AI to Address Cybersecurity Challenges - Jason Recla - ASW #216